Nord Security icon Nord Security HackerOne

Target Policy
https://hackerone.com/nordsecurity?type=team
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • cloud.nordlocker.com
    URL
    critical
  • Saily - iOS

    Saily iOS: App Store (6475045151) - [Apple App Store](https://apps.apple.com/us/app/saily-esim-data-for-travel/id6475045151)

    APPLE_STORE_APP_ID
    critical
  • com.nordpass.android.app.password.manager

    NordPass - [Google Play Store](https://play.google.com/store/apps/details?id=com.nordpass.android.app.password.manager&launch=true&referrer=client_id=eba15f5b-e4a3-42ca-ba68-e16c170f39e0)

    Please make sure you are testing the latest version.

    GOOGLE_PLAY_APP_ID
    critical
  • NordLocker - MacOS Executable

    [Direct Web Download](https://nordlocker.com/download/mac/)

    Please make sure you are testing the latest version

    DOWNLOADABLE_EXECUTABLES
    critical
  • All Mobile Assets

    iOS: App Store (905953485) NordVPN - [Apple App Store](https://apps.apple.com/US/app/id905953485?mt=8)
    Please make sure you are testing the latest version.

    iOS: App Store (1486322860) NordPass - [Apple App Store](https://apps.apple.com/us/app/nordpass-password-manager/id1486322860?ls=1&referrer=client_id=eba15f5b-e4a3-42ca-ba68-e16c170f39e0)
    Please make sure you are testing the latest version.

    Android .apk: com.nordvpn.android NordVPN - [Android Sideload Download](https://nordvpn.com/download/android/)
    Please make sure you are testing the latest version.

    Android Play Store: com.nordvpn.android NordVPN - [Google Play Store](https://play.google.com/store/apps/details?id=com.nordvpn.android)
    Please make sure you are testing the latest version.

    Android Play Store: com.nordpass.android.app.password.manager NordPass - [Google Play Store](https://play.google.com/store/apps/details?id=com.nordpass.android.app.password.manager&launch=true&referrer=client_id=eba15f5b-e4a3-42ca-ba68-e16c170f39e0)

    Please make sure you are testing the latest version.

    OTHER
    critical
  • Saily - Android

    Saily Android: Google Play Store (com.saily.android) - [Google Play Store](https://play.google.com/store/apps/details?id=com.saily.android&hl=en)

    GOOGLE_PLAY_APP_ID
    critical
  • http://*.nordvpn.com

    Third-party services under our subdomains are out of scope **(please read full policy for details).**

    WILDCARD
    critical
  • 905953485

    NordVPN - [Apple App Store](https://apps.apple.com/US/app/id905953485?mt=8)

    Please make sure you are testing the latest version.

    APPLE_STORE_APP_ID
    critical
  • NordPass - Linux Executable

    [Direct Web Download](https://nordpass.com/download/linux/)

    Please make sure you are testing the latest version

    DOWNLOADABLE_EXECUTABLES
    critical
  • NordVPN - MacOS Executable

    [Direct Web Download](https://nordvpn.com/download/mac/)
    [MacOS App Store](https://apps.apple.com/us/app/nordvpn-vpn-fast-secure/id905953485)

    Please make sure you are testing the latest version.

    DOWNLOADABLE_EXECUTABLES
    critical
  • NordLocker - Windows Executable

    [Direct Web Download](https://nordlocker.com/download/windows/)

    Please make sure you are testing the latest version.

    DOWNLOADABLE_EXECUTABLES
    critical
  • NordLocker - Android Application
    GOOGLE_PLAY_APP_ID
    critical
  • 1486322860

    NordPass - [Apple App Store](https://apps.apple.com/us/app/nordpass-password-manager/id1486322860?ls=1&referrer=client_id=eba15f5b-e4a3-42ca-ba68-e16c170f39e0)

    Please make sure you are testing the latest version.

    APPLE_STORE_APP_ID
    critical
  • com.nordvpn.android

    NordVPN - [Google Play Store](https://play.google.com/store/apps/details?id=com.nordvpn.android)

    Please make sure you are testing the latest version.

    GOOGLE_PLAY_APP_ID
    critical
  • NordPass - MacOS Executable

    [Direct Web Download](https://nordpass.com/download/macos/)

    Please make sure you are testing the latest version.

    DOWNLOADABLE_EXECUTABLES
    critical
  • NordPass - Windows Executable

    [Direct Web Download](https://nordpass.com/download/windows/)

    Please make sure you are testing the latest version.

    DOWNLOADABLE_EXECUTABLES
    critical
  • app.nordpass.com
    URL
    critical
  • NordVPN - Windows Executable

    [Direct Web Download]( https://nordvpn.com/download/windows/)

    Please make sure you are testing the latest version.

    DOWNLOADABLE_EXECUTABLES
    critical
  • com.nordvpn.android

    NordVPN - [Android Sideload Download](https://nordvpn.com/download/android/)

    Please make sure you are testing the latest version.

    OTHER_APK
    critical
  • *.nordvpn.com

    Third-party services under our subdomains are out of scope **(please read full policy for details).**

    WILDCARD
    critical
  • NordVPN Browser Extension

    * Chrome: https://nordvpn.com/download/chrome-extension/
    * Firefox: https://nordvpn.com/download/firefox-extension/

    Please make sure you are testing the latest version.

    OTHER
    medium
  • NordVPN - Linux Executable

    [Direct Web Download](https://nordvpn.com/download/linux/)

    Please make sure you are testing the latest version.

    DOWNLOADABLE_EXECUTABLES
    critical
Target Scope Domains
  • app.nordpass.com
  • cloud.nordlocker.com
  • nordvpn.com
Tech Stack
Last Finished Scan:
Scan Name
Fleet
Finished
State
auto-gausubs-2-kcrlf
allkxss
3 days, 5 hours ago
Finished
auto-gausubs-2-kcrlf
  • Fleet: allkxss
  • Duration: 22 Seconds
  • Finished: 3 days, 5 hours ago