Target Policy

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• www.zendesk.com

  URL

  critical
• http://h1-your-domain.zendesk.com/wfm/

  ---

  Zendesk Workforce management (WFM) improves the predictability and efficiency of customer service organizations through its wide range of planning, scheduling and monitoring tools. All reports related to WFM (`/wfm/`) and sub-paths should be submitted here.

  [Zendesk Workforce management \(WFM\) resources](https://support.zendesk.com/hc/en-us/articles/6457209788442-Zendesk-Workforce-management-WFM-resources)
  

  URL

  critical
• zopim.com

  URL

  critical
• http://h1-your-domain.zendesk.com/qa/

  ---

  AutoQA analyzes every interaction – including with AI agents – then shows you which ones need extra support. You’ll spend less time hunting through a stack of tickets, and more time actually solving issues.
  
  All reports related to QA (`/qa/`) and sub-paths should be submitted here.

  We will also accept bounties for the legacy domains https://kibbles.klausapp.com & https://app.klausapp.com however note that you cannot create new accounts under these domains.

  [Setting up Zendesk QA – Zendesk help](https://support.zendesk.com/hc/en-us/sections/7162431070618-Setting-up-Zendesk-QA)

  URL

  critical
• h1-your-domain.zendesk.com

  ---

  The Zendesk Suite is the collection or our core Products. Reports in any of the following Products & services should be submitted here:
  * Support, Agent Workspace & Ticketing systems - `/agent/`
  * Admin center - `/admin/`
  * [Our Public API's](https://www.postman.com/zendesk-redback/zendesk-public-api/overview) - `/api/`
  * Authentication & Auxiliary functionality - `/auth/` and `/access/`
  * Billing - `/billing/`
  * Chat - `/chat/`
  * Community Forum - `/collaboration/`
  * Explore (Data & Analytics) - `/explore/`
  * Help Centre - `/hc/`
  * Other paths that are not explicitly listed in other parts of the scope.

  More details can be found at https://support.zendesk.com/hc/en-us/articles/4408881937306-Getting-started-with-Zendesk-Suite-Introduction

  URL

  critical
• h1-your-domain.zendesk.com/sell

  ---

  In this context, "h1-your-domain" is on your own personal testing account.

  URL

  critical
• http://h1-your-domain.zendesk.com/sell

  ---

  In this context, "h1-your-domain" is on your own personal testing account.

  URL

  critical
• developer.zendesk.com

  ---

  This site hosts our documentation and API reference.

  URL

  medium
• app.smooch.io

  URL

  critical
• api.smooch.io

  URL

  critical
• app.futuresimple.com

  URL

  critical
• apps.zendesk.com

  ---

  Zendesk Marketplace apps are not in scope.

  URL

  critical
• https://github.com/smooch/smooch-web

  SOURCE_CODE

  critical
• https://github.com/smooch/smooch-android

  SOURCE_CODE

  critical
• https://github.com/smooch/smooch-ios

  SOURCE_CODE

  critical
• api.getbase.com

  ---

  https://developers.getbase.com/docs/rest/articles/introduction

  URL

  critical
• smooch.io

  URL

  critical
• 488534576

  ---

  https://apps.apple.com/us/app/base-crm-sales-tracking/id488534576

  APPLE_STORE_APP_ID

  critical
• com.zopim.android

  ---

  Zendesk Chat for Android

  GOOGLE_PLAY_APP_ID

  critical
• https://developer.zendesk.com/documentation/zendesk-sdks/#ios

  ---

  Zendesk Support SDK for iOS

  OTHER

  critical
• https://developer.zendesk.com/documentation/zendesk-sdks/#android

  ---

  Zendesk Support SDK for Android
  

  OTHER

  critical
• com.futuresimple.base

  ---

  https://play.google.com/store/apps/details?id=com.futuresimple.base

  GOOGLE_PLAY_APP_ID

  critical
• 549057844

  ---

  Zendesk Chat for iOS

  APPLE_STORE_APP_ID

  critical
• com.zendesk.android

  ---

  Zendesk Support for Android

  GOOGLE_PLAY_APP_ID

  critical
• 1174276185

  ---

  You need an existing Zendesk Account to use the iOS app. Please sign up for an Account per the instructions in our program page.

  Zendesk Support for iOS is built for agents, team leads, and managers on the move. It's a fast and secure productivity tool that gives you visibility to your account in real time. Get ahead of the day and keep things running by bringing the right people, conversations, and information together. Support for iOS is available for iPhone and iPad, so you can access Zendesk whether you're at your office or on the go!

  APPLE_STORE_APP_ID

  critical

Target Scope Domains

• api.getbase.com
• api.smooch.io
• app.futuresimple.com
• app.smooch.io
• apps.zendesk.com
• developer.zendesk.com
• h1-your-domain.zendesk.com
• smooch.io
• www.zendesk.com
• zopim.com

• 1025 Subdomains
• 1574 Endpoints
• Download wordlist

Last Finished Scan: