Target Policy

https://hackerone.com/localizejs?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• api.localizestaging.com

  ---

  api.localizestaging.com maps to the APIs that are documented here: https://help.localizejs.com/reference

  Please refrain from testing against the Production endpoint (https://api.localizejs.com). Instead, the staging endpoint should be used (https://api.localizestaging.com)

  URL

  critical
• cdn.localizestaging.com

  URL

  high
• localizestaging.com

  ---

  localizestaging.com is the primary asset in scope of this program.

  This application uses Stripe for credit card payment processing. To test payment related functionality, you may use test credit cards as documented by Stripe: https://stripe.com/docs/testing

  URL

  critical
• app.localizestaging.com

  URL

  critical

Target Scope Domains

• api.localizestaging.com
• app.localizestaging.com
• cdn.localizestaging.com
• localizestaging.com

• 5 Subdomains
• 10 Endpoints
• Download wordlist

---

Last Finished Scan:

---