Target Policy

https://hackerone.com/launchdarkly?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• slack.launchdarkly.com

  URL

  none
• app.launchdarkly.com

  URL

  critical
• blog.launchdarkly.com

  URL

  none
• stream.launchdarkly.com

  URL

  critical
• docs.launchdarkly.com

  ---

  Our docs site is now hosted at launchdarkly.com/docs.

  URL

  critical
• events.launchdarkly.com

  URL

  critical
• launchdarkly.com

  ---

  This is our static marketing site.

  URL

  none
• https://launchdarkly.com/docs

  ---

  This is our static documentation website.

  URL

  critical
• sandbox.launchdarkly.com

  URL

  none
• status.launchdarkly.com

  URL

  none
• LaunchDarkly Open Source SDKs

  ---

  Our SDKs are open source and are available on Github (e.g. [React client SDK](https://github.com/launchdarkly/react-client-sdk)). We encourage researchers to dig into the open source code if interested. However, we will **not** be accepting the following types of findings:
  - Findings related to non-SDK repositories (i.e., repos not ending in `-sdk`)
  - Vulnerability/dependency scan results of our source code. Please try and dig into our source code more deeply than just reporting a scan result that we may already be aware of.

  SOURCE_CODE

  critical

Target Scope Domains

• app.launchdarkly.com
• docs.launchdarkly.com
• events.launchdarkly.com
• launchdarkly.com
• stream.launchdarkly.com

• 211 Subdomains
• 261 Endpoints
• Download wordlist

---

Last Finished Scan:

---