{"id":"2288e61b-599b-44c9-91cb-c8c27581a872","engagementId":"8a82378c-c9a8-4a27-80d1-7c1c21ba77a6","data":{"brief":{"id":"a850eae9-311c-4211-a707-aa579091f6bb","name":"Northwestern Mutual VDP","tagline":"For 160 years, we've helped our clients achieve financial security by building lifelong relationships to help them create and carry out their financial plans. Spend Your Life Living","description":"\u003ch2\u003eWelcome!\u003c/h2\u003e\n\n\u003cp\u003eFor 160 years, we've helped our clients achieve financial security by building lifelong relationships to help them create and carry out their financial plans. Spend Your Life Living. \u003c/p\u003e\n\n\u003cp\u003eThe security and privacy of clients' confidential information are important to Northwestern Mutual. The company takes its responsibility to protect this information seriously and uses technical, administrative, and physical controls to safeguard its data.\u003c/p\u003e\n\n\u003cp\u003eWe want to hear from security researchers (“You” or “Your”) who have information related to suspected security vulnerabilities of any Northwestern Mutual services exposed to the internet. \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSubmitting a Report\u003c/h2\u003e\n\n\u003cp\u003eYou will need to create a \u003ca href=\"https://bugcrowd.com/user/sign_up\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd account\u003c/a\u003e to report vulnerabilities. \u003c/p\u003e\n\n\u003cp\u003eThe report should include sufficient information to permit Bugcrowd and Northwestern Mutual to validate and reproduce the issue. \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003cbr\u003e\nNote - This program does not provide monetary rewards. \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eWhat We Expect of You\u003c/h2\u003e\n\n\u003cp\u003eBy submitting Your report to us: \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eYou agree not to publicly disclose the Vulnerability until Northwestern Mutual agrees to a public disclosure \u003c/li\u003e\n\u003cli\u003eYou represent the report is original to You and that You did not copy the report or any part of it from another third party \u003c/li\u003e\n\u003cli\u003eYou allow Northwestern Mutual and its subsidiaries the unconditional ability to use, distribute, and/or disclose information provided in Your report \u003c/li\u003e\n\u003cli\u003eYou agree to not perform any of the “Out of Scope” activities listed below and will stay within the approved Scope. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eWhat to Expect of Us\u003c/h2\u003e\n\n\u003cp\u003eIf You identify a Vulnerability in accordance with this Policy, Northwestern Mutual commits to working with You to understand, validate, and address the Vulnerability appropriately per the assessed risk. \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut of Scope Activities and Vulnerabilities\u003c/h2\u003e\n\n\u003ch4\u003eOut of Scope Activities:\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003eTaking any action that will negatively affect Northwestern Mutual, its subsidiaries or agents \u003c/li\u003e\n\u003cli\u003eAny communication (verbal, written, or otherwise) with anyone affiliated with or working for Northwestern Mutual (including Financial Representatives and Network Offices) is strictly prohibited (No Social engineering. Communication with the program owners in the Bugcrowd platform is fine).\u003c/li\u003e\n\u003cli\u003eDestruction or corruption of data, information, or infrastructure, including any attempts to do so \u003c/li\u003e\n\u003cli\u003eDiscovery dependent on social engineering techniques of any kind \u003c/li\u003e\n\u003cli\u003eAny exploitation actions, including accessing or attempting to access Northwestern Mutual data or information, beyond what is required for the initial \"Proof of Vulnerability\". For the avoidance of doubt, this means your actions to obtain and then evidence the Proof of Vulnerability must stop immediately after initial access to data or a system. \u003c/li\u003e\n\u003cli\u003eAttacks on third-party services \u003c/li\u003e\n\u003cli\u003eDenial of Service attacks (DoS) or Distributed Denial of Services (DDoS) attacks \u003c/li\u003e\n\u003cli\u003eAny attempt to gain physical access to Northwestern Mutual property or data centers is strictly prohibited \u003c/li\u003e\n\u003cli\u003eUse of assets that You do not own or are not authorized or licensed to use when discovering a Vulnerability \u003c/li\u003e\n\u003cli\u003eViolation of any laws or agreements while discovering or reporting any Vulnerability \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eOut of Scope Vulnerabilities\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003eVulnerabilities identified with automated tools (including web scanners) that do not include proof-of-concept code or a demonstrated exploit \u003c/li\u003e\n\u003cli\u003eThird-party applications, websites, or services that integrate with or link to Northwestern Mutual \u003c/li\u003e\n\u003cli\u003eDiscovery of any in-use service (vulnerable 3rd-party code, for example) whose running version includes known vulnerabilities without demonstrating an existing security impact \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e","industryTagId":"6bf30795-7930-4c2b-bb79-d2c4f15f7740","targetsOverview":"\u003ch1\u003e\u003cem\u003eAdditional Target Information\u003c/em\u003e\u003c/h1\u003e\n\n\u003ch2\u003eIn Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eAnything Owned by Northwestern Mutual on the Public Internet\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eNorthwesternmutual.com\u003c/strong\u003e - Web application, main site of Northwestern Mutual for the public to learn more about our product offerings.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch1\u003e\u003cem\u003eOther Information\u003c/em\u003e\u003c/h1\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ePublic password breach dumps, infostealer password lists, and similar items are NOT in-scope and will not be considered for a valid submission\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eAcronyms:\u003c/h2\u003e\n\n\u003cp\u003eNM uses a lot of acronyms that you're likely not familiar with. We've made a list of the most likely one's you'll run into during your testing to aid in your analysis.\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAFR - Assistant Financial Representative\u003c/li\u003e\n\u003cli\u003eCX - Client Experience, our main web application\u003c/li\u003e\n\u003cli\u003eFR - Financial Representative\u003c/li\u003e\n\u003cli\u003eMX - Mobile Experience, Refers to our mobile app and API endpoints\u003c/li\u003e\n\u003cli\u003eSX - Suspect Experience, In insurance terminology, before a person is a client they are considered a \"suspect\"\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eTypes of Users:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eProspect - Prospective future clients who have interest in buying products from Northwestern mutual and have registered to the online platform. User should receive an online invite from a financial representative.  Prospect Users will have access only to the basic functionalities of the CX platform.\u003c/li\u003e\n\u003cli\u003eClient - Users who owns a product (Risk/investment) and registered to the Northwestern mutual online platform.  Clients can directly register in the application using their product number and Personal Information (SSN, DOB, First name and Last Name).\u003c/li\u003e\n\u003cli\u003eInsurance Clients - Users who own any of the following products will have /Insurance page with product information:  Life, DI, BDI, LTC, VL, UL, VUL, BOLI, and COLI\u003c/li\u003e\n\u003cli\u003eInvestment Clients - Users who own any of the following products will have /Investment page with product information:  Brokerage, Advisory, PCS/PCS Trusts, Fixed Annuities, Variable Annuities, Income Plans, Signature Annuities, and Access Funds\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eImportant Legal Terms:\u003c/h2\u003e\n\n\u003col\u003e\n\u003cli\u003e The parties to this Agreement are you and the Northwestern Mutual Life Insurance Company.\u003c/li\u003e\n\u003cli\u003e By participating in the Program, investigating a potential vulnerability, or submitting a vulnerability, you acknowledge that you have not disclosed and agree that you will not disclose the vulnerability to anyone other than the Northwestern Mutual Life Insurance Company.  Any disclosure would violate this Agreement unless approved in writing by an authorized employee of the Northwestern Mutual Life Insurance Company responsible for cybersecurity threat detection and mitigation.  You agree that money damages may not be a sufficient remedy for a breach of this paragraph by you and that the Northwestern Mutual Life Insurance Company will be entitled to specific performance as a remedy to this breach and an injunction without the posting of a bond.    Such remedy will not be deemed to be the exclusive remedy for any such breach but will be in addition to all other remedies available at law or equity to the Northwestern Mutual Life Insurance Company.\u003cbr\u003e\n\u003c/li\u003e\n\u003cli\u003e By submitting information about a potential vulnerability, you are granting the Northwestern Mutual Life Insurance Company a worldwide, royalty-free, non-exclusive license to use your submission for the purpose of addressing vulnerabilities in products and services offered by the Northwestern Mutual Life Insurance Company.\u003c/li\u003e\n\u003cli\u003e In the event of substantial duplicate submissions, the Northwestern Mutual Life Insurance Company may at its discretion provide a reward only for the earliest received submission.  Eligibility for rewards, determination of the recipients for the rewards and the amount of rewards is at the discretion of the Northwestern Mutual Life Insurance Company.\u003cbr\u003e\n\u003c/li\u003e\n\u003cli\u003e If issues reported to our bug bounty program affect a third party or another vendor, the Northwestern Mutual Life Insurance Company reserves the right to forward details of the issue along to the party without further discussion with the researcher.\u003c/li\u003e\n\u003cli\u003e You are responsible for all taxes associated with and imposed on any reward you may receive from the Northwestern Mutual Life Insurance Company.\u003cbr\u003e\n\u003c/li\u003e\n\u003cli\u003e If you inadvertently access proprietary customer, employee, or business related information during your testing, the information must not be used, disclosed, stored, recorded or processed any further in any way.  Inadvertent access to this type of data must be disclosed within your submission with identifying information of the data source and remediation you have taken to secure the data.\u003c/li\u003e\n\u003cli\u003e Your research activities must not negatively impact the Northwestern Mutual Life Insurance Company’s or LearnVest’s product or services in any way or the online environment availability or performance of such products or services.\u003c/li\u003e\n\u003cli\u003e These terms and conditions along with the specifications, requirements and restrictions set forth in the bug bounty brief constitute the entire Agreement of the parties.  This Agreement is covered by California law.  This agreement can only be amended by the Northwestern Mutual Life Insurance Company.\u003c/li\u003e\n\u003cli\u003eIf any part of this Agreement is found to be illegal or unenforceable, then the parties will be relieved of their responsibilities arising under such portion, but only to the extent that such art of the Agreement is illegal or unenforceable.\u003c/li\u003e\n\u003cli\u003eYou must not be the author of the code identified as a vulnerability.\u003c/li\u003e\n\u003cli\u003eYou must not be an employee or spouse of an employee of the Northwestern Mutual Life Insurance Company or any of its affiliates or subsidiaries, including the Northwestern Mutual Wealth Management Company, NMIS, or LearnVest.\u003c/li\u003e\n\u003c/ol\u003e\n\n\u003cp\u003eTHE NORTHWESTERN MUTUAL LIFE INSURANCE COMPANY ON BEHALF OF ITSELF AND AFFILIATES AND SUBSIDIARIES RESERVES THE SOLE RIGHT TO MODIFY THIS AGREEMENT WITHOUT NOTICE.  ALL PARTICIPANTS AND SUBMISSIONS ARE STRICTLY VOLUNTARY.  THIS OFFER IS VOID WHERE PROHIBITED BY AND BY PARTICIPATING YOU ACKNOWLEDGE AND AGREE YOU WILL ABIDE BY ALL APPLICABLE FEDERAL, STATE AND LOCAL LAWS.  YOU MUST ALSO NOT DISRUPT AND SERVICE OR COMPROMISE ANY PERSON’S DATA.\u003c/p\u003e","safeHarborStatus":null,"collaborationEnabled":false,"additionalInformation":""},"scope":[{"id":"2a5b015b-0077-4f19-8b04-195fbc693612","name":"🎯 In Scope","targets":[{"id":"622bede9-b4f7-4350-a1ea-1aca52c897ee","uri":"https://northwesternmutual.com","name":"*.northwesternmutual.com\t","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2da31556-54a5-4ac6-9f2d-7a9893472d65","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"622bede9-b4f7-4350-a1ea-1aca52c897ee"},{"id":"803518dc-5ae1-4e48-8de4-5b61b42a6bd0","name":"Amazon S3","targetId":"622bede9-b4f7-4350-a1ea-1aca52c897ee"},{"id":"9dd4899d-3a63-4126-8c83-c1fc1de50c25","name":"Amazon Cloudfront","targetId":"622bede9-b4f7-4350-a1ea-1aca52c897ee"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"622bede9-b4f7-4350-a1ea-1aca52c897ee"},{"id":"c3412833-26e7-4bbd-907f-760d9da61232","name":"Newrelic","targetId":"622bede9-b4f7-4350-a1ea-1aca52c897ee"}],"recentChangeFlags":null},{"id":"11a33a36-5aa9-4c74-8eb7-5af51ae30e73","uri":"","name":"Anything Owned by Northwestern Mutual on the Public Internet Not Listed as Out of Scope","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f9daaff9-dfd4-4e46-a217-fdcf124edb6a","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"11a33a36-5aa9-4c74-8eb7-5af51ae30e73"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThis is not an all encompassing in-scope list. Anything that is owned by Northwestern Mutual and is on the public internet (that is not marked as Out of Scope) is also in scope for this VDP. \u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"0e169ca9-5bf7-497d-b910-d3f692b91270","name":"❌ Out of Scope - General","targets":[{"id":"b0d82f79-feb4-453e-b50a-317062ddf1da","uri":null,"name":"northwesternmutual.com/find-a-financial-advisor/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b747b985-f557-49d8-9e5e-29a76abbb79d","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b0d82f79-feb4-453e-b50a-317062ddf1da"}],"recentChangeFlags":null},{"id":"47b7e6e9-04d8-49ce-9615-0ae5b82cad4f","uri":"","name":"northwesternmutual.com/financial/advisor/*","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3c1bd9f8-c86e-4f03-97ca-43385962d6c2","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"47b7e6e9-04d8-49ce-9615-0ae5b82cad4f"}],"recentChangeFlags":null},{"id":"b323db83-9518-41f4-8833-3173a8e90a55","uri":null,"name":"northwesternmutual.com/careers-apply/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"63683714-eccb-40bd-b518-afb571d0fddf","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b323db83-9518-41f4-8833-3173a8e90a55"}],"recentChangeFlags":null},{"id":"7f8ce6e2-3f0d-4915-a234-fc88615d42cd","uri":null,"name":"northwesternmutual.com/report-a-death/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1c9dc39c-d9f6-4530-b6e3-f78cf714febc","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7f8ce6e2-3f0d-4915-a234-fc88615d42cd"}],"recentChangeFlags":null},{"id":"947db3d1-7cbe-4c1d-991e-671853252c46","uri":null,"name":"northwesternmutual.com/notice-of-long-term-care-form/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"27110e33-870f-4503-88f9-5446bd567018","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"947db3d1-7cbe-4c1d-991e-671853252c46"}],"recentChangeFlags":null},{"id":"7eacea21-2bca-42ef-91d6-10833b1b86be","uri":"","name":"northwesternmutual.com/financial-professionals/?name=*","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3750fda2-8c99-4f66-a307-40272c25c85b","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7eacea21-2bca-42ef-91d6-10833b1b86be"}],"recentChangeFlags":null},{"id":"de20ea46-69a7-4d83-a0a4-9fc550a53120","uri":"","name":"northwesternmutual.com/notice-of-disability-form/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7984be5a-bf52-49a6-a4a5-ab3935d2be69","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"de20ea46-69a7-4d83-a0a4-9fc550a53120"}],"recentChangeFlags":null},{"id":"28270228-758d-4829-b973-3dd846a3577a","uri":"","name":"northwesternmutual.com/notice-of-group-disability-form/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d662abd4-2250-4a57-8148-60af31b6a8d3","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"28270228-758d-4829-b973-3dd846a3577a"}],"recentChangeFlags":null}],"inScope":false,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThe following pages have forms that submit data to real systems and are out of scope for any Bugcrowd program. This includes the API calls they make as well.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"1a569587-f450-4c5a-8774-aeadac6171a4","name":"❌ Out of Scope - Third Party","targets":[{"id":"296cd7d4-2a67-4722-a1f8-58c61ea62953","uri":"","name":"Emerald Publications - Anything That Resolves to 199.59.136.0 - 199.59.139.255 (CIDR: 199.59.136.0/22)","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8fae961a-27b9-4426-93b6-d5c03b416873","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"296cd7d4-2a67-4722-a1f8-58c61ea62953"}],"recentChangeFlags":null},{"id":"842804c4-fab6-495d-b6ad-1093e27e0368","uri":null,"name":"Any third-party assets on *.nm.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c145786a-0391-42e1-883b-a8807d97d4c5","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"842804c4-fab6-495d-b6ad-1093e27e0368"}],"recentChangeFlags":null},{"id":"a956a6a1-17ab-40be-b53e-a695632c378a","uri":"","name":"clientwise.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"52a82347-befa-4254-a12a-e16df3580563","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"9dc3a162-f5e4-4c94-bf7c-4c3630b2c3dd","uri":"","name":"events.nmfn.com (3rd party tool not owned/managed by us)","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a59f92e6-62f4-4c9d-a0db-2bc63a1a37e4","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"903693cd-3de7-4aee-9dac-34c2199cd258","uri":"","name":"nmresearchlibrary.nml.com (3rd party, not owned/managed by us)","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ce543264-9676-4ce7-a624-69a47b71481a","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":2,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease know that we work with a lot of third parties who use our branding and may look like they are owned by us, but are actually not affiliated with us. We will keep updating this list as more are identified.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"8a82378c-c9a8-4a27-80d1-7c1c21ba77a6","code":"northwestern-vdp","state":"in_progress","endsAt":null,"bountyId":"cfda5c72-1ae2-44b8-a435-66a8cdea24cd","startsAt":"2021-09-09T18:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Finance","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/b2eb/0d01/61f3258d/3f118d1d511d36cf6ad9c045267eee99_0815c6d62c67a9bcc47db77cbaa74d49_schema-192x192.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":false,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2021-09-09T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/northwestern-vdp","changelogs":"/engagements/northwestern-vdp/changelog","submissions":null,"announcements":"/engagements/northwestern-vdp/announcements","hallOfFame":"/engagements/northwestern-vdp/hall_of_fames","crowdstream":"/engagements/northwestern-vdp/crowdstream"},"announcementsCount":0,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/northwestern-vdp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=northwestern-vdp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/northwestern-vdp/engagement_subscribers","engagementChangelogsUrl":"/engagements/northwestern-vdp/changelog","publishedAt":"2024-10-14T15:20:48.299Z","engagementChangelogUrl":"/engagements/northwestern-vdp/changelog/2288e61b-599b-44c9-91cb-c8c27581a872","createUserFeedbacksUrl":"/engagements/northwestern-vdp/feedbacks","engagementCrowdstreamUrl":"/engagements/northwestern-vdp/crowdstream","acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}