{"id":"95b563b0-74ef-4336-b844-625172a41fed","engagementId":"db300a05-4aae-47bb-883f-9d77d5877ff7","data":{"brief":{"id":"5dacddc6-9515-45eb-b4db-ad30d0c90eda","name":"iRobot","tagline":"Your Partner for a Cleaner Home","description":"\u003cp\u003eiRobot, the leading global consumer robot company, designs and builds robots that empower people to do more both inside and outside of the home. This program is testing iRobot's web applications, mobile applications, cloud APIs, and cloud-connected robots for vulnerabilities. \u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003eNOTE! [Please Read Fully Before Beginning Or Engaging In Any Testing]\u003c/em\u003e\u003c/p\u003e\n\n\u003col\u003e\n\u003cli\u003ePlease DO NOT use automated vulnerability scanners when testing against the in-scope targets (Zap/Burp/Acunetix/Nikto/Nessus/etc) - all of these tools have already been run, and are run on a recurring basis internally. Running any tools of this nature is largely an inefficient use of your time and resources.\u003c/li\u003e\n\u003cli\u003eHowever, you ARE encouraged to run any custom scripts or fuzzers that you have developed (e.g. niche file or directly wordlists, etc); however, please keep your requests using these tools to UNDER 50 requests per SECOND.\u003c/li\u003e\n\u003cli\u003eIn short, we strongly encourage researchers to perform manual testing by hand - this is where you're much more likely to achieve success, and a much better use of your time and resources, as opposed to running common tools that have already been used extensively against the in-scope targets, etc.\u003c/li\u003e\n\u003cli\u003ePlease be aware that Submissions found using pirated software will not be rewarded.\u003c/li\u003e\n\u003cli\u003eGood luck, and happy hunting!\u003c/li\u003e\n\u003c/ol\u003e\n\n\u003cp\u003eAdditionally, please be aware that this program does not accept out of scope submissions. Testing targets that are out of scope is strictly prohibited.\u003c/p\u003e\n\n\u003ch2\u003eRules:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eThis bounty does not allow disclosure. You may not release information about vulnerabilities found in this program to the public.\u003c/li\u003e\n\u003cli\u003eIf you have questions or need to contact iRobot or Bugcrowd, please contact support .\u003c/li\u003e\n\u003cli\u003eYou must ensure that customer data or devices are not impacted in any way as a result of your testing. Ensure that you are not being destructive while testing and that you are only testing targets that are in-scope.\u003c/li\u003e\n\u003cli\u003eSubmissions must be submitted in plain text formats. Supporting videos and images are fine as long as they are in standard, cross-platform formats. Submissions in other formats (e.g. DOCX, PDF, etc.,) will be asked to for resubmission in a plain text format.\u003c/li\u003e\n\u003cli\u003eWe are not interested in vulnerabilities that only affect robots under your possession and control unless it can be demonstrated that the same vulnerability would impact another customer's robot, mobile device, account, etc.,\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eWhat you can expect from us:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eWe are committed to working with you as transparently and efficiently as possible.\u003c/em\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eWe will acknowledge receipt of your vulnerability report with 10 working days\u003c/li\u003e\n\u003cli\u003eWe strive to support you and work with you to solve the reported issue within 180 working days.\u003c/li\u003e\n\u003cli\u003eSupport will be provided on a best-effort basis, including for discontinued products.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch1\u003eRatings/Rewards\u003c/h1\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"d7a636ff-c862-4101-a74f-f556036a5772","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as In-Scope. \u003cem\u003eAny\u003c/em\u003e domain/property of iRobot not listed in the targets section is out of scope.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eQuick Start:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eEnsure that you have fully read and understand the targets, exclusions, and rules below. \u003c/li\u003e\n\u003cli\u003eUnderstand the scope.\u003c/li\u003e\n\u003cli\u003eNote that bounties are awarded differently per product\u003c/li\u003e\n\u003cli\u003eTo test robots, you will need a robot identifier (provided below or you can use your own if you own an iRobot cloud-connected robot) and either the \u003ca href=\"https://apps.apple.com/us/app/roomba-home/id6504274697\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eiOS\u003c/a\u003e or \u003ca href=\"https://play.google.com/store/apps/details?id=com.irobot.home.prime\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAndroid\u003c/a\u003e Roomba Home application.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eWeb Credentials:\u003c/h2\u003e\n\n\u003cp\u003eCredentials are self-provisioned on the iRobot site using your @bugcrowdninja.com email address. Additional user accounts can be created to perform horizontal (cross-account) testing using the same account creation process, using your @bugcrowdninja.com email address. We would like researchers to focus on testing the user account and associated functionality.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eTesting Info:\u003c/h2\u003e\n\n\u003cp\u003eTesting order and payment workflow at store.irobot.com can be done with the following credit card information. \u003cstrong\u003ePlease do not input real information in orders for order testing purposes.\u003c/strong\u003e\u003c/p\u003e\n\n\u003ch3\u003eRobot IDs\u003c/h3\u003e\n\n\u003cp\u003eRobot Identifiers are commonly found in API calls. If you do not have a robot to test with, you can use one of the following Robot IDs:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e6977840021925810\u003c/li\u003e\n\u003cli\u003e3144460C10810750\u003c/li\u003e\n\u003cli\u003e2A80AB73B5634DB9\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eFocus Areas:\u003c/h2\u003e\n\n\u003ch3\u003eCloud/Robot/App\u003c/h3\u003e\n\n\u003cp\u003eDue to the nature of our connected products, we are focused primarily on any vulnerabilities that could allow one user to affect any robots, mobile devices, or account information which do not belong to them. We are especially interested in any attacks that affect the entire robot fleet!\u003c/p\u003e\n\n\u003ch3\u003eOther areas of interest:\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eCan you remotely install malware on another user's robot?\u003c/li\u003e\n\u003cli\u003eCan you collect any user information without physical access to their robot or mobile device, including account information, persistent map information, user WiFi SSIDs, etc.?\u003c/li\u003e\n\u003cli\u003eCan you control anyone else's robot remotely?\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eWe are interested if you can detail a vulnerability that would allow an actor to control or manipulate a robot not in their possession, but it is out of scope to actually control, deny service, or otherwise negatively impact a robot you do not own.\u003c/p\u003e\n\n\u003ch3\u003eWeb Applications:\u003c/h3\u003e\n\n\u003cp\u003eFor our web applications we are interested in traditional web application vulnerabilities and other vulnerabilities that directly affect our customers or products. Some of these vulnerabilities include:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eCross-account data leakage or unauthorized access\u003c/li\u003e\n\u003cli\u003eStored/Reflected/DOM-based Cross-Site Scripting (XSS)\u003c/li\u003e\n\u003cli\u003eSQL Injection (SQLi)\u003c/li\u003e\n\u003cli\u003eServer-side Remote Code Execution (RCE)\u003c/li\u003e\n\u003cli\u003eServer-side Request Forgery (SSRF)\u003c/li\u003e\n\u003cli\u003eBroken access controls (insecure direct object references, etc.)\u003c/li\u003e\n\u003cli\u003ePath/directory traversal\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut of Scope:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eiRobot Customer - Do not access, destroy, alter, or otherwise negatively impact iRobot customers, or customer data, in any way. Safe Harbor protections outlined below \u003cem\u003edo not\u003c/em\u003e apply when iRobot customers or customer data is involved.\u003c/li\u003e\n\u003cli\u003eAny domain, property, product, protocol, or service of iRobot not explicitly listed in the In-Scope section is out of scope, including any and all iRobot third-party SaaS services.\u003c/li\u003e\n\u003cli\u003eAny attack causing a denial of service (DoS), or distributed denial of service (DDoS) condition against iRobot products, services, or customers.\u003c/li\u003e\n\u003cli\u003eAutomated scanning tools are out of scope for this program.\u003c/li\u003e\n\u003cli\u003eThe Classic iRobot Home Mobile Apps on iOS and Android. \u003c/li\u003e\n\u003cli\u003eContacting iRobot Support via manual methods and automated tools (creating support tickets, etc).\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eExcluded Finding Types\u003c/h3\u003e\n\n\u003cp\u003eThe following finding types are specifically excluded from the bounty:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eFingerprinting or banner disclosure on public ports/services\u003c/li\u003e\n\u003cli\u003eEmail Spoofing to Inbox due to Missing or Misconfigured DMARC on Email Domain\u003c/li\u003e\n\u003cli\u003e\n\u003ca href=\"https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#tab=Headers\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eMissing HTTP security headers\u003c/a\u003e, specifically:\n\n\u003cul\u003e\n\u003cli\u003eHTTP Strict Transport Security (HSTS)\u003c/li\u003e\n\u003cli\u003ePublic Key Pinning Extension for HTTP (HPKP)\u003c/li\u003e\n\u003cli\u003eX-Frame-Options\u003c/li\u003e\n\u003cli\u003eX-Frame-Options (Clickjacking)\u003c/li\u003e\n\u003cli\u003eX-XSS-Protection\u003c/li\u003e\n\u003cli\u003eX-Content-Type-Options\u003c/li\u003e\n\u003cli\u003eContent-Security-Policy\u003c/li\u003e\n\u003cli\u003eX-Permitted-Cross-Domain-Policies\u003c/li\u003e\n\u003cli\u003eReferrer-Policy\u003c/li\u003e\n\u003cli\u003eExpect-CT\n** Feature-Policy\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHTTP OPTIONS header\u003c/li\u003e\n\u003cli\u003eHTTP or DNS cache poisoning\u003c/li\u003e\n\u003cli\u003eVulnerabilities in the WiFi spec\u003c/li\u003e\n\u003cli\u003eNo load testing (DoS/DDoS) on the application(s) or network\u003c/li\u003e\n\u003cli\u003eKnown vulnerabilities in used libraries, or reports of outdated libraries unless you can demonstrate exploitability\u003c/li\u003e\n\u003cli\u003eDNS vulnerabilities\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"8b586657-10de-47d7-a75a-03b8e62f38cb","name":"iRobot Devices","targets":[{"id":"064213c7-78d7-4853-9cfb-7296c709733c","uri":"","name":"iRobot Roomba™ 105","category":"hardware","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"de5c14c6-8b05-4d22-9399-112c443683bf","sortOrder":0},"sortOrder":0,"tags":[{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"064213c7-78d7-4853-9cfb-7296c709733c"}],"recentChangeFlags":null},{"id":"ad24a36a-6299-4c99-8975-5d00149ee796","uri":"","name":"iRobot Roomba™ 205","category":"hardware","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d4b64026-1f2c-48d0-aff6-e5ce245b0dc9","sortOrder":1},"sortOrder":1,"tags":[{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"ad24a36a-6299-4c99-8975-5d00149ee796"}],"recentChangeFlags":null},{"id":"1347c8ab-8d11-4a7a-8c81-a536760e4e66","uri":"","name":"iRobot Roomba™ 405","category":"hardware","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3694e92e-4364-4e2d-97c7-270451495327","sortOrder":2},"sortOrder":2,"tags":[{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"1347c8ab-8d11-4a7a-8c81-a536760e4e66"}],"recentChangeFlags":null},{"id":"240b6e97-bf3b-465a-a95e-b41577972f61","uri":"","name":"iRobot Roomba™ 505","category":"hardware","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c7848a7e-9ccc-4508-931c-2a31cba479a5","sortOrder":3},"sortOrder":3,"tags":[{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"240b6e97-bf3b-465a-a95e-b41577972f61"}],"recentChangeFlags":null},{"id":"07cb1a61-3338-47c8-aa97-8ef485401f74","uri":"","name":"iRobot Roomba™ 705","category":"hardware","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"82688a4b-fefa-429e-9495-9cc7e89be13f","sortOrder":4},"sortOrder":4,"tags":[{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"07cb1a61-3338-47c8-aa97-8ef485401f74"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"36b55bbe-72f1-4e59-9a7d-62a1ca6b796f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":300000,"p2MinCents":200000,"p3MaxCents":100000,"p3MinCents":50000,"p4MaxCents":25000,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eiRobot Roomba™ 105, 205, 405, 505, and 705\u003c/p\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":2000,"max":3000},"3":{"min":500,"max":1000},"4":{"min":0,"max":250},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"156d3382-c848-4541-89ee-783ccde70ded","name":"iRobot Mobile Apps","targets":[{"id":"35d38f89-4db0-4f4a-9789-4ba881cab13b","uri":"https://apps.apple.com/us/app/roomba-home/id6504274697","name":"https://apps.apple.com/us/app/roomba-home/id6504274697","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0a155fa4-fe2a-4ac4-a409-5590dddc8953","sortOrder":0},"sortOrder":0,"tags":[{"id":"63c4a71d-215f-49ca-8ea8-240dfbf82d61","name":"Objective-C","targetId":"35d38f89-4db0-4f4a-9789-4ba881cab13b"},{"id":"7692155d-e2db-4c50-abd5-208448a85fde","name":"SwiftUI","targetId":"35d38f89-4db0-4f4a-9789-4ba881cab13b"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"35d38f89-4db0-4f4a-9789-4ba881cab13b"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"35d38f89-4db0-4f4a-9789-4ba881cab13b"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"35d38f89-4db0-4f4a-9789-4ba881cab13b"}],"recentChangeFlags":null},{"id":"a2b8a5c8-a96e-4614-a9d5-746247aaa35a","uri":"https://play.google.com/store/apps/details?id=com.irobot.home.prime","name":"https://play.google.com/store/apps/details?id=com.irobot.home.prime","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4e53a403-73bf-41aa-b558-d29c0c03866e","sortOrder":1},"sortOrder":1,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"a2b8a5c8-a96e-4614-a9d5-746247aaa35a"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"a2b8a5c8-a96e-4614-a9d5-746247aaa35a"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"a2b8a5c8-a96e-4614-a9d5-746247aaa35a"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"a2b8a5c8-a96e-4614-a9d5-746247aaa35a"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"212f4f4a-f9ce-40cb-a3e5-c61bd75a6c09","p1MaxCents":300000,"p1MinCents":250000,"p2MaxCents":200000,"p2MinCents":100000,"p3MaxCents":90000,"p3MinCents":50000,"p4MaxCents":30000,"p4MinCents":10000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eRoomba Home™ Mobile Applications for iOS and Android\u003c/p\u003e","rewardRangeData":{"1":{"min":2500,"max":3000},"2":{"min":1000,"max":2000},"3":{"min":500,"max":900},"4":{"min":100,"max":300},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"ae0db8cb-807a-459b-ba94-0001aa4253d4","name":"iRobot Cloud","targets":[{"id":"315b2c0a-2e3f-42c1-87d7-f983bfb417a4","uri":"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements/{entitlement_id}","name":"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements/{entitlement_id}","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"be0557a4-78f4-43a8-87db-0953d3f8b6de","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"315b2c0a-2e3f-42c1-87d7-f983bfb417a4"},{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"315b2c0a-2e3f-42c1-87d7-f983bfb417a4"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"315b2c0a-2e3f-42c1-87d7-f983bfb417a4"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"315b2c0a-2e3f-42c1-87d7-f983bfb417a4"}],"recentChangeFlags":null},{"id":"8b15e5a4-83a1-4086-8608-a68ea8aaeea1","uri":"","name":"iRobot API Endpoint","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"713ff483-7b01-47f0-a9de-adbf9f686e9b","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"8b15e5a4-83a1-4086-8608-a68ea8aaeea1"}],"recentChangeFlags":null},{"id":"0d85c0c4-3fa5-4ede-94db-062ffaadf31a","uri":"https://zuora-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/notifications/raas","name":"https://zuora-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/notifications/raas","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fe2f88f6-9090-4d0a-aeb3-7eb0dc2109f2","sortOrder":3},"sortOrder":3,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"0d85c0c4-3fa5-4ede-94db-062ffaadf31a"},{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"0d85c0c4-3fa5-4ede-94db-062ffaadf31a"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"0d85c0c4-3fa5-4ede-94db-062ffaadf31a"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"0d85c0c4-3fa5-4ede-94db-062ffaadf31a"}],"recentChangeFlags":null},{"id":"71f8e1bf-26dc-415b-a4cc-c1d03c3626c3","uri":"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/robots/{robot_id}/entitlements","name":"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/robots/{robot_id}/entitlements","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"66cb4174-6421-4713-b3cc-a7b8c3e2d4e7","sortOrder":4},"sortOrder":4,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"71f8e1bf-26dc-415b-a4cc-c1d03c3626c3"},{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"71f8e1bf-26dc-415b-a4cc-c1d03c3626c3"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"71f8e1bf-26dc-415b-a4cc-c1d03c3626c3"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"71f8e1bf-26dc-415b-a4cc-c1d03c3626c3"}],"recentChangeFlags":null},{"id":"44f4713a-4a72-45f5-89fb-b0f823cd3f3f","uri":"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/users/{user_id}/entitlements","name":"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/users/{user_id}/entitlements","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0c5710b5-4e20-4613-923b-83d9aa8ea769","sortOrder":5},"sortOrder":5,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"44f4713a-4a72-45f5-89fb-b0f823cd3f3f"},{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"44f4713a-4a72-45f5-89fb-b0f823cd3f3f"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"44f4713a-4a72-45f5-89fb-b0f823cd3f3f"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"44f4713a-4a72-45f5-89fb-b0f823cd3f3f"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":{"id":"87154c28-71d2-4e76-9273-d2e1cf79c4d5","p1MaxCents":150000,"p1MinCents":100000,"p2MaxCents":75000,"p2MinCents":50000,"p3MaxCents":50000,"p3MinCents":25000,"p4MaxCents":25000,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003ch3\u003eAPI Endpoints\u003c/h3\u003e\n\n\u003cp\u003eThe In-Scope API Gateway Endpoints require proper authentication to execute any commands. The Focus Area for these targets are on reports that can bypass and circumvent the authentication implementation. Each endpoint accepts the following HTTP Methods:\u003c/p\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eEndpoint URL\u003c/th\u003e\n\u003cth\u003eHTTP Methods\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003e\u003cstrong\u003eGET,POST\u003c/strong\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements/%7Bentitlement_id%7D\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements/{entitlement_id}\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003e\u003cstrong\u003ePUT, DELETE\u003c/strong\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://zuora-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/notifications/raas\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://zuora-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/notifications/raas\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003e\u003cstrong\u003ePOST\u003c/strong\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/robots/%7Brobot_id%7D/entitlements\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/robots/{robot_id}/entitlements\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003e\u003cstrong\u003eGET\u003c/strong\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ca href=\"https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/users/%7Buser_id%7D/entitlements\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/users/{user_id}/entitlements\u003c/a\u003e\u003c/td\u003e\n\u003ctd\u003e\u003cstrong\u003eGET\u003c/strong\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e","rewardRangeData":{"1":{"min":1000,"max":1500},"2":{"min":500,"max":750},"3":{"min":250,"max":500},"4":{"min":0,"max":250},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"e7444d59-4490-4a38-9814-0d5fecb25a46","name":"iRobot Commercial Web Properties","targets":[{"id":"b67f89b0-30ea-446b-a0cd-53cd21ccc637","uri":"https://www.irobot.com","name":"https://www.irobot.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"687a366d-4169-4d09-9f80-f3cfee3d072e","sortOrder":0},"sortOrder":0,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"b67f89b0-30ea-446b-a0cd-53cd21ccc637"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b67f89b0-30ea-446b-a0cd-53cd21ccc637"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"b67f89b0-30ea-446b-a0cd-53cd21ccc637"}],"recentChangeFlags":null},{"id":"c3666e83-8681-4693-8447-48059f561322","uri":"https://www.irobot.ca/en_CA","name":"https://www.irobot.ca/en_CA","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"18c511ec-83cb-42aa-acca-356ad6ce8c19","sortOrder":1},"sortOrder":1,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"c3666e83-8681-4693-8447-48059f561322"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"c3666e83-8681-4693-8447-48059f561322"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"c3666e83-8681-4693-8447-48059f561322"}],"recentChangeFlags":null},{"id":"dcda32df-747c-48d1-8c94-54ae84dd8557","uri":"https://www.irobot.ca/fr_CA/home","name":"https://www.irobot.ca/fr_CA/home","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"39fae1d9-e4a0-4255-ae51-0457e52e14bc","sortOrder":2},"sortOrder":2,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"dcda32df-747c-48d1-8c94-54ae84dd8557"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"dcda32df-747c-48d1-8c94-54ae84dd8557"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"dcda32df-747c-48d1-8c94-54ae84dd8557"}],"recentChangeFlags":null},{"id":"b97af88e-88fc-4198-94c7-87aa8e393f08","uri":"https://www.irobot.at/","name":"https://www.irobot.at/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"96ed01f1-a9d7-47ca-95df-6c10e0bd62b8","sortOrder":3},"sortOrder":3,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"b97af88e-88fc-4198-94c7-87aa8e393f08"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b97af88e-88fc-4198-94c7-87aa8e393f08"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"b97af88e-88fc-4198-94c7-87aa8e393f08"}],"recentChangeFlags":null},{"id":"d933a4a2-32dc-4649-bf0f-854ee2059cec","uri":"https://www.irobot.be/","name":"https://www.irobot.be/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6a5a4836-e517-4c4f-bfdc-c69e731112ed","sortOrder":4},"sortOrder":4,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"d933a4a2-32dc-4649-bf0f-854ee2059cec"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d933a4a2-32dc-4649-bf0f-854ee2059cec"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"d933a4a2-32dc-4649-bf0f-854ee2059cec"}],"recentChangeFlags":null},{"id":"5ac58a30-b204-4633-bb33-0baeef32a0dc","uri":"https://www.irobot.de/","name":"https://www.irobot.de/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"50239b6c-d251-42b2-bee8-d8ce66da5110","sortOrder":5},"sortOrder":5,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"5ac58a30-b204-4633-bb33-0baeef32a0dc"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5ac58a30-b204-4633-bb33-0baeef32a0dc"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"5ac58a30-b204-4633-bb33-0baeef32a0dc"}],"recentChangeFlags":null},{"id":"ead0061c-08fa-4516-94e5-1a8dbe6ee7b1","uri":"https://www.irobot.es/","name":"https://www.irobot.es/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6d53d7aa-3ebd-42e1-a816-a6c76d53f63d","sortOrder":6},"sortOrder":6,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"ead0061c-08fa-4516-94e5-1a8dbe6ee7b1"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ead0061c-08fa-4516-94e5-1a8dbe6ee7b1"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"ead0061c-08fa-4516-94e5-1a8dbe6ee7b1"}],"recentChangeFlags":null},{"id":"a918949f-5334-4bbf-a071-eca056ced496","uri":"https://www.irobot.fr/","name":"https://www.irobot.fr/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"557d89ca-f26a-4b17-b85e-fc2ec0255806","sortOrder":7},"sortOrder":7,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"a918949f-5334-4bbf-a071-eca056ced496"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a918949f-5334-4bbf-a071-eca056ced496"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"a918949f-5334-4bbf-a071-eca056ced496"}],"recentChangeFlags":null},{"id":"1b154bd0-e1f3-4cf7-93db-d23e66fa6d04","uri":"https://www.irobot.co.uk/","name":"https://www.irobot.co.uk/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3b1d822f-1347-4728-9a6b-37723f4cf655","sortOrder":8},"sortOrder":8,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"1b154bd0-e1f3-4cf7-93db-d23e66fa6d04"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1b154bd0-e1f3-4cf7-93db-d23e66fa6d04"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"1b154bd0-e1f3-4cf7-93db-d23e66fa6d04"}],"recentChangeFlags":null},{"id":"5c3927b9-afec-4ccd-bb9c-9720537be415","uri":"https://www.irobot.ie/","name":"https://www.irobot.ie/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ab8502d8-a92f-4221-a1b3-83b44a22f237","sortOrder":9},"sortOrder":9,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"5c3927b9-afec-4ccd-bb9c-9720537be415"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5c3927b9-afec-4ccd-bb9c-9720537be415"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"5c3927b9-afec-4ccd-bb9c-9720537be415"}],"recentChangeFlags":null},{"id":"b919448d-863c-4409-8ccc-f762225bdb33","uri":"https://www.irobot.nl/","name":"https://www.irobot.nl/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f13ab172-44a7-4f14-b7f3-bdc740ac7fdd","sortOrder":10},"sortOrder":10,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"b919448d-863c-4409-8ccc-f762225bdb33"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b919448d-863c-4409-8ccc-f762225bdb33"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"b919448d-863c-4409-8ccc-f762225bdb33"}],"recentChangeFlags":null},{"id":"1fcfc670-8c69-4719-b69a-29552253af9b","uri":"https://www.irobot.pt/","name":"https://www.irobot.pt/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c7e637bd-587b-40b8-a51c-9da83e4dde55","sortOrder":11},"sortOrder":11,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"1fcfc670-8c69-4719-b69a-29552253af9b"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1fcfc670-8c69-4719-b69a-29552253af9b"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"1fcfc670-8c69-4719-b69a-29552253af9b"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":3,"description":null,"rewardRange":{"id":"5d257690-7e6d-4c4b-b109-c718a33460a3","p1MaxCents":100000,"p1MinCents":75000,"p2MaxCents":75000,"p2MinCents":50000,"p3MaxCents":50000,"p3MinCents":25000,"p4MaxCents":25000,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":750,"max":1000},"2":{"min":500,"max":750},"3":{"min":250,"max":500},"4":{"min":0,"max":250},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"5b4fe3d9-7107-4a54-a272-4ca95a1d7547","name":"All other official iRobot Web Applications","targets":[{"id":"94cc8c1b-3a66-4e0f-aaf5-1ef50157b2c3","uri":"https://www.homesupport.irobot.com","name":"https://www.homesupport.irobot.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2ebe00a7-39ce-4e0c-a8f2-4abf76b8992f","sortOrder":0},"sortOrder":0,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"94cc8c1b-3a66-4e0f-aaf5-1ef50157b2c3"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"94cc8c1b-3a66-4e0f-aaf5-1ef50157b2c3"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"94cc8c1b-3a66-4e0f-aaf5-1ef50157b2c3"}],"recentChangeFlags":null},{"id":"f008ba6c-3c86-456f-8861-e7891a9945c5","uri":"https://media.irobot.com","name":"https://media.irobot.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"adcd5279-54d4-43ed-8972-301424d62493","sortOrder":1},"sortOrder":1,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"f008ba6c-3c86-456f-8861-e7891a9945c5"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f008ba6c-3c86-456f-8861-e7891a9945c5"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"f008ba6c-3c86-456f-8861-e7891a9945c5"}],"recentChangeFlags":null},{"id":"308c7c5e-8e0c-4a53-b2cb-ebda834ce7c2","uri":"https://investor.irobot.com","name":"https://investor.irobot.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b86b85eb-f5b1-4b75-9bb4-973fa8b0c3d8","sortOrder":2},"sortOrder":2,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"308c7c5e-8e0c-4a53-b2cb-ebda834ce7c2"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"308c7c5e-8e0c-4a53-b2cb-ebda834ce7c2"}],"recentChangeFlags":null},{"id":"3493bcb6-afad-4903-9a02-5e735335c51c","uri":"https://answers.irobot.com","name":"https://answers.irobot.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"06ce6b11-cce1-4dd8-9d61-d66ca993c23f","sortOrder":3},"sortOrder":3,"tags":[{"id":"481480d5-cf87-4122-900f-18307fe19a86","name":"Salesforce","targetId":"3493bcb6-afad-4903-9a02-5e735335c51c"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3493bcb6-afad-4903-9a02-5e735335c51c"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"3493bcb6-afad-4903-9a02-5e735335c51c"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":4,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThese web applications are officially related to the iRobot brand and company, but are not managed by iRobot Corporation and as such will not be eligible for monetary reward.\u003c/p\u003e\n\n\u003cp\u003eExamples include, but are not limited to:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003ehttps://homesupport.irobot.com\u003c/li\u003e\n\u003cli\u003ehttps://media.irobot.com\u003c/li\u003e\n\u003cli\u003ehttps://investor.irobot.com\u003c/li\u003e\n\u003cli\u003ehttps://answers.irobot.com\u003c/li\u003e\n\u003cli\u003eAny irobot.tld not included in the \u0026quot;iRobot Commercial Websites\u0026quot; target group\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"db300a05-4aae-47bb-883f-9d77d5877ff7","code":"irobot","state":"in_progress","endsAt":null,"bountyId":"c52b9b51-5b5f-40db-a700-abfa16aff3e5","startsAt":"2017-08-24T16:30:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Electronics","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/77b1/f29b/948ed4dd/f170965393480a99e953718aca1fddf9_irobot.jpg","logoBackgroundColor":"#64a70a","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-06-02T14:54:31.756Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/irobot","changelogs":"/engagements/irobot/changelog","submissions":null,"announcements":"/engagements/irobot/announcements","hallOfFame":"/engagements/irobot/hall_of_fames","crowdstream":"/engagements/irobot/crowdstream"},"announcementsCount":21,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/irobot/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=irobot\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/irobot/engagement_subscribers","engagementChangelogsUrl":"/engagements/irobot/changelog","publishedAt":"2025-11-12T14:34:49.105Z","engagementChangelogUrl":"/engagements/irobot/changelog/95b563b0-74ef-4336-b844-625172a41fed","createUserFeedbacksUrl":"/engagements/irobot/feedbacks","engagementCrowdstreamUrl":"/engagements/irobot/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}