alasco-gmbh-bug-bounty-program
4
In Scope
15
Out of Scope
In-Scope Assets (4)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.alasco.de | OTHER | Yes | - | |
| *.alasco.rocks | OTHER | Yes | - | |
| api.alasco.de | URL | Yes | ||
| app.alasco.de | URL | Yes |
Out-of-Scope Assets (15)
| Asset | Category | Bounty | |
|---|---|---|---|
| Alasco will not provide access credentials to any system, not for testing and also not for issue validation. | OTHER | Yes | |
| All other domains or subdomains not listed in the above list of 'Scopes'. | OTHER | Yes | |
| Attention: Third-party managed infrastructure (e.g. HubSpot, Salesforce, or other SaaS platforms) where Alasco has no ability to remediate vulnerabilities at the infrastructure or platform level, regardless of the subdomain. | OTHER | Yes | |
| However, any vulnerability discovered in a system or service that requires a login to access is outside the scope of this program. | OTHER | Yes | |
| Please note that all non-authenticated areas of our systems are in scope for this program. This means that any vulnerability discovered in a system or service that does not require a login to access is eligible for a reward. | OTHER | Yes | |
| alasco.com | OTHER | Yes | |
| alasco.de | OTHER | Yes | |
| explore.alasco.com | OTHER | Yes | |
| explore.alasco.de | OTHER | Yes | |
| lp.alasco.com | OTHER | Yes | |
| lp.alasco.de | OTHER | Yes | |
| support.alasco.com | OTHER | Yes | |
| support.alasco.de | OTHER | Yes | |
| www.alasco.com | OTHER | Yes | |
| www.alasco.de | OTHER | Yes |