Kiteworks Public Bug Bounty Program

{
  "id": "kiteworks-public-bug-bounty-program-1",
  "name": "Kiteworks Public Bug Bounty Program",
  "public": true,
  "managed": null,
  "targets": {
    "in_scope": [
      {
        "type": "challenge",
        "target": "Crown Jewel Heist"
      },
      {
        "type": "web-application",
        "target": "Kiteworks Core"
      },
      {
        "type": "web-application",
        "target": "Email Protection Gateway (EPG)"
      },
      {
        "type": "web-application",
        "target": "Managed File Transfer (MFT)"
      },
      {
        "type": "web-application",
        "target": "Secure Data Forms (SDF, aka Advanced Forms)"
      },
      {
        "type": "web-application",
        "target": "API Playground"
      },
      {
        "type": "mobile-application-android",
        "target": "Kiteworks Android App"
      },
      {
        "type": "mobile-application-ios",
        "target": "Kiteworks iOS App"
      },
      {
        "type": "application",
        "target": "Kiteworks for Desktop"
      },
      {
        "type": "application",
        "target": "Kiteworks Desktop Client 2.0"
      },
      {
        "type": "application",
        "target": "Kiteworks for Outlook Desktop"
      },
      {
        "type": "application",
        "target": "Kiteworks for Office Desktop"
      }
    ],
    "out_of_scope": [
      {
        "type": "other",
        "target": "Testing is only authorized on the targets listed as in scope. Any domain/property of Kiteworks not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Kiteworks, you can report it here. However, be aware that it is ineligible for rewards or points-based compensation."
      }
    ]
  },
  "disabled": false,
  "max_bounty": 50000,
  "min_bounty": 0
}