Bug Bounties

Cuvva

Powered by: 

Allows bounty splitting: 

Average time to first program response: 

Average time to bounty awarded null: 

Average time to report resolved: 

Handle cuvva

Managed program: false

Name: Cuvva

Offers bounties: false

Offers swag: true

Response efficiency percentage: 100

Submission state: open

Url: https://hackerone.com/cuvva

Website: https://cuvva.com

In scope:

  • Asset identifier: *.cuv-prod.app
  • Asset type: URL
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: equivalent is *.cuv-nonprod.app
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: 979980804
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: low
  • Confidentiality requirement: low
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: none
  • Max severity: medium



  • Asset identifier: api.prod.cuv-prod.app
  • Asset type: URL
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: api.ephemeral.cuv-nonprod.app is equivalent
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: co.cuvva.hourly
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: low
  • Confidentiality requirement: low
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: none
  • Max severity: medium



  • Asset identifier: https://github.com/cuvva/docs
  • Asset type: SOURCE_CODE
  • Availability requirement: low
  • Confidentiality requirement: none
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: low
  • Max severity: medium



  • Asset identifier: ops.cuvva.com
  • Asset type: URL
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: underwriter.partner.cuvva.com
  • Asset type: URL
  • Availability requirement: none
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: none
  • Max severity: critical



  • Asset identifier: wg.g.cuv-prod.app
  • Asset type: URL
  • Availability requirement: low
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Wireguard server `wg-data-warehouse.g.cuv-prod.app` is similar
  • Integrity requirements: low
  • Max severity: critical



  • Asset identifier: www.cuvva.com
  • Asset type: URL
  • Availability requirement: low
  • Confidentiality requirement: none
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: low
  • Max severity: medium