Scope Updates
Recent changes to bug bounty program scopes.
| Change | Asset | Category | Scope | Program | Platform | Time |
|---|---|---|---|---|---|---|
| Added | share.doctolib.net | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | store.doctolib.com | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | doctolib.zendesk.com | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | doctolib.atlassian.net | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | doctocommit.doctolib.fr | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | community.doctolib.com|.fr|.de|.it | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | note: should you discover a critical issue within an asset that falls outside the program's scope, we would appreciate it and may choose to offer a reward at our discretion | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | systemd-networkd | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | anything related to https://systemd.io | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | journal sealing in systemd-journald: there are known issue that need to be solved first, before this feature can be included in the program | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | anything related to the ci pipeline or github related hosting | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | anything related to *.ntpd-rs.pendulum-project.org | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | anything related to the ntpv5 and/or nts pool ke features (both disabled by default), unless it impacts other parts of the software | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | known protocol limitations related to the ntp protocol | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | anything not specifically listed as in-scope is out-of-scope | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | anything that is not explicitely listed in the ‘scope’ section | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | *.owncloud.com | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | *.owncloud.org | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | synctool v2 | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | zivver cloud sync for azure | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | chargebee.com which is our subscription management partner | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | hubspot.com which hosts our marketing webpage | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | any other zivver domain or service not explicitly mentioned in the scope | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 | |
| Added | third-party widgets on www.datadome.co and app.datadome.co | OTHER | Out of Scope | YesWeHack | 2026-02-21 00:33 |