TheFork Managed Bug Bounty Engagement

At a glance#

• Maximum payout: $3,500
• Public disclosure: Not allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://manager.thefork.com
• https://apps.apple.com/app/thefork-manager-neo/id1295795281
• https://play.google.com/store/apps/details?id=com.lafourchette.tfm3
• https://widget.thefork.com
• https://api.thefork.io
• https://secure.thefork.com
• https://payment.lafourchette.com
• https://www.theforkmanager.com
• https://www.thefork.com
• https://apps.apple.com/app/thefork-restaurants-bookings/id424850908
• https://play.google.com/store/apps/details?id=com.lafourchette.lafourchette
• https://api.thefork.com
• https://api-ws.thefork.com
• https://m.thefork.com
• https://blog.thefork.com/
• https://*.tools.thefork.tech
• https://www.restaurant-information.com

Out of scope#

• *.myfourchette.com
• www.myfourchette.com
• website.theforkmanager.com
• *.lafourchette.rest
• login.theforkmanager.com
• developer.thefork.io
• https://*.eltenedor.*
• https://www.thefork.*
• module.thefork.com
• https://www.lafourchette.com

Imported from the public directory. Always confirm scope on the official program page before testing.