{"id":"34794730-0036-45c7-b6c6-9a0b462b1233","engagementId":"98f28fd4-f576-440d-b885-0a0e06e91b83","data":{"brief":{"id":"1eccfddb-20e9-43bd-b0f8-8b0dfc73c436","name":"Optimizely","tagline":"Unlock Digital Potential","description":"\u003chr\u003e\n\n\u003cp\u003eAt Optimizely, we're on a mission to help people unlock their digital potential. We do that by reinventing how marketing and product teams work to create and optimize digital experiences across all channels. With our leading digital experience platform (DXP), we help companies around the world orchestrate their entire content lifecycle, monetize every digital experience and experiment across all customer touchpoints.  Optimizely has 700+ partners and nearly 1500 employees across our 21 global offices. We live each day with a simple philosophy: large enough to serve, small enough to care.\u003c/p\u003e\n\n\u003chr\u003e","industryTagId":"0e55e259-dfc5-4952-99de-5e094e40609a","targetsOverview":"\u003cp\u003eAny domain/property of Optimizely not listed in the targets section is out of scope. This includes any/all subdomains not listed above.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eSocial engineering and any research activities involving our direct customers won't be accepted as valid submissions, we highly discourage researchers from involving them, we don't provide authentication, and no, we won't provide credentials.\u003c/h3\u003e\n\n\u003ch3\u003eOut-of-Scope\u003c/h3\u003e\n\n\u003cp\u003e\u003cem\u003ewww.optimizely.com\u003c/em\u003e\u003cbr\u003e\n​\u003cbr\u003e\nDepending on their impact, not all reported issues may qualify for a monetary reward. Please refrain from:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eDenial of Service (DoS) or performing other actions that may negatively affect Optimizely users (spam)\u003c/li\u003e\n\u003cli\u003eAccessing private information (so use test accounts)\u003c/li\u003e\n\u003cli\u003eSending reports and findings from automated tools without verifying them\n​\n\u003cem\u003eThe following issues are outside the scope of our vulnerability rewards program (either ineligible or false positives):\u003c/em\u003e\n​\u003c/li\u003e\n\u003cli\u003eRendering HTML content without security impact. Rendering HTML content must demonstrate javascript execution or some other malicious action.\u003c/li\u003e\n\u003cli\u003eTriggering emails to be sent to another users account.\u003c/li\u003e\n\u003cli\u003ePages and content cached after logout.\u003c/li\u003e\n\u003cli\u003ePassword complexity requirements.\u003c/li\u003e\n\u003cli\u003eVulnerabilities in third-party applications or services which use or integrate with Optimizely:\n\n\u003cul\u003e\n\u003cli\u003ehelp.optimizely.com - Mindtouch, report bugs \u003ca href=\"https://support.mindtouch.com/hc/en-us/requests/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003ecommunity.optimizely.com - Lithium, report bugs \u003ca href=\"http://www.lithium.com/security\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eblog.optimizely.com / www.optimizely.com/blog - Wordpress, report bugs \u003ca href=\"https://make.wordpress.org/core/handbook/testing/reporting-bugs/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eplayground.optimizely.com - An internal-only site\u003c/li\u003e\n\u003cli\u003esupport.welcomesoftware.com\u003c/li\u003e\n\u003cli\u003esegment.io\u003c/li\u003e\n\u003cli\u003econtent.guide.welcomesoftware.com\u003c/li\u003e\n\u003cli\u003efullstory.com\u003c/li\u003e\n\u003cli\u003enewrelic.com\u003c/li\u003e\n\u003cli\u003ependo.io\u003c/li\u003e\n\u003cli\u003eGoogle Analytics\u003c/li\u003e\n\u003cli\u003etypekit.net\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eVulnerabilities in third-party applications that are integrated with the Optimizely product via developer platform components, such as OAuth and Canvas.\u003c/li\u003e\n\u003cli\u003eKnown CVEs in used 3rd party libraries, without demonstrating how to exploit the vulnerability in the application.\u003c/li\u003e\n\u003cli\u003eDangling DNS Records - Issues related to stale CNAME records or any other DNS record.\u003c/li\u003e\n\u003cli\u003eVulnerabilities affecting users of outdated browsers or platforms.\u003c/li\u003e\n\u003cli\u003eReports relating to email spoofing (inadequate SPF, DKIM and DMARC configurations).\u003c/li\u003e\n\u003cli\u003eReports related to shared computer accounts.\u003c/li\u003e\n\u003cli\u003eSupport system accessed via the 'Provide Feedback' link.\n​\nGenerally non-qualifying Web related bug reports have little or no practical significance to product security. Google Bughunter University has a great writeup of bugs that fall into this category - \u003ca href=\"https://sites.google.com/site/bughunteruniversity/nonvuln\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://sites.google.com/site/bughunteruniversity/nonvuln\u003c/a\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eTarget Information\u003c/h3\u003e\n\n\u003cp\u003eThe Optimizely platform technology provides A/B testing tools, in which two versions of a web page can be compared for performance, and multivariate testing. Optimizely also enables personalization, which may be used for making data-driven decisions. \u003c/p\u003e\n\n\u003ch3\u003eAccess\u003c/h3\u003e\n\n\u003cp\u003eResearchers are encouraged to sign up for their own developer account here: \u003ca href=\"https://www.optimizely.com/tools/free-feature-flagging#form\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.optimizely.com/tools/free-feature-flagging#form\u003c/a\u003e - using their @bugcrowdninja.com email address on the main Optimizely site. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://researcherdocs.bugcrowd.com/v2.0/docs/your-bugcrowdninja-email-address\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\n\u003ch3\u003eFocus Areas\u003c/h3\u003e\n\n\u003cp\u003eAt Optimizely, security is a key priority. Therefore we invite skilled researchers to participate in our bug bounty program. Below are the 3 focus areas of the program:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eWeb:\u003c/strong\u003e Optimizely customers embed a small Javascript snippet into their web pages. This javascript is served from a CDN. The javascript contains the logic for the experiments. This is the most sensitive part of our product and we are particularly interested in vulnerabilities related to this snippet.\n​\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eSDK:\u003c/strong\u003e Optimizely customers embed a small library in their applications. This library contains the logic for the experiments.\n​\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eEditor:\u003c/strong\u003e Optimizely customers use the editor at app.optimizely.com to manage experiments for their website, such as \"does the picture of the blue car or the red car get better user engagement?\". Experiment results and account management are also done here.\n​\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\n\u003cp\u003eDocumentation that has been provided can be found in the \u003ca href=\"https://bugcrowd.com/optimizely/updates\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eprogram updates section\u003c/a\u003e.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eVulnerability types that qualify for the program include\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eCross-Site Scripting\u003c/li\u003e\n\u003cli\u003eSQL Injection\u003c/li\u003e\n\u003cli\u003eRemote Code Execution\u003c/li\u003e\n\u003cli\u003eCross-Site Request Forgery\u003c/li\u003e\n\u003cli\u003eDirectory Traversal\u003c/li\u003e\n\u003cli\u003eInformation Disclosure\u003c/li\u003e\n\u003cli\u003eContent Spoofing\u003c/li\u003e\n\u003cli\u003eUnauthorized Access\u003c/li\u003e\n\u003cli\u003ePrivilege Escalation\u003c/li\u003e\n\u003cli\u003eProvisioning Errors\n​\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eYou may submit other types of vulnerabilities unless they are listed as out of scope (refer to the VRT for ratings, etc).\u003cbr\u003e\n​\u003cbr\u003e\nPlease share screencasts using a hosted site like a password protected Vimeo, etc. We will not download or view screencast files from file sharing sites like Dropbox due to the security risk of downloading/opening arbitrary files.\u003c/p\u003e\n\n\u003cp\u003eThis program adheres to the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e for the prioritization/rating of findings.\u003c/p\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"a6fd0015-e62d-42d9-9f27-3ddf3b7a5f04","name":"In scope","targets":[{"id":"369c5688-c8fd-4e82-a148-6cafc304be67","uri":"https://app.optimizely.com/","name":"https://app.optimizely.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bf0258c4-6ba9-424b-a60a-7b284d5d9808","sortOrder":0},"sortOrder":0,"tags":[{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"369c5688-c8fd-4e82-a148-6cafc304be67"},{"id":"a5bf7fc5-03c4-42f4-b10d-5ceb23d1c064","name":"Lodash","targetId":"369c5688-c8fd-4e82-a148-6cafc304be67"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"369c5688-c8fd-4e82-a148-6cafc304be67"},{"id":"c3412833-26e7-4bbd-907f-760d9da61232","name":"Newrelic","targetId":"369c5688-c8fd-4e82-a148-6cafc304be67"}],"recentChangeFlags":null},{"id":"42bf02b4-2418-4265-9268-00ca8ac96743","uri":"https://cdn.optimizely.com/","name":"https://cdn.optimizely.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"09ceaeb9-9704-4386-a565-1afb42d2a5e9","sortOrder":0},"sortOrder":0,"tags":[{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"42bf02b4-2418-4265-9268-00ca8ac96743"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"42bf02b4-2418-4265-9268-00ca8ac96743"}],"recentChangeFlags":null},{"id":"f5b843bd-ee60-4baa-a14a-673549009195","uri":"https://cdn-pci.optimizely.com/","name":"https://cdn-pci.optimizely.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"43ea9210-116c-41ab-8b08-28c777897e8e","sortOrder":0},"sortOrder":0,"tags":[{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"f5b843bd-ee60-4baa-a14a-673549009195"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f5b843bd-ee60-4baa-a14a-673549009195"}],"recentChangeFlags":null},{"id":"fc11ffed-15e4-49c5-b348-450c614aee2f","uri":"https://optimizely-edge.com","name":"https://optimizely-edge.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ae729a9d-cf69-42c5-a854-1a51a8233310","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fc11ffed-15e4-49c5-b348-450c614aee2f"}],"recentChangeFlags":null},{"id":"42ee1319-1c94-4c0d-990e-f32338fbf1ef","uri":"https://api.optimizely.com/","name":"https://api.optimizely.com/","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c576335f-8ad9-4c86-a044-725a8ca51956","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"42ee1319-1c94-4c0d-990e-f32338fbf1ef"},{"id":"cbf0ee58-c41b-4dee-9d08-cefd01f5d7d6","name":"HTTP","targetId":"42ee1319-1c94-4c0d-990e-f32338fbf1ef"}],"recentChangeFlags":null},{"id":"447026ba-dc27-460e-bea4-0fe6228f0d5a","uri":"https://dxc.episerver.net/ ","name":"https://dxc.episerver.net/ ","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"592790fb-4238-4795-9421-75f98660e01a","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"447026ba-dc27-460e-bea4-0fe6228f0d5a"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"447026ba-dc27-460e-bea4-0fe6228f0d5a"}],"recentChangeFlags":null},{"id":"979519d7-fc11-420a-b734-cba99d255d2d","uri":"https://paasportal.episerver.net/","name":"https://paasportal.episerver.net/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7c23b8d9-f61f-47ec-a33e-98b25ea04b7c","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"979519d7-fc11-420a-b734-cba99d255d2d"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"979519d7-fc11-420a-b734-cba99d255d2d"}],"recentChangeFlags":null},{"id":"1b6f1776-564c-4edd-9580-ac3c4d3cc1ce","uri":"https://paasportal.episerver.net/api/v1.0/","name":"https://paasportal.episerver.net/api/v1.0/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0b995a86-54d5-43c2-a1d5-a0287937fe74","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"1b6f1776-564c-4edd-9580-ac3c4d3cc1ce"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"1b6f1776-564c-4edd-9580-ac3c4d3cc1ce"}],"recentChangeFlags":null},{"id":"f9a97dbe-ba0e-49e8-9000-e94f3ed34cbe","uri":"https://app.welcomesoftware.com/","name":"https://app.welcomesoftware.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a902120d-ab8f-4fca-8072-4878572b8885","sortOrder":0},"sortOrder":0,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"f9a97dbe-ba0e-49e8-9000-e94f3ed34cbe"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"f9a97dbe-ba0e-49e8-9000-e94f3ed34cbe"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f9a97dbe-ba0e-49e8-9000-e94f3ed34cbe"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"f9a97dbe-ba0e-49e8-9000-e94f3ed34cbe"}],"recentChangeFlags":null},{"id":"07805532-013a-4cf3-87da-ca80bb388c21","uri":"https://accounts.welcomesoftware.com/","name":"https://accounts.welcomesoftware.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6ec2181b-5839-4cd8-9745-6af3df23d743","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"07805532-013a-4cf3-87da-ca80bb388c21"}],"recentChangeFlags":null},{"id":"03a88353-416a-4f5f-b626-10030860c9cd","uri":"https://api.welcomesoftware.com/","name":"https://api.welcomesoftware.com/ ","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d5fdddb8-7c2c-49f2-9019-3f61d053b29a","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"03a88353-416a-4f5f-b626-10030860c9cd"}],"recentChangeFlags":null},{"id":"10872ffa-e4c8-401a-a840-a92d3e6c7144","uri":"https://cdn-app.welcomesoftware.com/","name":"https://cdn-app.welcomesoftware.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1763f4e6-9a0b-4c3e-b020-5a6647b10831","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"10872ffa-e4c8-401a-a840-a92d3e6c7144"}],"recentChangeFlags":null},{"id":"431dd7c2-0f42-414e-a627-b2abf9d64b1c","uri":"https://analytics.welcomesoftware.com/","name":"https://analytics.welcomesoftware.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9f4619a4-85d9-45c5-b1a1-f0098b4b824e","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"431dd7c2-0f42-414e-a627-b2abf9d64b1c"}],"recentChangeFlags":null},{"id":"dcd485ff-ccf7-4cb6-9711-d41045dd4859","uri":"https://flags.expeng.optimizely.com","name":"https://flags.expeng.optimizely.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4f52d8d0-40b7-4a8c-a423-3c7be4763a2e","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"dcd485ff-ccf7-4cb6-9711-d41045dd4859"}],"recentChangeFlags":null},{"id":"55e98147-e9df-4d5b-b1d1-af354fbd7787","uri":"https://accounts.cmp.optimizely.com/","name":"https://accounts.cmp.optimizely.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"eb0d52f5-3b11-41da-8886-974099c0d80c","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"55e98147-e9df-4d5b-b1d1-af354fbd7787"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"4507c711-84e6-49e3-9487-91d852297559","p1MaxCents":350000,"p1MinCents":300000,"p2MaxCents":225000,"p2MinCents":200000,"p3MaxCents":null,"p3MinCents":null,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":3000,"max":3500},"2":{"min":2000,"max":2250},"3":{"min":null,"max":null},"4":{"min":null,"max":null},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"bffaaf06-97e9-423d-b9f9-f5aba13c6b25","name":"Out of scope","targets":[{"id":"b16da85d-13a5-4bb3-9013-40323d72bead","uri":"https://www.optimizely.com/","name":"https://www.optimizely.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5c81164f-a901-4f7f-97aa-80be50978c60","sortOrder":0},"sortOrder":0,"tags":[{"id":"4077ab03-37ce-4c7d-8634-ea59ba5ef456","name":"Varnish","targetId":"b16da85d-13a5-4bb3-9013-40323d72bead"},{"id":"9533db70-7f1c-429d-93cc-fc42139d851c","name":"Erlang","targetId":"b16da85d-13a5-4bb3-9013-40323d72bead"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"b16da85d-13a5-4bb3-9013-40323d72bead"},{"id":"a5bf7fc5-03c4-42f4-b10d-5ceb23d1c064","name":"Lodash","targetId":"b16da85d-13a5-4bb3-9013-40323d72bead"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b16da85d-13a5-4bb3-9013-40323d72bead"}],"recentChangeFlags":null}],"inScope":false,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"98f28fd4-f576-440d-b885-0a0e06e91b83","code":"optimizely","state":"in_progress","endsAt":null,"bountyId":"af956a81-0a31-4be4-a92e-0e7436b7d516","startsAt":"2018-02-21T21:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Business Management","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/3f43/58eb/7fda192b/f768f4a8ed5934b6c825be845d33f0b8_Optimizely_Symbol_Full%2BColor.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2018-02-21T21:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/optimizely","changelogs":"/engagements/optimizely/changelog","submissions":null,"announcements":"/engagements/optimizely/announcements","hallOfFame":"/engagements/optimizely/hall_of_fames","crowdstream":"/engagements/optimizely/crowdstream"},"announcementsCount":11,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/optimizely/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":"updated","userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=optimizely\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/optimizely/engagement_subscribers","engagementChangelogsUrl":"/engagements/optimizely/changelog","publishedAt":"2026-09-30T19:31:29.243Z","engagementChangelogUrl":"/engagements/optimizely/changelog/34794730-0036-45c7-b6c6-9a0b462b1233","createUserFeedbacksUrl":"/engagements/optimizely/feedbacks","engagementCrowdstreamUrl":"/engagements/optimizely/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}