Bug Bounties

Callsign

Powered by: 

Allows bounty splitting: 

Average time to first program response: 3

Average time to bounty awarded null: 

Average time to report resolved: 1001

Handle callsign

Managed program: true

Name: Callsign

Offers bounties: false

Offers swag: false

Response efficiency percentage: 100

Submission state: open

Url: https://hackerone.com/callsign

Website: https://www.callsign_com

In scope:

  • Asset identifier: *.*
  • Asset type: URL
  • Availability requirement: none
  • Confidentiality requirement: low
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: If you find a threat that can affect Callsign and is not covered by any previous scope... You can use this one! :)
  • Integrity requirements: none
  • Max severity: low



  • Asset identifier: *.s02.callsign.com
  • Asset type: URL
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: app.s02.callsign.com
  • Asset type: URL
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: b2b.s02.callsign.com
  • Asset type: URL
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: com.callsign.app.android
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Android APP Name: CS Identify
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: https://southfields-v2.s02.t00-csglobal.a2develop.com/
  • Asset type: URL
  • Availability requirement: none
  • Confidentiality requirement: low
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: none
  • Max severity: low