Scope Updates

Recent changes to bug bounty program scopes.

	Asset / Change	Scope Type	Program URL	Platform	Timestamp
+	Program Added		https://app.intigriti.c...ido/aikidoruntime/detail	intigriti	2025-07-08 10:30
Associated Assets: OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-node#False Positive OTHER: https://github.com/AikidoSec/firewall-python#False Positive
+	Program Added		https://bugcrowd.com/engagements/canva	bugcrowd	2025-07-08 09:43
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
+	Program Removed		https://bugcrowd.com/engagements/canva	bugcrowd	2025-07-08 09:07
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
+	Program Added		https://app.intigriti.c...datacamp/datacamp/detail	intigriti	2025-07-08 08:30
Associated Assets: URL: app.datacamp.com/certification URL: app.datacamp.com/groups URL: app.datacamp.com/learn URL: assessment-api.datacamp.com URL: assessment-v2.datacamp.com URL: assessment.datacamp.com URL: campus.datacamp.com ANDROID: com.datacamp IOS: https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087 URL: practice.datacamp.com URL: projects.datacamp.com URL: www.datacamp.com URL: www.datacamp.com/datalab WILDCARD: .datacamp.com WILDCARD: .it.datacamp.com URL: app.datacamp.com/recruit URL: ast-viewer.datacamp.com URL: confluence.datacamp.com URL: dccertified.datacamp.com URL: intranet.datacamp.com URL: jira.datacamp.com URL: links.datacamp.com URL: rdocumentation.datacamp.com URL: signature.datacamp.com URL: status.datacamp.com URL: support.datacamp.com URL: talent-jobs-api.datacamp.com
	Asset Added: APPLE_STORE_APP_ID: 6670536058	In Scope	https://hackerone.com/eternal	hackerone	2025-07-08 07:37
	Asset Added: APPLE_STORE_APP_ID: 960335206	In Scope	https://hackerone.com/eternal	hackerone	2025-07-08 07:37
	Asset Added: GOOGLE_PLAY_APP_ID: com.application.zomato.district	In Scope	https://hackerone.com/eternal	hackerone	2025-07-08 07:32
	Asset Removed: WEB-APPLICATION: https://vfsuserverification.azurewebsites.net/	In Scope	https://yeswehack.com/p...lobal-bug-bounty-program	yeswehack	2025-07-08 07:30
	Asset Removed: WEB-APPLICATION: https://vfs-ai-doc-reader.azurewebsites.net/	In Scope	https://yeswehack.com/p...lobal-bug-bounty-program	yeswehack	2025-07-08 07:30
+	Program Added		https://app.intigriti.c...ios/embarkstudios/detail	intigriti	2025-07-08 05:30
Associated Assets: WILDCARD: .es-dis.net WILDCARD: .es-pio.net URL: auth.embark.net URL: id.embark.games WILDCARD: *.observability.embark.net URL: asset-metadata-api.embark.net URL: github.com/EmbarkStudios/presser URL: grafana.embark.net URL: has.embark.net URL: p4-submit-service.embark.net URL: perforce.embark.net URL: swarm.embark.net URL: user-lookup-api.embark.net URL: vpn.embark.net URL: arcraiders.com URL: embark-studios.com URL: github.com/EmbarkStudios/cargo-about URL: github.com/EmbarkStudios/cargo-deny URL: github.com/EmbarkStudios/crash-handling URL: reachthefinals.com
+	Program Added		https://hackerone.com/skale_network	hackerone	2025-07-07 08:52
Associated Assets: SOURCE_CODE: https://github.com/skalenetwork/skale-consensus SOURCE_CODE: https://github.com/skalenetwork/libBLS SOURCE_CODE: https://github.com/skalenetwork/sgxwallet SOURCE_CODE: https://github.com/skalenetwork/skale-manager/tree/develop/contracts SOURCE_CODE: https://github.com/skalenetwork/skale-node-cli SOURCE_CODE: https://github.com/skalenetwork/validator-cli WILDCARD: *.skale.network
+	Program Removed		https://app.intigriti.c...datacamp/datacamp/detail	intigriti	2025-07-07 07:00
Associated Assets: URL: app.datacamp.com/certification URL: app.datacamp.com/groups URL: app.datacamp.com/learn URL: assessment-api.datacamp.com URL: assessment-v2.datacamp.com URL: assessment.datacamp.com URL: campus.datacamp.com ANDROID: com.datacamp IOS: https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087 URL: practice.datacamp.com URL: projects.datacamp.com URL: www.datacamp.com URL: www.datacamp.com/datalab WILDCARD: .datacamp.com WILDCARD: .it.datacamp.com URL: app.datacamp.com/recruit URL: ast-viewer.datacamp.com URL: confluence.datacamp.com URL: dccertified.datacamp.com URL: intranet.datacamp.com URL: jira.datacamp.com URL: links.datacamp.com URL: rdocumentation.datacamp.com URL: signature.datacamp.com URL: status.datacamp.com URL: support.datacamp.com URL: talent-jobs-api.datacamp.com
	Asset Added: OTHER: All In Scope Targets	In Scope	https://bugcrowd.com/engagements/moovit-mbb-og	bugcrowd	2025-07-07 06:39
+	Program Added		https://app.intigriti.c...f/veriffbugbounty/detail	intigriti	2025-07-07 06:00
Associated Assets: IOS: 1467907532 URL: alchemy.veriff.com URL: api.flamingo-eu.veriff.com URL: api.us.veriff.me URL: api.veriff.me ANDROID: com.veriff.demo URL: louvre.veriff.me URL: magic.veriff.me URL: station.veriff.com URL: stationapi.veriff.com WILDCARD: *.veriff.com URL: developers.veriff.me URL: www.veriff.com URL: https://station.veriff.com/config/
+	Program Added		https://app.intigriti.c...undtrackyourbrand/detail	intigriti	2025-07-07 06:00
Associated Assets: IOS: 1114799709 IOS: 1114800186 URL: api.soundtrackyourbrand.com URL: billing.api.soundtrackyourbrand.com URL: builds.soundtrackyourbrand.com URL: business.soundtrackyourbrand.com ANDROID: com.soundtrackyourbrand.soundtrack.player URL: https://auth.api.soundtrackyourbrand.com/ OTHER: https://builds.soundtrackyourbrand.com/download/WIN32SOUNDTRACK/latest URL: https://radio.api.soundtrackyourbrand.com/ URL: https://www.soundtrackyourbrand.com OTHER: macOS app
+	Program Added		https://app.intigriti.c...datacamp/datacamp/detail	intigriti	2025-07-07 06:00
Associated Assets: URL: app.datacamp.com/certification URL: app.datacamp.com/groups URL: app.datacamp.com/learn URL: assessment-api.datacamp.com URL: assessment-v2.datacamp.com URL: assessment.datacamp.com URL: campus.datacamp.com ANDROID: com.datacamp IOS: https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087 URL: practice.datacamp.com URL: projects.datacamp.com URL: www.datacamp.com URL: www.datacamp.com/datalab WILDCARD: .datacamp.com WILDCARD: .it.datacamp.com URL: app.datacamp.com/recruit URL: ast-viewer.datacamp.com URL: confluence.datacamp.com URL: dccertified.datacamp.com URL: intranet.datacamp.com URL: jira.datacamp.com URL: links.datacamp.com URL: rdocumentation.datacamp.com URL: signature.datacamp.com URL: status.datacamp.com URL: support.datacamp.com URL: talent-jobs-api.datacamp.com
+	Program Added		https://app.intigriti.c...rograms/miro/miro/detail	intigriti	2025-07-07 05:30
Associated Assets: URL: https://miro.com/ URL: https://miro.com/app URL: static-website.miro.com URL: mirostatic.com URL: https://mirosite.com/ WILDCARD: https://api.miro.com/* OTHER: Miro SDK URL: https://miro.com/insights/app URL: https://miro.com/blog/ OTHER: eu01.miro.com OTHER: us01.miro.com OTHER: au01.miro.com OTHER: svc.eu01.miro.com OTHER: svc.us01.miro.com OTHER: svc.au01.miro.com OTHER: svg-convert.eu01.miro.com OTHER: svg-convert.us01.miro.com OTHER: svg-convert.au01.miro.com OTHER: r.eu01.miro.com, r01.eu01.miro.com, r02.eu01.miro.com OTHER: r.us01.miro.com, r01.us01.miro.com, r02.us01.miro.com OTHER: r.au01.miro.com, r01.a01.miro.com, r02.au01.miro.com OTHER: eventhub.eu01.miro.com OTHER: eventhub.us01.miro.com OTHER: eventhub.au01.miro.com OTHER: integrations.eu01.miro.com OTHER: integrations.us01.miro.com OTHER: integrations.au01.miro.com IOS: 1180074773 ANDROID: com.realtimeboard OTHER: MacOs Desktop Application OTHER: Windows Desktop Application OTHER: Confluence Cloud Plugin for Miro OTHER: Jira Cards for Miro OTHER: Jira Cloud Plugin for Miro WILDCARD: miro.com/contact/* OTHER: MarketPlace Submission Process OTHER: Feedback forms URL: https://community.miro.com/ URL: https://developers.miro.com/ WILDCARD: https://help.miro.com/* URL: https://status.miro.com WILDCARD: miro.com/careers/vacancy/* OTHER: trcksplt.miro.com URL: https://uizard.io/ URL: https://support.uizard.io/
+	Program Added		https://app.intigriti.c...simscale/simscale/detail	intigriti	2025-07-07 05:30
Associated Assets: OTHER: SimScale API OTHER: SimScale Platform WILDCARD: https://www.simscale.com/api/v1/projects/* WILDCARD: www.simscale.com/forum/users/*.json
+	Program Added		https://app.intigriti.c...eeper/lansweeper1/detail	intigriti	2025-07-07 05:30
Associated Assets: URL: edge.lansweeper.com URL: api.lansweeper.com URL: app.lansweeper.com URL: backoffice.lansweeper.com URL: https://lsagentrelay.lansweeper.com/ URL: Modernized Discovery URL: app.lansweeper.com/trial URL: autoupdateapi.lansweeper.com URL: docs.lansweeper.com URL: login.lansweeper.com URL: on-premises software URL: www.lansweeper.com OTHER: lsrunase2.0 and lsencrypt2.0 URL: careers.lansweeper.com URL: www.lansweeper.com/forum
+	Program Added		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-07-07 05:00
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Added		https://app.intigriti.c.../privatebankdelen/detail	intigriti	2025-07-07 05:00
Associated Assets: URL: api.digital.delen.be URL: api.digital.delen.lu URL: app.delen.be URL: app.delen.ch URL: app.delen.lu URL: auth.digital.delen.be URL: auth.digital.delen.lu ANDROID: be.delen.digital IOS: delen/id1064839588 URL: login.delen.be URL: login.delen.ch URL: login.delen.lu URL: login.oyens.com URL: status.delen.be URL: sts.delen.be URL: www.cadelam.be URL: www.cadelux.lu/en URL: www.delen.bank URL: www.delen.be/en
+	Program Added		https://yeswehack.com/p...al-public-bounty-program	yeswehack	2025-07-07 02:30
Associated Assets: MOBILE-APPLICATION-IOS: https://apps.apple.com/id/app/gopay-transfer-pulsa-bills/id6446321594 MOBILE-APPLICATION-ANDROID: https://play.google.com/store/apps/details?id=com.gojek.gopay&hl=id WEB-APPLICATION: *.gopayapi.com
+	Program Added		https://yeswehack.com/p...gojek-bug-bounty-program	yeswehack	2025-07-07 02:30
Associated Assets: API: *.gojekapi.com MOBILE-APPLICATION-ANDROID: https://play.google.com/store/apps/details?id=com.gojek.app MOBILE-APPLICATION-IOS: https://apps.apple.com/id/app/gojek/id944875099
+	Program Removed		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-07-06 14:30
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Removed		https://app.intigriti.c...f/veriffbugbounty/detail	intigriti	2025-07-06 13:30
Associated Assets: IOS: 1467907532 URL: alchemy.veriff.com URL: api.flamingo-eu.veriff.com URL: api.us.veriff.me URL: api.veriff.me ANDROID: com.veriff.demo URL: louvre.veriff.me URL: magic.veriff.me URL: station.veriff.com URL: stationapi.veriff.com WILDCARD: *.veriff.com URL: developers.veriff.me URL: www.veriff.com URL: https://station.veriff.com/config/

Scope Updates

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets: