Tools for Humanity icon Tools for Humanity HackerOne

Target Policy
https://hackerone.com/toolsforhumanity?type=team
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • https://play.google.com/store/apps/details?id=com.worldcoin

    **Primary Asset**

    World App for Android. TFH-owned asset

    GOOGLE_PLAY_APP_ID
    critical
  • Primary Assets
    OTHER
    critical
  • *.consumer.worldcoin.org

    **Secondary Asset**

    World App backend. TFH-owned asset

    WILDCARD
    critical
  • https://github.com/worldcoin

    **Secondary Asset**

    Worldcoin Foundation-owned asset

    SOURCE_CODE
    critical
  • id.worldcoin.org

    **Primary Asset**

    Worldcoin Foundation-owned asset

    URL
    critical
  • Secondary Assets
    OTHER
    critical
  • *.worldcoin.dev

    **Secondary Asset**

    Worldcoin Foundation-owned asset

    WILDCARD
    critical
  • getworldcoin.com

    **Secondary Asset**

    Worldcoin Foundation-owned asset

    URL
    critical
  • https://github.com/worldcoin/world-id-contracts

    Worldcoin Foundation-owned asset

    SMART_CONTRACT
    critical
  • https://docs.world.org/world-chain/reference/address-book

    **Primary Asset**

    Worldcoin Foundation-owned asset.

    Smart contracts listed in this page are within scope for our program.

    SMART_CONTRACT
    critical
  • developer.worldcoin.org

    **Primary Asset**

    Worldcoin Foundation-owned asset

    URL
    critical
  • https://github.com/worldcoin/world-id-state-bridge

    Worldcoin Foundation-owned asset

    SMART_CONTRACT
    critical
  • *.worldcoin.org

    **Secondary Asset**

    Worldcoin Foundation-owned asset

    WILDCARD
    critical
  • *.worldcoin-distributors.com

    **Secondary Asset**

    Worldcoin Foundation-owned asset

    WILDCARD
    critical
  • worldcoin.org

    **Secondary Asset**

    Worldcoin Foundation-owned asset

    URL
    critical
  • bioid-management.app

    **Secondary Asset**

    TFH-owned asset

    URL
    critical
  • *.toolsforhumanity.com

    **Secondary Asset**

    TFH-owned asset

    WILDCARD
    critical
  • world.org

    **Secondary Asset**

    World Foundation-owned asset

    URL
    critical
  • toolsforhumanity.com

    **Secondary Asset**

    TFH-owned asset

    URL
    critical
  • https://apps.apple.com/no/app/world-app-worldcoin-wallet/id1560859847

    **Primary Asset**

    TFH-owned asset

    APPLE_STORE_APP_ID
    critical
Target Scope Domains
  • bioid-management.app
  • consumer.worldcoin.org
  • developer.worldcoin.org
  • getworldcoin.com
  • id.worldcoin.org
  • toolsforhumanity.com
  • world.org
  • worldcoin-distributors.com
  • worldcoin.dev
  • worldcoin.org
Tech Stack
Last Finished Scan:
Scan Name
Fleet
Finished
State
auto-gausubs-2-kcrlf
allkxss
2 weeks, 2 days ago
Finished
auto-gausubs-2-kcrlf
  • Fleet: allkxss
  • Duration: 24 Seconds
  • Finished: 2 weeks, 2 days ago