Skip to content

Vault ID (demo): Scope

Download CSVLast updated on
1-5 of 5
Assets of Vault ID (demo)
Asset nameTypeCoverageMax. severityBountyLast updateResolved Reports

id.vaultid.example

The hosted login, consent screen and token endpoints. The core of the program.

  • java
  • spring
DomainIn scopeCriticalEligible0 (0%)

api.vaultid.example

Management API for tenants, users and clients.

APIIn scopeCriticalEligible0 (0%)

*.vaultid.example

Vault-operated subdomains, except those out of scope.

WildcardIn scopeCriticalEligible0 (0%)

https://id.vaultid.example/.well-known/openid-configuration

OIDC discovery — a good starting point for the federation flows.

URLIn scopeCriticalEligible0 (0%)

admin.vaultid.example

Tenant admin console. Privilege-escalation and cross-tenant access are highest value.

DomainIn scopeCriticalEligible0 (0%)

1-5 of 5

Rewards

SeverityRewards
Low$150 – $400
Medium$400 – $1,500
High$1,500 – $6,000
Critical$6,000 – $25,000

Stats

Total bounties paid
$0
Average bounty
–
Top bounty range
$6,000 – $25,000
Reports received | 90 days
0
Last report resolved
–
Reports resolved
0
Hackers thanked
0
Assets in scope
5