Ubiquiti Inc. icon Ubiquiti Inc. HackerOne

Target Policy
https://hackerone.com/ui?type=team
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • UniFi Gateways (UDM, UXG, USG)
    HARDWARE
    critical
  • *.uisp.com
    WILDCARD
    critical
  • com.ubnt.unifivideo
    GOOGLE_PLAY_APP_ID
    none
  • UniFi Connect
    HARDWARE
    critical
  • me.store.ui.com
    URL
    critical
  • training.ui.com

    This asset is hosted and maintained by a 3rd party moonami.com

    URL
    medium
  • UniFi Wireless Access Points
    HARDWARE
    critical
  • UISP
    DOWNLOADABLE_EXECUTABLES
    critical
  • Cloudkey
    HARDWARE
    critical
  • mFi
    HARDWARE
    none
  • UniFi Voip
    HARDWARE
    none
  • airFiber
    HARDWARE
    critical
  • account.ui.com
    URL
    critical
  • ir.ui.com
    URL
    critical
  • http://*.ubnt.com
    WILDCARD
    critical
  • http://*.ui.com
    WILDCARD
    critical
  • *.ui.com
    WILDCARD
    critical
  • unifi.ui.com
    URL
    critical
  • UniFi Video Cloud
    OTHER
    none
  • com.ubnt.discovery.app
    GOOGLE_PLAY_APP_ID
    critical
  • *.ubnt.com
    WILDCARD
    critical
  • UniFi Talk
    HARDWARE
    critical
  • forum-es.ui.com
    URL
    none
  • uisp.com
    URL
    critical
  • UniFi Protect
    HARDWARE
    critical
  • store.ui.com
    URL
    critical
  • community.ui.com
    URL
    critical
  • UniFi Video Server
    DOWNLOADABLE_EXECUTABLES
    none
  • UniFi Network Application
    DOWNLOADABLE_EXECUTABLES
    critical
  • UniFi Switches
    HARDWARE
    critical
  • UniFi LED
    HARDWARE
    critical
  • EdgeMAX
    HARDWARE
    critical
  • airMAX
    HARDWARE
    critical
  • dev-training.ui.com

    This asset is hosted and maintained by a 3rd party moonami.com

    URL
    medium
  • UniFi Video
    HARDWARE
    none
  • UniFi
    HARDWARE
    critical
  • security.community.ui.com
    URL
    none
  • rma.ui.com
    URL
    critical
  • com.ubnt.easyunifi
    GOOGLE_PLAY_APP_ID
    critical
  • UniFi Access
    HARDWARE
    critical
  • AirControl
    DOWNLOADABLE_EXECUTABLES
    none
  • forum-pt.ui.com
    URL
    none
  • com.ubnt.ucrm
    GOOGLE_PLAY_APP_ID
    critical
  • ca.store.ui.com
    URL
    critical
  • com.ubnt.unifi.edu
    GOOGLE_PLAY_APP_ID
    none
  • com.ubnt.mpower
    GOOGLE_PLAY_APP_ID
    none
  • UCRM
    DOWNLOADABLE_EXECUTABLES
    critical
  • UNMS
    DOWNLOADABLE_EXECUTABLES
    critical
  • fw-update.ubnt.com
    URL
    critical
  • ispdesign.ui.com
    URL
    critical
  • *.go.ubnt.com
    WILDCARD
    none
  • UID

    https://ui.com/uid

    OTHER
    critical
  • UniFi Talk Conference Speaker - UT-Conference
    HARDWARE
    none
  • help.ui.com
    URL
    critical
  • com.ubnt.umobile
    GOOGLE_PLAY_APP_ID
    critical
  • careers.ui.com
    URL
    critical
  • AmpliFi
    HARDWARE
    critical
  • blog.ui.com
    URL
    critical
  • UFiber
    HARDWARE
    critical
  • design.ui.com
    URL
    critical
  • UniFi Cloud
    OTHER
    critical
Target Scope Domains
  • account.ui.com
  • blog.ui.com
  • ca.store.ui.com
  • careers.ui.com
  • community.ui.com
  • design.ui.com
  • dev-training.ui.com
  • fw-update.ubnt.com
  • help.ui.com
  • ir.ui.com
  • ispdesign.ui.com
  • me.store.ui.com
  • rma.ui.com
  • store.ui.com
  • training.ui.com
  • ubnt.com
  • ui.com
  • uisp.com
  • unifi.ui.com
Tech Stack
  • Amazon Alb
  • Amazon Web Services
  • Big Cartel
  • Cloudflare
  • Google Hosted Libraries
  • Hsts
  • Http/3
  • Java
  • Jquery
  • Nginx
Last Finished Scan:
Scan Name
Fleet
Finished
State
auto-gausubs-2-kcrlf
allkxss
1 day ago
Finished
auto-gausubs-2-kcrlf
  • Fleet: allkxss
  • Duration: 31 Seconds
  • Finished: 1 day ago