how we sort the index, not an estimate of what you’ll earn
Attack surface
9 in-scope
All domains or subdomains not list…in the above list of 'Scopes'otherOther subdomain of paymaya.com tha…art of the mobile applicationotherNon-Production environments (test, dev, staging, or sandbox)otherfirst indexed
92d ago · 9 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Maya - Public Bug Bounty Program.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "maya-public-bug-bounty-program",
"name": "Maya - Public Bug Bounty Program",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "mobile-application-android",
"target": "https://play.google.com/store/apps/details?id=com.paymaya"
},
{
"type": "mobile-application-ios",
"target": "https://apps.apple.com/am/app/maya-your-all-in-one-money-app/id991673877"
},
{
"type": "mobile-application",
"target": "https://appgallery.huawei.com/app/C101186357"
},
{
"type": "api",
"target": "https://api.paymaya.com/"
},
{
"type": "api",
"target": "https://pg.paymaya.com"
},
{
"type": "api",
"target": "https://payoutapi.maya.ph/"
},
{
"type": "api",
"target": "https://op.paymaya.com/"
},
{
"type": "api",
"target": "https://connect.paymaya.com/"
},
{
"type": "api",
"target": "https://paymayabiller-prod.paymaya.com/"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All domains or subdomains not listed in the above list of 'Scopes'"
},
{
"type": "other",
"target": "Other subdomain of paymaya.com that has no direct integration/part of the mobile application"
},
{
"type": "other",
"target": "Non-Production environments (test, dev, staging, or sandbox)"
}
]
},
"disabled": false,
"max_bounty": 5000,
"min_bounty": 50
}