Even though its a Livestream name, and goes to Livestream Fastly, the backend is a 3rd party vendor.
Its a 3rd party owned bucket, AMP.LIVE, publicly available. The content in there is made to be publicly available.
This is Zendesk, 3rd party.
3rd party
Out of scope: any attacks of the install process, that require additional configuration files, dll, etc that are put onto the machine via virus, malware, confidence, etc.
This is a 3rd party (AMP.LIVE).
The hardware side of Livestream has been sold to a non-Vimeo company. Even though we have integrations with much of it still, we can not take reports for it.
WPEngine requires a different contract if you include it on a bug bounty program
This is 3rd party/Shopify.