Bug Bounties

Miro

Powered by: 

Allows bounty splitting: 

Average time to first program response: 18

Average time to bounty awarded null: 60

Average time to report resolved: 

Handle miro

Managed program: true

Name: Miro

Offers bounties: true

Offers swag: false

Response efficiency percentage: 99

Submission state: open

Url: https://hackerone.com/miro

Website: https://miro.com

In scope:

  • Asset identifier: 1180074773
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/miro-collaborative-whiteboard/id1180074773
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 9n236hqqtvnh
  • Asset type: WINDOWS_APP_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://www.microsoft.com/en-us/p/miro-online-collaborative-whiteboard-platform/9n236hqqtvnh
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: MacOS Desktop Application
  • Asset type: DOWNLOADABLE_EXECUTABLES
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://desktop.miro.com/platforms/darwin/Miro.dmg
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Miro SDK
  • Asset type: OTHER
  • Availability requirement: medium
  • Confidentiality requirement: high
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Miro SDK methods are listed in the documentation: https://developers.miro.com/docs/the-windowmiro-object
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: Tier1
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Tier2
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Windows Desktop Application
  • Asset type: DOWNLOADABLE_EXECUTABLES
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: x32 - https://desktop.miro.com/platforms/win32-x86/Miro.exe x64 - https://desktop.miro.com/platforms/win32/Miro.exe
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: api.miro.com
  • Asset type: URL
  • Availability requirement: medium
  • Confidentiality requirement: high
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Miro REST API methods are listed in the documentation: https://developers.miro.com/reference
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: com.realtimeboard
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.realtimeboard
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: https://marketplace.atlassian.com/apps/1215456/miro-for-jira-cloud?hosting=cloud
  • Asset type: OTHER
  • Availability requirement: low
  • Confidentiality requirement: high
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Miro for Jira Cloud. Plugin for attaching Miro boards to Jira issues. Documentation: https://help.miro.com/hc/en-us/articles/360017572414-Jira-Add-on
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: https://marketplace.atlassian.com/apps/1217530/miro-for-confluence?hosting=cloud
  • Asset type: OTHER
  • Availability requirement: low
  • Confidentiality requirement: high
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Miro for Confluence. Plugin for embedding Miro boards into Confluence pages. Documentation: https://help.miro.com/hc/en-us/articles/360020712594-Confluence-Cloud-Plugin
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: https://marketplace.atlassian.com/apps/1219583/jira-cards-by-miro?hosting=cloud
  • Asset type: OTHER
  • Availability requirement: medium
  • Confidentiality requirement: high
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Jira Cards by Miro. Plugin for embedding Jira issues to Miro boards. Documentation: https://help.miro.com/hc/en-us/articles/360017572434-Jira-Cards
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: miro.com
  • Asset type: URL
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Miro website. Does not include paths like https://miro.com/app (application), https://miro.com/blog (blog) and so on.
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: miro.com/app
  • Asset type: URL
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Miro application.
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: miro.com/blog
  • Asset type: URL
  • Availability requirement: low
  • Confidentiality requirement: low
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Miro blog.
  • Integrity requirements: low
  • Max severity: medium