Lob HackerOne

Target Policy
https://hackerone.com/lob?type=team
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • https://lob.com/support/contact

    Please do not submit the support form on this page.

    URL
    none
  • email.lob.com
    URL
    none
  • get.lob.com
    URL
    none
  • redshift.lob.com
    URL
    critical
  • docs.lob.com
    URL
    none
  • support.lob.com
    URL
    none
  • go.lob.com

    Please do not submit any forms on this domain.

    URL
    none
  • status.lob.com
    URL
    none
  • cio.lob.com
    URL
    none
  • woody.lob.com
    URL
    critical
  • usps-sftp.lob.com
    URL
    critical
  • lob-assets.com
    URL
    critical
  • blog.lob.com
    URL
    none
  • api.lob.com
    URL
    critical
  • www.lob.com
    URL
    critical
  • dashboard.lob.com
    URL
    critical
  • address-autocomplete.lob.com
    URL
    critical
  • arcade.lob.com
    URL
    critical
  • lob.com
    URL
    critical
  • partners.lob.com
    URL
    critical
  • dora.lob.com
    URL
    critical
  • sftp.lob.com
    URL
    critical
  • library.lob.com
    URL
    none
  • lob.com/sales
    URL
    none
  • signal.lob.com
    URL
    critical
  • vpn.lob.com
    URL
    critical
  • wp.lob.com and lob.com/blog
    OTHER
    none
  • mock.lob.com
    URL
    none
  • https://lob.com/careers/*

    Please do not test against or submit any job applications.

    URL
    none
  • live_pub*

    API Keys starting with "live_pub* are not to be reported as they are meant to be public by Lob's own developmental practices.

    OTHER
    none
  • runkit.com

    Any issues pertaining to Runkit (https://runkit.com/) found on Lob's in Scope of Domains are considered out of Scope and are not pertaining to Lob's infrastructure.

    URL
    none
  • pizza-planet.lob.com
    URL
    critical
Target Scope Domains
  • address-autocomplete.lob.com
  • api.lob.com
  • arcade.lob.com
  • dashboard.lob.com
  • dora.lob.com
  • lob-assets.com
  • lob.com
  • partners.lob.com
  • pizza-planet.lob.com
  • redshift.lob.com
  • sftp.lob.com
  • signal.lob.com
  • usps-sftp.lob.com
  • vpn.lob.com
  • woody.lob.com
  • www.lob.com
Tech Stack
Last Finished Scan:
Scan Name
Fleet
Finished
State
auto-gausubs-2-kxss
allkxss
1 year, 1 month ago
Finished
auto-gausubs-2-kxss
  • Fleet: allkxss
  • Duration: 17.68 Minutes
  • Finished: 1 year, 1 month ago