Target Policy

https://hackerone.com/pogo?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• com.pogotech.pogocash

  ---

  Production Android app for Pogo

  GOOGLE_PLAY_APP_ID

  critical
• api.joinpogo.com

  ---

  API endpoint used by the mobile apps. Only valid for requests originating in the US + territories and Canada.

  URL

  critical
• com.pogotech.pogocash

  ---

  Production iOS app for Pogo

  APPLE_STORE_APP_ID

  critical

Target Scope Domains

• api.joinpogo.com

• 1 Subdomain
• Download wordlist

---

Last Finished Scan:

---