Veriff / Veriff Bug Bounty Intigriti


Target Policy
https://app.intigriti.com/api/core/researcher/programs/veriff/veriffbugbounty
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • api.flamingo-eu.veriff.com

    This is a public API endpoint.

    URL
    high
  • louvre.veriff.me

    This is an end user (internal) API endpoint.

    URL
    high
  • 1467907532

    An iOS application for demoing our product.

    iOS
    high
  • magic.veriff.me

    This is an end user (internal) API endpoint.

    URL
    high
  • api.veriff.me

    This is a public API endpoint.

    URL
    high
  • developers.veriff.me

    You can find our developers documentation here.

    URL
    low
  • *.veriff.com

    Please note that third party services are out of scope unless the issue is caused due to a misconfiguration by Veriff.

    URL
    low
  • com.veriff.demo

    An Android application for demoing our product.

    Android
    high
  • api.us.veriff.me

    This is a public API endpoint.

    URL
    high
  • alchemy.veriff.com

    This is an end user (internal) API endpoint.

    URL
    high
  • station.veriff.com

    Here you can find our Veriff Station application.

    URL
    high
  • stationapi.veriff.com

    This is the backend for our Station application.

    URL
    high
  • www.veriff.com

    This is our marketing website.

    URL
    low
Target Scope Domains
  • alchemy.veriff.com
  • api.flamingo-eu.veriff.com
  • api.us.veriff.me
  • api.veriff.me
  • developers.veriff.me
  • louvre.veriff.me
  • magic.veriff.me
  • station.veriff.com
  • stationapi.veriff.com
  • veriff.com
  • www.veriff.com
Tech Stack

Last Finished Scan:
Scan Name
Fleet
Finished
State
allkxss
8 months, 2 weeks ago
Finished
  • Fleet: allkxss
  • Duration: 21.42 Minutes
  • Finished: 8 months, 2 weeks ago