SimpliSafe Managed Bug Bounty Engagement

At a glance#

• Maximum payout: $6,000
• Public disclosure: Allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://bb1.simplisafe.com
• https://bb2.simplisafe.com
• https://cb.simplisafe.com
• api.simplisafe.com (HSP Endpoints)
• api.services.simplisafe.com (HSP Endpoints)
• *.prd.cam.simplisafe.com (HSP Endpoints)
• *.prd.platform.simplisafe.com (HSP Endpoints)
• *.prd.services.simplisafe.com (HSP Endpoints)
• https://webapp.simplisafe.com
• https://webapp.simplisafe.co.uk
• https://apps.apple.com/us/app/simplisafe-home-security-app/id555798051
• https://play.google.com/store/search?q=simplisafe&c=apps
• mfa.simplisafe.com
• *.prd.aser.simplisafe.com
• *.prd.webapps.simplisafe.com
• api.simplisafe.com (App Endpoints)
• api.services.simplisafe.com (App Endpoints)
• *.prd.services.simplisafe.com (App Endpoints)
• *.prd.platform.simplisafe.com (App Endpoints)
• media.simplisafe.com
• *.prd.cam.simplisafe.com (App Endpoints)
• https://simplisafe.com
• https://simplisafe.co.uk
• api.prd.commerce.simplisafe.com

Out of scope#

• auth.simplisafe.com
• careers.simplisafe.com
• clicks.simplisafe.com
• library.simplisafe.com
• livechat.simplisafe.com
• press.simplisafe.com
• support.simplisafe.com

Imported from the public directory. Always confirm scope on the official program page before testing.