{"id":"ac70b5d8-96f2-4c70-a8e3-2373ed2665ee","engagementId":"d50422fe-7f24-46a0-9141-5a60a8d0a6a7","data":{"brief":{"id":"ca8699a6-7ed5-48c6-ba18-ac6d25a890d2","name":"AI | Apps+ Marketplace Bug Bounty Program","tagline":"Simple apps you'll 😍","description":"\u003cp\u003eApps+ builds collaborative apps for Confluence and Jira. We welcome verified security findings affecting the targets listed in this program.\u003c/p\u003e\n\n\u003cp\u003eBefore testing, read the scope: human validation is required, automated and bulk submissions are prohibited, reports must follow this program's app grouping and duplicate rules, and publicly disclosed vulnerabilities have a 90-day bounty grace period. AI-assisted research is allowed within the testing rules.\u003c/p\u003e\n\n\u003ch2\u003eRatings and rewards\u003c/h2\u003e\n\n\u003cp\u003eInitial classification uses the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. Apps+ uses \u003ca href=\"https://www.atlassian.com/trust/security/security-severity-levels\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAtlassian's CVSS-based severity framework\u003c/a\u003e; where the two differ, CVSS determines the final priority.\u003c/p\u003e\n\n\u003cp\u003eRewards follow the published ranges and scope, eligibility and duplicate rules. Priority reflects demonstrated impact and likelihood. Downgrades will include an explanation and an opportunity to appeal with evidence.\u003c/p\u003e","industryTagId":"02370343-bf13-4661-a7a2-caa1c1076ad1","targetsOverview":"\u003ch2\u003eScope\u003c/h2\u003e\n\n\u003cp\u003eTest only the listed in-scope apps and their Apps+-operated backend functionality. Other services, internal/development systems and customer instances are out of scope.\u003c/p\u003e\n\n\u003ch2\u003eSubmission eligibility\u003c/h2\u003e\n\n\u003cp\u003eA report must satisfy all three rules below to be bounty-eligible.\u003c/p\u003e\n\n\u003ch3\u003e1. Human validation required\u003c/h3\u003e\n\n\u003cp\u003eAI agents and scanners may assist research within these rules. A human must personally reproduce the finding, verify its security impact and review the evidence before submitting. Automated submissions, bulk scanner/agent output and unverified claims are prohibited. AI-assisted writing is allowed; unsupported reports are not bounty-eligible.\u003c/p\u003e\n\n\u003cp\u003eInclude the exact app listing, variant, hosting type, installed version, test date, account permissions, reproducible steps, expected versus actual behavior, and evidence of security impact. Put the listing URL in \u003cstrong\u003eURL / Location of Vulnerability\u003c/strong\u003e. Redact secrets. Scanner alerts, package versions, CVE references and model-generated claims of execution or data access are not proof.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eNo placeholder reports:\u003c/strong\u003e Incomplete reports, scanner alerts and claims with impact still to be confirmed do not reserve reward priority.\u003c/p\u003e\n\n\u003ch3\u003e2. One report per underlying vulnerability\u003c/h3\u003e\n\n\u003cp\u003eThe following \u003cstrong\u003eConfluence apps share a codebase\u003c/strong\u003e: \u003ca href=\"https://marketplace.atlassian.com/apps/1227541/ai-badges-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Badges\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227560/ai-buttons-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Buttons\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1237726/ai-charts-for-confluence?hosting=cloud\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Charts\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227559/ai-checklists-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Checklists\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227556/ai-code-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Code\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227555/ai-copywriter-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Copywriter\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227554/ai-forms-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Forms\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227546/ai-glossary-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Glossary\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227543/ai-grammar-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Grammar\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227553/ai-headings-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Headings\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227561/ai-images-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Images\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227557/ai-labels-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Labels\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227552/ai-latex-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI LaTeX\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227558/ai-macros-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Macros\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1229018/ai-photos-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Photos\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227548/ai-polls-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Polls\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227545/ai-sentiment-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Sentiment\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227544/ai-summary-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Summary\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227547/ai-tables-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Tables\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227551/ai-tabs-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Tabs\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227550/ai-tags-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Tags\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/1227549/ai-tooltips-for-confluence?tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAI Tooltips\u003c/a\u003e. The same underlying flaw across this family belongs in \u003cstrong\u003eone report and is eligible for at most one bounty\u003c/strong\u003e, not one per app.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eAI Autofill for Jira and AI Support for Jira are separate apps\u003c/strong\u003e, assessed independently of this family and each other.\u003c/p\u003e\n\n\u003cp\u003eReproduce the flaw in one affected app and add other affected or suspected variants to that report. You do not need source-code access or to test every listing; Apps+ will confirm whether they share the root cause. Distinct vulnerabilities may be reported separately. Similar app names or vulnerability types alone do not make findings duplicates.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eNo recycled submissions:\u003c/strong\u003e Add evidence or appeal through the existing report. Renaming a rejected finding or submitting the same underlying flaw against another variant does not create a new issue.\u003c/p\u003e\n\n\u003ch3\u003e3. Publicly disclosed vulnerabilities: 90-day grace period\u003c/h3\u003e\n\n\u003cp\u003eKnown vulnerabilities, including CVEs and third-party advisories, are not bounty-eligible during the first \u003cstrong\u003e90 calendar days after their first public disclosure\u003c/strong\u003e, even if exploitable in an Apps+ app. Do not submit them as bounty claims during this period. Early reports do not reserve future rewards or become eligible automatically.\u003c/p\u003e\n\n\u003cp\u003eInclude the original disclosure date and advisory. Later CVE assignments, revised advisories or new proofs of concept do not restart the clock. The rule concerns the specific disclosed flaw, not a general vulnerability class. After 90 days, demonstrate a present, reachable and exploitable path in the app. This reward rule does not extend remediation deadlines.\u003c/p\u003e\n\n\u003ch2\u003eIntended collaboration\u003c/h2\u003e\n\n\u003cp\u003eAuthenticated users in one customer instance may read, edit, overwrite or delete shared app data and non-sensitive settings. These resources have no per-user ownership boundary. An admin-only interface does not, by itself, make access through a resolver or API a vulnerability. This applies equally to app storage, content/entity properties and attachments.\u003c/p\u003e\n\n\u003cp\u003eThis exclusion does \u003cstrong\u003enot\u003c/strong\u003e cover cross-tenant access, restricted Confluence page or Jira work-item permission bypasses, impersonation, exposed credentials, unintended code execution or breaches of explicit confidentiality guarantees. Demonstrate the protected boundary and unauthorized impact.\u003c/p\u003e\n\n\u003ch2\u003eTesting rules\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eUse an instance you own, named \u003cstrong\u003ebugbounty-test-\u0026lt;bugcrowd-name\u0026gt;.atlassian.net\u003c/strong\u003e, with your \u003cstrong\u003e@bugcrowdninja.com\u003c/strong\u003e address. Use only accounts and data you control. Install the relevant in-scope app and trial/license.\u003c/li\u003e\n\u003cli\u003eTest the latest production version available to that instance. Record staged-rollout limitations; an unavailable newer release alone does not invalidate a finding. Known or fixed issues remain subject to duplicate rules.\u003c/li\u003e\n\u003cli\u003eRemain responsible for all tool and agent actions. Respect service limits. No destructive testing, load testing, DoS/DDoS, resource exhaustion, prompt/notification/email flooding, phishing or social engineering.\u003c/li\u003e\n\u003cli\u003eNo unauthorized infrastructure access, pivoting or post-exploitation. Do not use one finding to seek further vulnerabilities.\u003c/li\u003e\n\u003cli\u003eUse removable, minimally invasive proofs. For blind XSS, use a harmless callback. Do not collect customer data, cookies or screenshots. Stop if you encounter customer data or credentials; do not use or verify them.\u003c/li\u003e\n\u003cli\u003eAsk through \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/login\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support\u003c/a\u003e before testing a payload that could be publicly visible or cannot be removed.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eAI features\u003c/h2\u003e\n\n\u003cp\u003eChanging prompts, generated text or model behavior alone is out of scope. Demonstrate unauthorized actions, protected-data exposure or execution outside the intended context.\u003c/p\u003e\n\n\u003ch2\u003eOther exclusions\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eFlaws solely in Atlassian products/APIs/SDKs that require an Atlassian fix. Apps+-specific implementation or configuration flaws remain assessable.\u003c/li\u003e\n\u003cli\u003eNon-confidential errors, stack traces, status codes, public files/banners/identifiers, or source intentionally delivered to clients without secrets.\u003c/li\u003e\n\u003cli\u003eMissing security headers without demonstrated impact; flags on non-sensitive cookies; autocomplete/password saving; missing exit warnings.\u003c/li\u003e\n\u003cli\u003eClickjacking; anonymous-form/logout CSRF; CSRF requiring the victim's token; content spoofing without a security-boundary violation.\u003c/li\u003e\n\u003cli\u003eCAPTCHA bypass, brute force, missing account lockout, username/email enumeration and rate-limiting reports.\u003c/li\u003e\n\u003cli\u003eEnabled OPTIONS, SPF/DMARC configuration, HTTP/DNS cache poisoning and SSL/TLS configuration issues.\u003c/li\u003e\n\u003cli\u003eSelf-XSS or local browser/device control without a separate remote attack path; unsupported browsers; malicious-file upload/download without a separate app vulnerability.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eReward administration\u003c/h2\u003e\n\n\u003cp\u003eApps+ retains discretion to grant, modify or deny rewards under the program rules. Any tax obligations arising from a payout are the researcher's responsibility.\u003c/p\u003e\n\n\u003ch2\u003ePublic Disclosure\u003c/h2\u003e\n\n\u003cp\u003eThis bounty follows Bugcrowd’s standard disclosure terms.\u003c/p\u003e\n\n\u003cp\u003eBefore disclosing an issue publicly we require that you first request permission from us. Apps+ will process requests for public disclosure on a per report basis. Requests to publicly disclose an issue that has not yet been fixed for customers will be rejected. Any researcher found publicly disclosing reported vulnerabilities without Apps+'s written consent will have any allocated bounty withdrawn and disqualified from the program.\u003c/p\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith. You are expected, as always, to comply with all applicable laws. If at any time you have concerns or are uncertain whether your security research is consistent with this policy, please submit a report through one of our Official Channels before going any further.\u003c/li\u003e\n\u003c/ul\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":false,"additionalInformation":""},"scope":[{"id":"ae544be6-58c6-48c6-8a1e-8c796c2aef30","name":"In Scope Targets","targets":[{"id":"160ca829-2630-404b-b4c2-442ac88ffc05","uri":"https://marketplace.atlassian.com/apps/1227541/ai-badges-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227541/ai-badges-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c46e370f-32e8-4674-9bd0-5b58b214fcd2","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"160ca829-2630-404b-b4c2-442ac88ffc05"}],"recentChangeFlags":null},{"id":"cfcd8d59-ba3e-4280-bf38-fb713b4e5e5d","uri":"https://marketplace.atlassian.com/apps/1227543/ai-grammar-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227543/ai-grammar-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d0d8aebe-55af-4080-b1d0-c264d1861ae3","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cfcd8d59-ba3e-4280-bf38-fb713b4e5e5d"}],"recentChangeFlags":null},{"id":"d793f419-271a-431e-92be-f69ed4d89f1b","uri":"https://marketplace.atlassian.com/apps/1227544/ai-summary-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227544/ai-summary-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"272fbcf2-80b4-4629-9e00-0535896ec83d","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d793f419-271a-431e-92be-f69ed4d89f1b"}],"recentChangeFlags":null},{"id":"115ed57a-2327-40d9-b3c9-aefc2912c511","uri":"https://marketplace.atlassian.com/apps/1227545/ai-sentiment-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227545/ai-sentiment-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b1b04552-842a-43e7-b2ca-8d70bca440ac","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"115ed57a-2327-40d9-b3c9-aefc2912c511"}],"recentChangeFlags":null},{"id":"57fd4a5a-4346-48a1-90f1-b969c379cdf0","uri":"https://marketplace.atlassian.com/apps/1227546/ai-glossary-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227546/ai-glossary-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"71ec1177-7a4d-4998-af1c-7dc59b7f98d0","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"57fd4a5a-4346-48a1-90f1-b969c379cdf0"}],"recentChangeFlags":null},{"id":"52847631-43e1-4a0e-93a4-f5c94ca9647c","uri":"https://marketplace.atlassian.com/apps/1227547/ai-tables-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227547/ai-tables-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c2e0dbef-d627-40fd-b9a7-b0dbca356f81","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"52847631-43e1-4a0e-93a4-f5c94ca9647c"}],"recentChangeFlags":null},{"id":"938a0bda-8ce8-4b15-829a-33d4482c3672","uri":"https://marketplace.atlassian.com/apps/1227548/ai-polls-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227548/ai-polls-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"01a1915c-02e4-4817-8423-7ec9e0588570","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"938a0bda-8ce8-4b15-829a-33d4482c3672"}],"recentChangeFlags":null},{"id":"8bbca622-12fb-49d8-8b30-ab6dba0e3802","uri":"https://marketplace.atlassian.com/apps/1227549/ai-tooltips-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227549/ai-tooltips-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8797a125-156c-4c98-adca-ea0b845f37d1","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8bbca622-12fb-49d8-8b30-ab6dba0e3802"}],"recentChangeFlags":null},{"id":"dd518a04-6ba0-4ca9-b60f-64a9a488d219","uri":"https://marketplace.atlassian.com/apps/1227550/ai-tags-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227550/ai-tags-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8f3d787a-7d99-4547-aa01-0871485c10c3","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"dd518a04-6ba0-4ca9-b60f-64a9a488d219"}],"recentChangeFlags":null},{"id":"9a5b13f0-535b-4f28-b0d3-9d49fd9b5b68","uri":"https://marketplace.atlassian.com/apps/1227551/ai-tabs-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227551/ai-tabs-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bea9fb60-23ce-4587-8517-1129ac61f319","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9a5b13f0-535b-4f28-b0d3-9d49fd9b5b68"}],"recentChangeFlags":null},{"id":"fe7503ff-ffd0-4ea2-a218-63d950c323dc","uri":"https://marketplace.atlassian.com/apps/1227552/ai-latex-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227552/ai-latex-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"754cbedb-c8e5-4423-939d-e23aec24d6b6","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fe7503ff-ffd0-4ea2-a218-63d950c323dc"}],"recentChangeFlags":null},{"id":"9753d20a-c930-431b-bcc5-890f0d34e3cf","uri":"https://marketplace.atlassian.com/apps/1227553/ai-headings-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227553/ai-headings-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5fe73b6a-783c-439d-8181-b20dcd8dbd17","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9753d20a-c930-431b-bcc5-890f0d34e3cf"}],"recentChangeFlags":null},{"id":"2e0167fe-40ba-4b16-866c-467322af53bd","uri":"https://marketplace.atlassian.com/apps/1227554/ai-forms-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227554/ai-forms-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3762cd24-d0bc-42f2-b83a-4afa1b2505c8","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2e0167fe-40ba-4b16-866c-467322af53bd"}],"recentChangeFlags":null},{"id":"74e4813b-d086-44bd-9b78-fbf95deaa76a","uri":"https://marketplace.atlassian.com/apps/1227555/ai-copywriter-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227555/ai-copywriter-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1d569e19-cce7-454d-821e-d433790405bb","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"74e4813b-d086-44bd-9b78-fbf95deaa76a"}],"recentChangeFlags":null},{"id":"b3a67c55-b3c0-4309-9d1e-7142279e8219","uri":"https://marketplace.atlassian.com/apps/1227556/ai-code-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227556/ai-code-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e746f62c-0b95-434d-9d6d-b30356dee1a6","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b3a67c55-b3c0-4309-9d1e-7142279e8219"}],"recentChangeFlags":null},{"id":"950574c2-1c7a-474e-bccd-18c24612388b","uri":"https://marketplace.atlassian.com/apps/1227557/ai-labels-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227557/ai-labels-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"abc9f80c-8263-4ef6-834a-6e6b855008b8","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"950574c2-1c7a-474e-bccd-18c24612388b"}],"recentChangeFlags":null},{"id":"2039a06d-669b-4961-bd91-6c5defbaefee","uri":"https://marketplace.atlassian.com/apps/1227558/ai-macros-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227558/ai-macros-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4aa7de63-0e95-495c-a945-82b88e4fc840","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2039a06d-669b-4961-bd91-6c5defbaefee"}],"recentChangeFlags":null},{"id":"df67e4cc-243d-4731-a83b-fe7ca9580f8b","uri":"https://marketplace.atlassian.com/apps/1227559/ai-checklists-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227559/ai-checklists-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"969e39ae-e5f5-4113-a45d-4e6d51132433","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"df67e4cc-243d-4731-a83b-fe7ca9580f8b"}],"recentChangeFlags":null},{"id":"73b9d63c-3878-4fc2-bbfb-bf99daa9f32a","uri":"https://marketplace.atlassian.com/apps/1227560/ai-buttons-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227560/ai-buttons-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c6a3bfb5-845c-4be3-aa35-1e28e4ff8e1f","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"73b9d63c-3878-4fc2-bbfb-bf99daa9f32a"}],"recentChangeFlags":null},{"id":"0f332b4c-e37b-450f-b54a-4adf784200fe","uri":"https://marketplace.atlassian.com/apps/1227561/ai-images-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1227561/ai-images-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ff15427e-2f9e-43fb-99f1-4085213f13cd","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0f332b4c-e37b-450f-b54a-4adf784200fe"}],"recentChangeFlags":null},{"id":"9a809df6-67c1-4ba3-84f6-cd91ef0f8121","uri":"https://marketplace.atlassian.com/apps/1229018/ai-photos-for-confluence?tab=overview","name":"https://marketplace.atlassian.com/apps/1229018/ai-photos-for-confluence?hosting=cloud","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e116b4db-85df-41e9-9a0a-6bc3cd202038","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9a809df6-67c1-4ba3-84f6-cd91ef0f8121"}],"recentChangeFlags":null},{"id":"d84e4ffa-2f9c-4563-9c88-51e7034a5a56","uri":"https://marketplace.atlassian.com/apps/1232262/ai-support-for-jira?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1232262/ai-support-for-jira?hosting=cloud","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cc1d6e36-e297-4d55-9b0f-851a71bd9c6c","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d84e4ffa-2f9c-4563-9c88-51e7034a5a56"}],"recentChangeFlags":null},{"id":"bd67258e-b133-4d9c-92cd-26f897459753","uri":"https://marketplace.atlassian.com/apps/1235733/ai-autofill-for-jira?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1235733/ai-autofill-for-jira?hosting=cloud","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"80e80efa-f77e-4b40-931e-6b6c791f86ed","sortOrder":22},"sortOrder":22,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"bd67258e-b133-4d9c-92cd-26f897459753"}],"recentChangeFlags":null},{"id":"9a865266-f0c1-449b-b3b2-582a325f1f37","uri":"https://marketplace.atlassian.com/apps/1237726/ai-charts-for-confluence?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1237726/ai-charts-for-confluence?hosting=cloud","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"865ef417-f9b1-4f12-8dca-468efd1ebe79","sortOrder":23},"sortOrder":23,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9a865266-f0c1-449b-b3b2-582a325f1f37"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"c834570f-26c6-44e1-9bba-5edeaba825fa","p1MaxCents":150000,"p1MinCents":150000,"p2MaxCents":90000,"p2MinCents":90000,"p3MaxCents":30000,"p3MinCents":30000,"p4MaxCents":10000,"p4MinCents":10000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1500,"max":1500},"2":{"min":900,"max":900},"3":{"min":300,"max":300},"4":{"min":100,"max":100},"5":{"min":null,"max":null}},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"d50422fe-7f24-46a0-9141-5a60a8d0a6a7","code":"apps-plus2","state":"in_progress","endsAt":null,"bountyId":"59f48c6b-5132-4339-912f-27e3fdb7cac0","startsAt":"2022-09-22T12:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Computer Software","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/3a40/a5b6/f72f5499/b3892ecdcd107068cd2e811115e003cb_aimacros.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":false,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2026-10-01T06:16:00.473Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/apps-plus2","changelogs":"/engagements/apps-plus2/changelog","submissions":null,"announcements":"/engagements/apps-plus2/announcements","hallOfFame":"/engagements/apps-plus2/hall_of_fames","crowdstream":"/engagements/apps-plus2/crowdstream"},"announcementsCount":1,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/apps-plus2/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":"updated","userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=apps-plus2\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/apps-plus2/engagement_subscribers","engagementChangelogsUrl":"/engagements/apps-plus2/changelog","publishedAt":"2026-10-02T12:32:03.446Z","engagementChangelogUrl":"/engagements/apps-plus2/changelog/ac70b5d8-96f2-4c70-a8e3-2373ed2665ee","createUserFeedbacksUrl":"/engagements/apps-plus2/feedbacks","engagementCrowdstreamUrl":"/engagements/apps-plus2/crowdstream","acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}