{"id":"3d19c7a0-b06b-48e2-93ca-996402a0c261","engagementId":"5e450ebf-c539-4d08-80a9-835785081454","data":{"brief":{"id":"469438a8-5a88-4848-9ef0-41fd7f1586bc","name":"Bolt Technology OÜ","tagline":"Ride hailing and scooter rental apps.","description":"\u003cp\u003eAt Bolt, we're building a future where people don’t need to own personal cars to move around safely and conveniently. A future where people have the freedom to use transport on demand, choosing whatever vehicle's best for each occasion — be it a car, scooter, or e-bike. \u003c/p\u003e\n\n\u003cp\u003eNo technology is perfect and Bolt believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our web and mobile applications. Good luck, and happy hunting!\u003c/p\u003e\n\n\u003ch1\u003eHow does the program work?\u003c/h1\u003e\n\n\u003cp\u003eSecurity researchers and Bolt customers are encouraged to submit reports regarding the security measures used to protect Bolt products and services.\u003cbr\u003e\nMembers of Bolt’s team may contact you to confirm that we have received your submission, ask questions about your findings, and discuss how to reproduce them.\u003cbr\u003e\nBolt may direct you to stop your activities in the event that your research impacts Bolt-owned assets, Bolt vendors, or other customers. If directed to stop, you must immediately comply with the request.\u003c/p\u003e\n\n\u003ch2\u003eTimeline\u003c/h2\u003e\n\n\u003cp\u003eNote: Timeline as shown below is based on a submission which includes a fully detailed vulnerability with all of the required reproduction steps\u003c/p\u003e\n\n\u003cp\u003eWe aim to respond to submissions as fast as possible, according to the severity of the report.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eBounty Payout\u003c/strong\u003e: 5 business days from Bolt's validation (after Bugcrowd triage is completed)\u003cbr\u003e\n \u003cstrong\u003eResponse to Researcher Questions\u003c/strong\u003e: 2 business days from blocker created for Bolt\u003c/p\u003e\n\n\u003cp\u003ePlease make sure your report includes a detailed description of the issue and the steps you believe may be required to reproduce what you have observed. A detailed description of the vulnerability and reproduction steps are required for each report. If you do not provide this information within 7 business days from the submission of the report, we will close the report as Not Applicable.\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"46b8dcc8-bbd9-4a60-80ab-ab088c2bc3e4","targetsOverview":"\u003cp\u003e\u003cem\u003eTesting is only authorized on the targets listed as In-Scope. Any domain/property of Bolt not listed in the targets section is out of scope. This includes any/all subdomains not listed above.  IF you happen to identify a security vulnerability on a target that is not in-scope, but that demonstrably belongs to Bolt, it may be reported to this program, and is appreciated - but will ultimately be marked as ‘not applicable’ and will not be eligible for monetary or points-based compensation.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess \u0026amp; credentials:\u003c/h2\u003e\n\n\u003cp\u003eTo gain access to the applications, please sign up for an account using your @bugcrowdninja.com email address. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://docs.bugcrowd.com/researchers/participating-in-program/your-bugcrowdninja-email-address/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\n\u003ch1\u003eRules of Engagement\u003c/h1\u003e\n\n\u003cp\u003e1) Research must be done using your own Bolt account on products that you own. \u003cbr\u003e\n2) You can not be a partner or an employee of Bolt to participate in this program.\u003cbr\u003e\n3) You should not intentionally modify online accounts, data or products owned by other Bolt customers (without explicit permission). If during the course of your research, you find a vulnerability that would allow you to bypass an authentication control for another person’s account, you should report the vulnerability to Bolt immediately and take no further action.\u003cbr\u003e\n4) If you are able to access or modify the personal data of other customers or other sensitive data that does not belong to you, immediately contact Bolt. Do not attempt to conduct post-exploitation work with this data.\u003cbr\u003e\n5) Do not use or report findings from automated scanning tools.\u003cbr\u003e\n6) Where you are able to access data that does not belong to you, you will be asked to delete it. You must comply with this request, demonstrate the steps you took to ensure it was deleted and confirm deletion to Bolt in order to be eligible for a reward.\u003cbr\u003e\n7) Do not attempt to use brute force or denial of service attacks on Bolt-owned systems without prior written approval.\u003cbr\u003e\n8) Do not engage in knowingly posting, transmitting, uploading, linking to, sending or storing any malicious software.\u003cbr\u003e\n9) Be respectful when interacting with Bolt's staff. We may not answer you immediately because of the workload, but we do respond!\u003c/p\u003e\n\n\u003ch2\u003eFocus Areas:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eBolt’s public-facing applications\u003c/li\u003e\n\u003cli\u003eAuthentication related issues\u003c/li\u003e\n\u003cli\u003eBolt applications and services which are connected to production environment\u003c/li\u003e\n\u003cli\u003eVulnerabilities in other applications owned by Bolt\u003c/li\u003e\n\u003cli\u003eFocus on impact. Minor misconfiguration alone does not qualify for rewards.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eExcluded submission types\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eP5 vulnerabilities\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eVulnerabilities that only work by tricking users into interacting with malicious content (e.g., phishing, vishing, smishing, malware or any other form of social engineering)\u003c/li\u003e\n\u003cli\u003eAbuse of authentication workflows through automated or high-volume interaction without demonstrated high-impact.\u003c/li\u003e\n\u003cli\u003eClickjacking on pages with no data modification actions.\u003c/li\u003e\n\u003cli\u003eUnauthenticated/logout/login CSRF.\u003c/li\u003e\n\u003cli\u003eAttacks requiring MITM or physical access to a user's device.\u003c/li\u003e\n\u003cli\u003ePreviously known vulnerable libraries without a relevant Bolt related working PoC.\u003c/li\u003e\n\u003cli\u003eSSL/TLS configuration best practice misses.\u003c/li\u003e\n\u003cli\u003eAny activity that could lead to the disruption of service (DoS).\u003c/li\u003e\n\u003cli\u003eContent spoofing and text injection issues without showing an attack vector/without being able to modify HTML/CSS.\u003c/li\u003e\n\u003cli\u003eSPF, DKIM, DMARC issues.\u003c/li\u003e\n\u003cli\u003eLack of Secure and HTTPOnly cookie flags (critical systems may still be in scope).\u003c/li\u003e\n\u003cli\u003eXSS (or a behavior) where you can only attack your own account.\u003c/li\u003e\n\u003cli\u003eXSS on pages where admins are intentionally given full HTML editing capabilities.\u003c/li\u003e\n\u003cli\u003eReflected file download.\u003c/li\u003e\n\u003cli\u003ePhysical security of the Bolts offices and employees.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eN-day/Third party 0-day Policy\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eWhen N-Day bugs are released to the public, we will consider these as in scope after 14 days has gone by\n\n\u003cul\u003e\n\u003cli\u003ee.g: N-day released on 01/01/2025, we would consider it in-scope on 01/15/2025\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eSocial engineering of Bolt staff.\u003c/li\u003e\n\u003cli\u003eThird party applications or websites or services that integrate with, or link to the services of Bolt.\u003c/li\u003e\n\u003cli\u003eSubmissions regarding the test environment will not be accepted because this environment is essentially a playground for developers and is not connected to a live or staging environment.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eStolen/Breached Credentials\u003c/h2\u003e\n\n\u003cp\u003eIf you happen to identify vulnerabilities involving data that has been exposed or leaked such as dark web forums or leaked credential sites. You can report it to this engagement. However, be aware that it is only eligible for points-based compensation. This policy helps maintain the highest standard of operational confidentiality, integrity, and compliance.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"3eb444d5-0b85-4c1c-a26a-cfded4b49043","name":"Mobile","targets":[{"id":"e71fe357-686d-4a37-baa3-05c7b52bb50e","uri":"https://apps.apple.com/ee/app/bolt-fast-affordable-rides/id675033630","name":"Bolt Rider (iOS)","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0dd51839-ee6d-4722-b935-734443bff5e1","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"e71fe357-686d-4a37-baa3-05c7b52bb50e"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"e71fe357-686d-4a37-baa3-05c7b52bb50e"}],"recentChangeFlags":null},{"id":"1ada86e8-e530-4123-9a99-0fcdc47da07c","uri":"https://play.google.com/store/apps/details?id=ee.mtakso.client","name":"Bolt Rider (Android)","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"461345d7-c104-43c8-a766-7bd9734cd39a","sortOrder":1},"sortOrder":1,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"1ada86e8-e530-4123-9a99-0fcdc47da07c"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"1ada86e8-e530-4123-9a99-0fcdc47da07c"}],"recentChangeFlags":null},{"id":"32a9a72f-9c1d-43a6-b957-9f7aa7b1589b","uri":"https://apps.apple.com/ee/app/bolt-food/id1451492388","name":"Bolt Food (iOS)","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a1a3f734-075f-41de-9662-edc0ecc99646","sortOrder":2},"sortOrder":2,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"32a9a72f-9c1d-43a6-b957-9f7aa7b1589b"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"32a9a72f-9c1d-43a6-b957-9f7aa7b1589b"}],"recentChangeFlags":null},{"id":"4970e843-0f17-4e7c-9837-0725c49558f3","uri":"https://play.google.com/store/apps/details?id=com.bolt.deliveryclient","name":"Bolt Food (Android)","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e13fac76-df5b-4d73-aff6-f20e52b81434","sortOrder":3},"sortOrder":3,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"4970e843-0f17-4e7c-9837-0725c49558f3"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"4970e843-0f17-4e7c-9837-0725c49558f3"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"22e414ed-f0bd-4583-9d2f-1c4566c50543","p1MaxCents":650000,"p1MinCents":610000,"p2MaxCents":350000,"p2MinCents":200000,"p3MaxCents":85000,"p3MinCents":50000,"p4MaxCents":50000,"p4MinCents":20000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":6100,"max":6500},"2":{"min":2000,"max":3500},"3":{"min":500,"max":850},"4":{"min":200,"max":500},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"91024e0c-5f5f-43a1-b5ed-545a524009de","name":"Web","targets":[{"id":"9607c572-1458-4654-992b-4ef98972a507","uri":"https://taxify.eu/","name":"*.taxify.eu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"51fa3dc1-5cf0-404c-ad14-a16497072b34","sortOrder":0},"sortOrder":0,"tags":[{"id":"21bf0b21-e645-4730-b030-be773c64efc7","name":"Gatsby","targetId":"9607c572-1458-4654-992b-4ef98972a507"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"9607c572-1458-4654-992b-4ef98972a507"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9607c572-1458-4654-992b-4ef98972a507"}],"recentChangeFlags":null},{"id":"6570a80a-012d-4589-96f9-14e503741bcb","uri":"https://bolt.eu/","name":"*.bolt.eu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b4418bb4-6388-4151-9b54-bde97dc228b5","sortOrder":0},"sortOrder":0,"tags":[{"id":"21bf0b21-e645-4730-b030-be773c64efc7","name":"Gatsby","targetId":"6570a80a-012d-4589-96f9-14e503741bcb"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"6570a80a-012d-4589-96f9-14e503741bcb"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6570a80a-012d-4589-96f9-14e503741bcb"}],"recentChangeFlags":null},{"id":"2da59883-14eb-4399-9a4e-50103ebd5d41","uri":"https://*.boltable.eu","name":"*.boltable.eu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"28014fc5-5845-4fb8-b9e3-f77bfd2eb42f","sortOrder":2},"sortOrder":2,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"2da59883-14eb-4399-9a4e-50103ebd5d41"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2da59883-14eb-4399-9a4e-50103ebd5d41"}],"recentChangeFlags":["entirely_new"]}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":{"id":"b406db1d-2bcf-452b-aeab-51f79047bc0d","p1MaxCents":250000,"p1MinCents":210000,"p2MaxCents":125000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":45000,"p4MaxCents":20000,"p4MinCents":15000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":2100,"max":2500},"2":{"min":1000,"max":1250},"3":{"min":450,"max":600},"4":{"min":150,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"b3c1b9c5-8825-458e-aa43-64dde9124678","name":"Out of scope","targets":[{"id":"8730a37e-684d-4c90-a697-06820aaac2c8","uri":"https://play.google.com/store/apps/details?id=ee.mtakso.driver","name":"Bolt Driver (Android)","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f5c2a9c5-56e3-4b5e-bb82-5992ebbb9bfc","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"8730a37e-684d-4c90-a697-06820aaac2c8"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"8730a37e-684d-4c90-a697-06820aaac2c8"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"8730a37e-684d-4c90-a697-06820aaac2c8"}],"recentChangeFlags":null},{"id":"f3978cf8-c0dc-4696-82f4-42d56f4c6fd4","uri":"https://apps.apple.com/ee/app/bolt-driver/id897442736","name":"Bolt Driver (iOS)","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3d22912f-80cc-44eb-b177-365de74f52b9","sortOrder":0},"sortOrder":0,"tags":[{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"f3978cf8-c0dc-4696-82f4-42d56f4c6fd4"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"f3978cf8-c0dc-4696-82f4-42d56f4c6fd4"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"f3978cf8-c0dc-4696-82f4-42d56f4c6fd4"}],"recentChangeFlags":null},{"id":"16d58ea8-e304-4128-946e-f0adff699ab2","uri":"","name":"*.test.bolt.eu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7c80acae-5140-4b4b-95de-5f23f777a76b","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"2706a929-7e4c-4d8f-8c63-d1be7e45dfa8","uri":"","name":"*.test.taxify.eu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8fb7a98e-7ac6-4575-b891-b98826c9a5d6","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"43717599-3d62-45eb-81fb-c7902dce0622","uri":"","name":"business-old.bolt.eu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8e6ce5d1-20ec-491e-a841-3b54c875e0c2","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":3,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"5e450ebf-c539-4d08-80a9-835785081454","code":"bolt-og","state":"in_progress","endsAt":null,"bountyId":"5266221c-d89e-4dcf-9b9e-4ccbb57c4087","startsAt":"2021-03-09T05:30:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Technology","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/85ef/fd9f/64b4d4aa/c723d556d06f861b48f659a27ab68096_LinkedIn_Profile.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2021-03-09T05:30:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/bolt-og","changelogs":"/engagements/bolt-og/changelog","submissions":null,"announcements":"/engagements/bolt-og/announcements","hallOfFame":"/engagements/bolt-og/hall_of_fames","crowdstream":"/engagements/bolt-og/crowdstream"},"announcementsCount":3,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/bolt-og/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=bolt-og\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/bolt-og/engagement_subscribers","engagementChangelogsUrl":"/engagements/bolt-og/changelog","publishedAt":"2026-09-14T08:59:47.709Z","engagementChangelogUrl":"/engagements/bolt-og/changelog/3d19c7a0-b06b-48e2-93ca-996402a0c261","createUserFeedbacksUrl":"/engagements/bolt-og/feedbacks","engagementCrowdstreamUrl":"/engagements/bolt-og/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}