Scope Updates
Recent changes to bug bounty program scopes.
| Change | Asset | Category | Scope | Program | Platform | Time |
|---|---|---|---|---|---|---|
| Added | pangle-mediation-ttp.tiktokpangle.us | URL | In Scope | HackerOne | 2026-01-22 02:40 | |
| Added | lemon8-api.tiktokv.us | URL | In Scope | HackerOne | 2026-01-22 02:35 | |
| Added | starling-ttp.lemon8-app.us | URL | In Scope | HackerOne | 2026-01-22 02:35 | |
| Added | *.tvg.com | WILDCARD | In Scope | HackerOne | 2026-01-21 19:35 | |
+Program Added | — | — | — | HackerOne | 2026-01-21 18:25 | |
Associated Assets:URLhttps://segment.com/docs/connections/sources URLapi.twilio.com URLtwilio apis URLhttp://tsock.us1.twilio.com WILDCARD*.sip.*.twilio.com OTHERhttps://www.twilio.com/en-us/blog/get-started-webrtc OTHERhttps://www.twilio.com/docs/libraries URLhttps://www.twilio.com/login?g=%2fconsole%3f&t=2b1c98334b25c1a785ef15b6556396290e3c704a9b57fc40687cbccd79c46a8c WILDCARDstatic*.twilio.com URLhttp://twilio.com/blog URLhttp://help.twilio.com URLsendgrid.com URLapp.sendgrid.com URLsignup.sendgrid.com URLapi.sendgrid.com URLmc.sendgrid.com OTHERsmtp.sendgrid.net ANDROIDhttps://www.authy.com/download IOShttps://www.authy.com/download URLhttps://www.twilio.com/docs/verify/api URLhttps://www.twilio.com/docs/authy/api URLapp.segment.com URLapi.segment.io OTHERany host/web property verified to be owned by twilio et al URLsignal.twilio.com URLstatus.twilio.com URLstore.twilio.com URLsupport.twilio.com URLsurveys.twilio.com URLtalks.twilio.com URLcommunity.segment.com URLstatus.segment.com URLwebinars.segment.com URLstatus.sendgrid.com URLsupport.sendgrid.com URLtransform.twilio.com URLwebinars.twilio.com URLlab.authy.com URLtwil.io URLtwiliotraining.com URLzipwhip.com OTHERall twilio acquisitions until explicitly noted under the in-scope targets OTHERytica and its assets OTHERelectric imp and its assets OTHERtwimlbins OTHERall kurento domains OTHERtwilio quest OTHERtwilio wireless URLhttp://segment.com/contact URLhttp://segment.com/jobs URLhttp://twilio.com/en-us/company/jobs URLhttp://twilio.com/labs OTHERthird-party services URLhttp://apjevents.twilio.com URLhttp://events.cdpweek.com | ||||||
| Added | andurilgear.com | URL | Out of Scope | HackerOne | 2026-01-20 20:01 | |
| Added | https://github.com/maticnetwork/bor | CODE | Out of Scope | HackerOne | 2026-01-20 18:40 | |
| Added | https://github.com/0xPolygon/heimdall-v2 | CODE | Out of Scope | HackerOne | 2026-01-20 18:40 | |
| Removed | https://github.com/0xPolygon/heimdall-v2 | CODE | In Scope | HackerOne | 2026-01-20 18:40 | |
| Removed | https://github.com/maticnetwork/bor | CODE | In Scope | HackerOne | 2026-01-20 18:40 | |
| Added | *.grateful.me | WILDCARD | In Scope | HackerOne | 2026-01-20 17:15 | |
| Added | https://github.com/moonpay/devops-challenge | CODE | Out of Scope | HackerOne | 2026-01-20 17:01 | |
| Added | https://github.com/moonpay/moonpay-demo-integrations | CODE | Out of Scope | HackerOne | 2026-01-20 16:55 | |
+Program Added | — | — | — | HackerOne | 2026-01-20 15:05 | |
Associated Assets:WILDCARD*.anduril.com WILDCARD*.andurildev.com WILDCARD*.anduril.dev WILDCARD*.andurildev.au WILDCARD*.anduril.au WILDCARD*.anduril.com.au OTHERanduril property and facilities | ||||||
| Added | devcenter.unico.io | URL | In Scope | HackerOne | 2026-01-16 19:20 | |
| Added | idcash-uat.unico.io | URL | In Scope | HackerOne | 2026-01-16 19:10 | |
| Added | blog.unico.io | URL | In Scope | HackerOne | 2026-01-16 19:10 | |
| Added | openfinance.unico.io | URL | In Scope | HackerOne | 2026-01-16 19:10 | |
| Added | secure.unico.io | URL | In Scope | HackerOne | 2026-01-16 19:10 | |
| Added | unico.io | URL | In Scope | HackerOne | 2026-01-16 19:10 | |
| Added | https://sdk-h1.unico.io/createprocess | URL | In Scope | HackerOne | 2026-01-16 19:05 | |
| Added | idpay-uat.unico.io | URL | In Scope | HackerOne | 2026-01-16 19:05 | |
| Added | issuer.idpay-uat.unico.io | URL | In Scope | HackerOne | 2026-01-16 19:05 | |
| Removed | crediariohomolog.acesso.io | URL | In Scope | HackerOne | 2026-01-16 19:05 | |
| Removed | signhom.acesso.io | URL | In Scope | HackerOne | 2026-01-16 19:05 | |