23andMe BugCrowd

Target Policy
https://bugcrowd.com/twentythree-and-me
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • https://you.cag.us-west-2.int.23andme.us
    website
    None
  • https://auth.cag.us-west-2.int.23andme.us
    website
    None
  • https://api.cag.us-west-2.int.23andme.us
    api
    None
  • https://store.23andme.com
    website
    None
  • https://auth.23andme.com
    website
    None
  • https://you.23andme.com
    website
    None
  • https://api.23andme.com
    api
    None
  • https://github.com/23andMe
    other
    None
  • https://mediacenter.23andme.com
    website
    None
  • https://blog.23andme.com
    website
    None
  • https://therapeutics.23andme.com
    website
    None
  • https://research.23andme.com
    website
    None
  • https://education.23andme.com
    website
    None
  • https://medical.23andme.com
    website
    None
  • https://sapi-live.lh.us-west-2.prd.23andme.us
    api
    None
  • https://pd-api.polkadoc.com
    api
    None
  • https://www.lemonaidhealth.com
    website
    None
  • https://clinic.lemonaidhealth.com
    website
    None
Target Scope Domains
  • api.23andme.com
  • api.cag.us-west-2.int.23andme.us
  • auth.23andme.com
  • auth.cag.us-west-2.int.23andme.us
  • blog.23andme.com
  • clinic.lemonaidhealth.com
  • education.23andme.com
  • mediacenter.23andme.com
  • medical.23andme.com
  • pd-api.polkadoc.com
  • research.23andme.com
  • sapi-live.lh.us-west-2.prd.23andme.us
  • store.23andme.com
  • therapeutics.23andme.com
  • www.lemonaidhealth.com
  • you.23andme.com
  • you.cag.us-west-2.int.23andme.us
Tech Stack
  • Amazon Cloudfront
  • Amazon S3
  • Amazon Web Services
  • Bootstrap
  • Braintree
  • Cloudflare
  • Django
  • Envoy
  • Google Hosted Libraries
  • Google Sign-In
  • Google Tag Manager
  • Gravity Forms:2.8.15
  • Hsts
  • Http/3
  • Jquery
  • Litespeed Cache
  • Lodash
  • Mysql
  • Owl Carousel
  • Paypal
  • Php
  • Python
  • React
  • Sweetalert
  • Underscore.Js
  • Underscore.Js:1.13.4
  • Wordpress
  • Wordpress:6.5.5
  • Wp Engine
  • Wp Rocket
  • Wpbakery
  • Youtube
Last Finished Scan:
Scan Name
Fleet
Finished
State
update-target-endpoint-snapshots
allhttpx
1 year, 1 month ago
Finished
update-target-endpoint-snapshots
  • Fleet: allhttpx
  • Duration: 41.13 Minutes
  • Finished: 1 year, 1 month ago