Target Policy

https://hackerone.com/greenhouse?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• Tier 1 Assets

  OTHER

  critical
• Tier 3 Assets

  OTHER

  critical
• Tier 2 Assets

  OTHER

  critical
• api.greenhouse.io

  ---

  Documentation:

  https://developers.greenhouse.io/harvest.html
  https://developers.greenhouse.io/job-board.html#retrieve-a-department

  URL

  critical
• app.greenhouse.io

  URL

  critical
• store.greenhouse.io

  URL

  none
• jss.greenhouse.io

  URL

  critical
• onboarding.greenhouse.io

  URL

  critical
• community.greenhouse.io

  URL

  none
• resources.greenhouse.io

  URL

  none
• app.interseller.io

  ---

  Please do not spam the payment form as this is manage by a third party and is out of scope for testing. Vulnerabilities related to paywall bypass are out of scope.

  URL

  critical
• interseller.io

  ---

  This is a Marketing website and will produce less bounties than the actual product application

  URL

  critical
• boards.greenhouse.io

  URL

  critical
• support.greenhouse.io

  URL

  critical
• www.greenhouse.io

  URL

  high

Target Scope Domains

• api.greenhouse.io
• app.greenhouse.io
• app.interseller.io
• boards.greenhouse.io
• interseller.io
• jss.greenhouse.io
• onboarding.greenhouse.io
• support.greenhouse.io
• www.greenhouse.io

• 39 Subdomains
• 377709 Endpoints
• Download wordlist

---

Last Finished Scan:

---