{"id":"6e2b5e03-644a-4127-9a22-24d539aa9622","engagementId":"f803d8e0-da0b-4559-9279-050148816a16","data":{"brief":{"id":"0028438b-e5e6-43ae-99b6-8fea4bd3c53f","name":"USAA","tagline":"We proudly serve millions of military members and their families with competitive rates on insurance, banking and investment services.","description":"\u003cp\u003eUSAA appreciates and supports engagement with security community when potential security vulnerabilities in our digital assets are reported to us in accordance with Responsible Disclosure policy. \u003c/p\u003e\n\n\u003cp\u003eOur mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"6bf30795-7930-4c2b-bb79-d2c4f15f7740","targetsOverview":"\u003cp\u003e\u003cem\u003eAny domain/property of USAA not listed in the targets section is out of scope. This includes any/all subdomains not specifically listed.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eiOS\u003c/em\u003e: \u003ca href=\"https://itunes.apple.com/us/app/usaa-mobile/id312325565?mt=8\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHere\u003c/a\u003e\u003cbr\u003e\n\u003cem\u003eAndroid\u003c/em\u003e: \u003ca href=\"https://play.google.com/store/apps/details?id=com.usaa.mobile.android.usaa\u0026amp;hl=en\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHere\u003c/a\u003e\u003c/p\u003e\n\n\u003ch3\u003eCredentials:\u003c/h3\u003e\n\n\u003cp\u003ePlease create your own accounts on our \u003ca href=\"http://www.usaa.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003emain site\u003c/a\u003e for testing.  Identity is not immediately validated, but response values are checked to ensure they are in a valid range. \u003c/p\u003e\n\n\u003ch2\u003eRules:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003ePlease follow \u003ca href=\"https://bugcrowd.com/resources/standard-disclosure-terms\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Standard Disclosure Terms\u003c/a\u003e \u003c/li\u003e\n\u003cli\u003eDo not contact USAA through any member channels, keep communications within the Bugcrowd Platform. \u003c/li\u003e\n\u003cli\u003eDo not make any attempts to phish members or employees.\u003c/li\u003e\n\u003cli\u003eSubmit detailed reproduction steps. Reports based only on automated tool/scanner results or which describe theoretical attack vectors without proof of exploitability will not be \naccepted. \u003c/li\u003e\n\u003cli\u003eMake a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with the explicit permission of the account holder.\u003c/li\u003e\n\u003cli\u003e\n\u003cem\u003eUSAA employees, USAA contractors, or USAA suppliers or any persons related to or otherwise affiliated with USAA employees or contractors or suppliers may not submit to this program\u003c/em\u003e.\u003c/li\u003e\n\u003cli\u003eNote : Excessive scan traffic may result in automated blocking\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eFocus Areas:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthentication mechanisms\u003c/li\u003e\n\u003cli\u003ePrivilege escalation (horizontal or vertical)\u003c/li\u003e\n\u003cli\u003eSQL or command injection\u003c/li\u003e\n\u003cli\u003eCross-site scripting\u003c/li\u003e\n\u003cli\u003eRemote Code Execution\u003c/li\u003e\n\u003cli\u003eCross-Site Request Forgery\u003c/li\u003e\n\u003cli\u003eInformation Disclosure\u003c/li\u003e\n\u003cli\u003eSecurity Decisions via Untrusted Inputs\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eReport Criteria:\u003c/h2\u003e\n\n\u003cp\u003eLeverage the following aspects to expedite the review of your submission an d increase the liklihood of recieving the high end of the reward range on your vulnerability report! \u003c/p\u003e\n\n\u003ch4\u003eBusiness Impact\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003eanswer the question how does this affect USAA?\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eQuality Report\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003eClear steps to reproduce\u003c/li\u003e\n\u003cli\u003eWorking proof of concept\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eDiscoverability\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003eAnswer the question how likely is this to be discovered? \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eExploitability\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003eAnswer the question how likely is this to be exploited?\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch4\u003eOut-of-Scope Vulnerabilities/Best Practices\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003eFindings related to SPF records\u003c/li\u003e\n\u003cli\u003eFindings that originate via the Wayback Machine\n\n\u003cul\u003e\n\u003cli\u003eDenial-of-Service Vulnerabilities\u003c/li\u003e\n\u003cli\u003eBrute Force Vulnerabilities\u003c/li\u003e\n\u003cli\u003eAnything requiring old browsers/old plugins/end-of-life software browsers\u003c/li\u003e\n\u003cli\u003eVulnerabilities which require physical access to a user's device\u003c/li\u003e\n\u003cli\u003eNon-sensitive information available via our Content Delivery Network or on USAA Member Community sites.\u003c/li\u003e\n\u003cli\u003eClickjacking type Vulnerabilities \u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"f4bb25ad-b7c0-40ed-a02f-c8c6715f9937","name":"API In-Scope Targets","targets":[{"id":"0fd644dd-6a58-45c4-959f-89130f06a13d","uri":"https://api.usaa.com/","name":"api.usaa.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"357a5e55-982d-4148-9b07-7eb7c63f586a","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"0fd644dd-6a58-45c4-959f-89130f06a13d"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"0fd644dd-6a58-45c4-959f-89130f06a13d"}],"recentChangeFlags":null},{"id":"05facf92-ba0b-4839-a098-0a62988da87e","uri":"https://api-a.usaa.com","name":"api-a.usaa.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f4dbc9cc-37dc-45e6-9be1-00a48ebb6401","sortOrder":1},"sortOrder":1,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"05facf92-ba0b-4839-a098-0a62988da87e"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"05facf92-ba0b-4839-a098-0a62988da87e"}],"recentChangeFlags":null},{"id":"7db479a3-cb14-421f-b519-5a176d495e44","uri":"https://b2bapi-a.usaa.com","name":"b2bapi-a.usaa.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"def350fd-7096-4326-ac74-71e2bbd592e9","sortOrder":2},"sortOrder":2,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"7db479a3-cb14-421f-b519-5a176d495e44"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"7db479a3-cb14-421f-b519-5a176d495e44"}],"recentChangeFlags":null},{"id":"d1d68de3-9ff4-41cc-b673-7ed60e8d3786","uri":"https://b2bapi.usaa.com","name":"b2bapi.usaa.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5e7ac464-90f7-445f-a9da-cc9568cd77f7","sortOrder":3},"sortOrder":3,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"d1d68de3-9ff4-41cc-b673-7ed60e8d3786"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"d1d68de3-9ff4-41cc-b673-7ed60e8d3786"}],"recentChangeFlags":null},{"id":"6bcdbad1-2d53-4458-b11d-f526e093c1a9","uri":"https://b2blsapi-a.usaa.com","name":"b2blsapi-a.usaa.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"96061641-8e8a-48fb-ac61-abfc5bb86cd9","sortOrder":4},"sortOrder":4,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"6bcdbad1-2d53-4458-b11d-f526e093c1a9"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"6bcdbad1-2d53-4458-b11d-f526e093c1a9"}],"recentChangeFlags":null},{"id":"171b3f7e-760a-46d4-a806-7319ef1af836","uri":"https://b2blsapi.usaa.com","name":"b2blsapi.usaa.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4a9d1059-f964-4f3a-afd2-e871b2bd692b","sortOrder":5},"sortOrder":5,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"171b3f7e-760a-46d4-a806-7319ef1af836"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"171b3f7e-760a-46d4-a806-7319ef1af836"}],"recentChangeFlags":null},{"id":"e968da2e-b752-4e4a-abe8-d2d8c8061195","uri":"https://vlapi.usaa.com","name":"vlapi.usaa.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1c029dcd-e2a3-4041-9c03-deca8459fa1c","sortOrder":6},"sortOrder":6,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"e968da2e-b752-4e4a-abe8-d2d8c8061195"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"e968da2e-b752-4e4a-abe8-d2d8c8061195"}],"recentChangeFlags":null},{"id":"43f66941-e2fc-4449-be39-338781082143","uri":"https://mapi.usaa.com/","name":"mapi.usaa.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8b0228af-d534-42d5-a974-822eb2a0c37f","sortOrder":7},"sortOrder":7,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"43f66941-e2fc-4449-be39-338781082143"},{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"43f66941-e2fc-4449-be39-338781082143"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"43f66941-e2fc-4449-be39-338781082143"}],"recentChangeFlags":null},{"id":"39711a5c-9dee-4593-ba60-4ef0e7a0215c","uri":"https://mapi-a.usaa.com","name":"mapi-a.usaa.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"13e673ca-8676-45a2-a626-8b0345004914","sortOrder":8},"sortOrder":8,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"39711a5c-9dee-4593-ba60-4ef0e7a0215c"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"39711a5c-9dee-4593-ba60-4ef0e7a0215c"}],"recentChangeFlags":null},{"id":"f0491caf-ae19-4bfe-b634-3d1219e0c19b","uri":"https://wsmbr.usaa.com/","name":"wsmbr.usaa.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5009dceb-4e4d-4c2b-b5de-85d672b036d5","sortOrder":9},"sortOrder":9,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"f0491caf-ae19-4bfe-b634-3d1219e0c19b"},{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"f0491caf-ae19-4bfe-b634-3d1219e0c19b"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"f0491caf-ae19-4bfe-b634-3d1219e0c19b"}],"recentChangeFlags":null},{"id":"8c894a78-7ad3-4186-8cf6-d051bf211e07","uri":"https://ws.usaa.com","name":"ws.usaa.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bc0dc9c1-6114-42d6-86b2-3d00e8cee1b4","sortOrder":10},"sortOrder":10,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"8c894a78-7ad3-4186-8cf6-d051bf211e07"},{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"8c894a78-7ad3-4186-8cf6-d051bf211e07"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"8c894a78-7ad3-4186-8cf6-d051bf211e07"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"a21e44da-8313-400c-9a18-a5cb8adfaae9","p1MaxCents":600000,"p1MinCents":500000,"p2MaxCents":220000,"p2MinCents":180000,"p3MaxCents":70000,"p3MinCents":55000,"p4MaxCents":20000,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":5000,"max":6000},"2":{"min":1800,"max":2200},"3":{"min":550,"max":700},"4":{"min":0,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"39ecf5b9-868f-46e0-86d5-ff3752aa09e5","name":"High Priority Targets ","targets":[{"id":"a2502584-eba1-42ce-8f9e-68bb279e5c17","uri":"https://www.usaa.com","name":"usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"13375ea2-4c06-406c-95b4-04f48c7c2f8d","sortOrder":0},"sortOrder":0,"tags":[{"id":"0ce93ddf-31a4-4663-b1ca-9a1ac7da35a3","name":"Stripe","targetId":"a2502584-eba1-42ce-8f9e-68bb279e5c17"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"a2502584-eba1-42ce-8f9e-68bb279e5c17"},{"id":"b7116a08-d333-4fd4-a5b7-d715af3f7d23","name":"YUI","targetId":"a2502584-eba1-42ce-8f9e-68bb279e5c17"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a2502584-eba1-42ce-8f9e-68bb279e5c17"}],"recentChangeFlags":null},{"id":"2204087f-4dd4-41fb-ae29-6c9477e45ebf","uri":"https://mobile.usaa.com","name":"mobile.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"cdf0b1b3-fc3f-49e2-b70a-6999d9a74726","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"2204087f-4dd4-41fb-ae29-6c9477e45ebf"},{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"2204087f-4dd4-41fb-ae29-6c9477e45ebf"},{"id":"9558d6b3-9880-4506-9e19-55dc1d7d8aff","name":"RequireJS","targetId":"2204087f-4dd4-41fb-ae29-6c9477e45ebf"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"2204087f-4dd4-41fb-ae29-6c9477e45ebf"},{"id":"b7116a08-d333-4fd4-a5b7-d715af3f7d23","name":"YUI","targetId":"2204087f-4dd4-41fb-ae29-6c9477e45ebf"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2204087f-4dd4-41fb-ae29-6c9477e45ebf"}],"recentChangeFlags":null},{"id":"eb098002-0473-428b-87fa-826351e79a87","uri":"https://partners.usaa.com","name":"partners.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6c17b99b-3f5a-4dde-8323-64bf51e8db18","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"eb098002-0473-428b-87fa-826351e79a87"},{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"eb098002-0473-428b-87fa-826351e79a87"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"eb098002-0473-428b-87fa-826351e79a87"}],"recentChangeFlags":null},{"id":"c0abb2f7-427d-41bb-a996-2267b5e92306","uri":"https://play.google.com/store/apps/details?id=com.usaa.mobile.android.usaa\u0026hl=en","name":"USAA Mobile Application for Android","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0bda4acd-7df5-4a36-9f2b-ac38c876a873","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"c0abb2f7-427d-41bb-a996-2267b5e92306"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"c0abb2f7-427d-41bb-a996-2267b5e92306"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"c0abb2f7-427d-41bb-a996-2267b5e92306"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"c0abb2f7-427d-41bb-a996-2267b5e92306"}],"recentChangeFlags":null},{"id":"29880d59-d726-430b-95be-a54be1a0957d","uri":"https://apps.apple.com/us/app/usaa-mobile/id312325565","name":"USAA Mobile Application for iOS","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"172497ba-380b-4a3b-b6e1-a64237823fde","sortOrder":0},"sortOrder":0,"tags":[{"id":"63c4a71d-215f-49ca-8ea8-240dfbf82d61","name":"Objective-C","targetId":"29880d59-d726-430b-95be-a54be1a0957d"},{"id":"7692155d-e2db-4c50-abd5-208448a85fde","name":"SwiftUI","targetId":"29880d59-d726-430b-95be-a54be1a0957d"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"29880d59-d726-430b-95be-a54be1a0957d"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"29880d59-d726-430b-95be-a54be1a0957d"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"29880d59-d726-430b-95be-a54be1a0957d"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"1703fea1-0e55-4f68-9ed5-f2f88f04c630","p1MaxCents":600000,"p1MinCents":500000,"p2MaxCents":220000,"p2MinCents":180000,"p3MaxCents":70000,"p3MinCents":55000,"p4MaxCents":20000,"p4MinCents":20000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003ch2\u003eTarget Information\u003c/h2\u003e\n\n\u003cp\u003eThe USAA application is used by millions of active duty military, veterans and their spouses across the country for both insurance and banking needs. \u003c/p\u003e","rewardRangeData":{"1":{"min":5000,"max":6000},"2":{"min":1800,"max":2200},"3":{"min":550,"max":700},"4":{"min":200,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"f3d76018-5872-4397-b155-7edc7ee90614","name":"In Scope Targets","targets":[{"id":"f6a0ff40-8c19-4cbb-9d1f-bc99c93fc1d6","uri":"https://aemdam.usaa360.com/","name":"aemdam.usaa360.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fe6dcb2a-696c-44df-a9c8-f42477b4530f","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"f6a0ff40-8c19-4cbb-9d1f-bc99c93fc1d6"},{"id":"187a0132-af2c-45e1-b4af-77ac6117b9dc","name":"Adobe Experience Manager","targetId":"f6a0ff40-8c19-4cbb-9d1f-bc99c93fc1d6"}],"recentChangeFlags":null},{"id":"398f9099-7757-4d62-a9e0-0f702f5e47fa","uri":"https://authn.usaa.com/","name":"authn.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9f17e1ca-acbf-4371-83e5-5f2b20e0cf64","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"398f9099-7757-4d62-a9e0-0f702f5e47fa"},{"id":"59cdb1e5-8e65-4040-b1eb-c323dfee5a53","name":"Authentication Systems","targetId":"398f9099-7757-4d62-a9e0-0f702f5e47fa"}],"recentChangeFlags":null},{"id":"27e1cec5-f0bb-4960-9665-0cd40461ba9c","uri":"https://content.usaa.com","name":"content.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e9e2605f-0afd-4565-a82a-50aea8ff40eb","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"27e1cec5-f0bb-4960-9665-0cd40461ba9c"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"27e1cec5-f0bb-4960-9665-0cd40461ba9c"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"27e1cec5-f0bb-4960-9665-0cd40461ba9c"}],"recentChangeFlags":null},{"id":"72ce039e-08ab-43d0-800f-3c212f296e73","uri":"https://d1.utv.usaa.com","name":"d1.utv.usaa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4e4127ac-7411-4e27-adaf-4545cd3c5d1d","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"72ce039e-08ab-43d0-800f-3c212f296e73"}],"recentChangeFlags":null},{"id":"39b3e3c6-ce2d-403c-ba2d-c0018af4b00d","uri":"https://d2.utv.usaa.com","name":"d2.utv.usaa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7f1fd61d-5cf8-43c0-b492-4b5caa9d54de","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"39b3e3c6-ce2d-403c-ba2d-c0018af4b00d"}],"recentChangeFlags":null},{"id":"ee416fe9-cee2-4fe5-8ac1-d34a8350511b","uri":"https://externalconnect.usaa.com/","name":"externalconnect.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7d7b7552-e14f-4d54-aeb7-eec7313ffaf9","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"ee416fe9-cee2-4fe5-8ac1-d34a8350511b"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ee416fe9-cee2-4fe5-8ac1-d34a8350511b"}],"recentChangeFlags":null},{"id":"89f930ad-7698-45f2-b45b-9fa66c17a1f4","uri":"https://guest.usaa.com/","name":"guest.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"43a3bdf3-5b67-4fa9-ad63-668a1a7ad5d9","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"89f930ad-7698-45f2-b45b-9fa66c17a1f4"},{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"89f930ad-7698-45f2-b45b-9fa66c17a1f4"},{"id":"9558d6b3-9880-4506-9e19-55dc1d7d8aff","name":"RequireJS","targetId":"89f930ad-7698-45f2-b45b-9fa66c17a1f4"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"89f930ad-7698-45f2-b45b-9fa66c17a1f4"},{"id":"b7116a08-d333-4fd4-a5b7-d715af3f7d23","name":"YUI","targetId":"89f930ad-7698-45f2-b45b-9fa66c17a1f4"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"89f930ad-7698-45f2-b45b-9fa66c17a1f4"}],"recentChangeFlags":null},{"id":"da2635d6-50f0-49d2-994d-281fb6f5bf40","uri":"https://l.usaa.com/","name":"l.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e4d1b26e-0cb1-47a9-a992-9e2db55ebb39","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"da2635d6-50f0-49d2-994d-281fb6f5bf40"}],"recentChangeFlags":null},{"id":"fa8788c2-3d2e-4488-aa87-f0dd8e2a1f0c","uri":"https://liveassist.usaa.com/","name":"liveassist.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"50a91efd-5097-4fa5-9770-f9cde5145b28","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"fa8788c2-3d2e-4488-aa87-f0dd8e2a1f0c"}],"recentChangeFlags":null},{"id":"a74615f8-2e73-4009-82b7-f2a4efc01906","uri":"https://liveassist11.usaa.com/","name":"liveassist11.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"55c28a9b-71e6-4801-8bc1-60332227a8a4","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"a74615f8-2e73-4009-82b7-f2a4efc01906"}],"recentChangeFlags":null},{"id":"c0febd25-ceeb-4549-a484-f079e17ced82","uri":"https://liveassist12.usaa.com/","name":"liveassist12.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3e75226c-1367-4258-ae1f-6ed63324f26d","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"c0febd25-ceeb-4549-a484-f079e17ced82"}],"recentChangeFlags":null},{"id":"34f3ba4f-21ca-4be6-b02f-a99bbfc6673a","uri":"https://liveassist21.usaa.com/","name":"liveassist21.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ab8ce664-99ae-45c5-8b4c-9548a38452a4","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"34f3ba4f-21ca-4be6-b02f-a99bbfc6673a"}],"recentChangeFlags":null},{"id":"002047fb-9d04-45f7-ac77-771be905dc77","uri":"https://liveassist22.usaa.com/","name":"liveassist22.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"afe2a298-1cf2-4575-a375-90c7a8749e40","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"002047fb-9d04-45f7-ac77-771be905dc77"}],"recentChangeFlags":null},{"id":"7bd83c94-e0f0-479b-88af-106f8289734b","uri":"https://liveassist23.usaa.com","name":"liveassist23.usaa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"96736963-30c6-4ead-b03f-f8de9aff5b78","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"7bd83c94-e0f0-479b-88af-106f8289734b"}],"recentChangeFlags":null},{"id":"bca247e2-0be3-4350-bde5-de8f5a77cf81","uri":"https://liveassist24.usaa.com","name":"liveassist24.usaa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c6b1d531-2e93-4842-adf6-afff8741bb2f","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"bca247e2-0be3-4350-bde5-de8f5a77cf81"}],"recentChangeFlags":null},{"id":"71bb8da8-382d-4612-af3c-b8d73f139048","uri":"https://mguest.usaa.com/","name":"mguest.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"50004ee1-0a2b-4410-a2ad-3c11d68e28c7","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"71bb8da8-382d-4612-af3c-b8d73f139048"},{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"71bb8da8-382d-4612-af3c-b8d73f139048"},{"id":"9558d6b3-9880-4506-9e19-55dc1d7d8aff","name":"RequireJS","targetId":"71bb8da8-382d-4612-af3c-b8d73f139048"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"71bb8da8-382d-4612-af3c-b8d73f139048"},{"id":"b7116a08-d333-4fd4-a5b7-d715af3f7d23","name":"YUI","targetId":"71bb8da8-382d-4612-af3c-b8d73f139048"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"71bb8da8-382d-4612-af3c-b8d73f139048"}],"recentChangeFlags":null},{"id":"94b9b49d-e132-4856-be01-a2b9422dd2f1","uri":"https://mobileapps.usaa.com/","name":"mobileapps.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e2beb5cd-7f02-475c-8504-d9a670be8182","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"94b9b49d-e132-4856-be01-a2b9422dd2f1"}],"recentChangeFlags":null},{"id":"1a490cd5-2f8c-4824-b2d2-039eed08f4e3","uri":"https://mstatic.usaa.com","name":"mstatic.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c596f7a8-439a-40c7-946c-80828efc508e","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"1a490cd5-2f8c-4824-b2d2-039eed08f4e3"}],"recentChangeFlags":null},{"id":"d0764f07-8686-4869-a717-6c534c261d35","uri":"https://mydesktop.usaa.com","name":"mydesktop.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"62e7a0b9-ad96-4d79-b3be-cbd3acf36316","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"d0764f07-8686-4869-a717-6c534c261d35"},{"id":"7f59a79f-f8d7-4163-bf91-97dc53c7cc1a","name":"SSL/TLS","targetId":"d0764f07-8686-4869-a717-6c534c261d35"}],"recentChangeFlags":null},{"id":"63e11977-5d7b-48c0-8766-7e0b9591f884","uri":"https://myvpn.usaa.com","name":"myvpn.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d829abff-7671-41b3-bbe2-0d2efa5c11b1","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"63e11977-5d7b-48c0-8766-7e0b9591f884"},{"id":"7f59a79f-f8d7-4163-bf91-97dc53c7cc1a","name":"SSL/TLS","targetId":"63e11977-5d7b-48c0-8766-7e0b9591f884"}],"recentChangeFlags":null},{"id":"6d164bf0-ca5e-48ac-b72a-dd8ad853683c","uri":"https://nice.wfmusaa.com","name":"nice.wfmusaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"347323b7-5b7d-4b65-9afd-4ac8147f21e1","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"6d164bf0-ca5e-48ac-b72a-dd8ad853683c"}],"recentChangeFlags":null},{"id":"55dbb8fd-5e4e-409f-9273-e7310776c1f5","uri":"https://nvoice.usaa.com/","name":"nvoice.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f355c84c-fbdd-4808-a069-57ab9f65d7db","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"55dbb8fd-5e4e-409f-9273-e7310776c1f5"}],"recentChangeFlags":null},{"id":"3ee37ddf-f2c7-40b4-b650-3381c05c98d1","uri":"https://s.usaa.com/","name":"s.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"faef01cc-3122-473b-8326-3feb55a52a72","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"3ee37ddf-f2c7-40b4-b650-3381c05c98d1"}],"recentChangeFlags":null},{"id":"c43721c3-0ecb-498a-9db6-42b1dc9c121b","uri":"https://s1.utv.usaa.com","name":"s1.utv.usaa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0a1a4a14-f118-463a-9833-f5d01cc3503f","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"c43721c3-0ecb-498a-9db6-42b1dc9c121b"}],"recentChangeFlags":null},{"id":"6a17f10e-aca7-4e39-90c1-98887aeb8aff","uri":"https://s2.utv.usaa.com","name":"s2.utv.usaa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"05aa681b-b80e-4d43-b7d1-672b5db71019","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"6a17f10e-aca7-4e39-90c1-98887aeb8aff"}],"recentChangeFlags":null},{"id":"3c7cacb7-cf51-4c3f-ba50-01539bc7047c","uri":"https://securemail.usaa.com","name":"securemail.usaa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"08ceb82c-a037-4f87-9c89-f9b7e44aaf20","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"3c7cacb7-cf51-4c3f-ba50-01539bc7047c"}],"recentChangeFlags":null},{"id":"50e90a14-ee83-4271-811b-901e81f475f6","uri":"https://static.usaa.com","name":"static.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bd224cd3-2efa-4a19-b42f-6096c51d2250","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"50e90a14-ee83-4271-811b-901e81f475f6"}],"recentChangeFlags":null},{"id":"72b4c1fd-05cf-426d-84f7-ae2fb8850e46","uri":"https://www.usaainsurance.com/","name":"usaainsurance.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7f3bd0fc-1799-43fa-ba3f-51174170909e","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"72b4c1fd-05cf-426d-84f7-ae2fb8850e46"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"72b4c1fd-05cf-426d-84f7-ae2fb8850e46"}],"recentChangeFlags":null},{"id":"ac127489-7ccd-41d3-87b0-565ecc6d3f53","uri":"https://utv.usaa.com","name":"utv.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a941af45-473b-4aa6-97d6-f235ded94d4e","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"ac127489-7ccd-41d3-87b0-565ecc6d3f53"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ac127489-7ccd-41d3-87b0-565ecc6d3f53"}],"recentChangeFlags":null},{"id":"d071edac-f886-4682-a1c2-d2f2876c7403","uri":"https://v.utv.usaa.com","name":"v.utv.usaa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8d6f91f8-a7c6-44d6-ab80-cea87cd1946b","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"d071edac-f886-4682-a1c2-d2f2876c7403"}],"recentChangeFlags":null},{"id":"6418f961-ef6b-433e-af4c-13e520d2e4d6","uri":"https://vendorss.usaa.com","name":"vendorss.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d21a5aee-d242-4eec-922d-8360b0e85756","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"6418f961-ef6b-433e-af4c-13e520d2e4d6"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6418f961-ef6b-433e-af4c-13e520d2e4d6"}],"recentChangeFlags":null},{"id":"d16382e8-69bb-472e-932e-5347980fb86b","uri":"https://vlagg.usaa.com","name":"vlagg.usaa.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f49c008b-11e4-4a7d-9335-c0dc2daa2d43","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"d16382e8-69bb-472e-932e-5347980fb86b"}],"recentChangeFlags":null},{"id":"d4cae968-d020-4230-b91d-b67bf3af5a38","uri":"https://webmail.usaa.com","name":"webmail.usaa.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ac26f8d8-b077-4553-86b8-b486dfb44194","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"d4cae968-d020-4230-b91d-b67bf3af5a38"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":{"id":"8823ee5c-8486-4c1e-bec3-d099509898f7","p1MaxCents":300000,"p1MinCents":150000,"p2MaxCents":180000,"p2MinCents":90000,"p3MaxCents":40000,"p3MinCents":25000,"p4MaxCents":10000,"p4MinCents":10000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1500,"max":3000},"2":{"min":900,"max":1800},"3":{"min":250,"max":400},"4":{"min":100,"max":100},"5":{"min":null,"max":null}},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"f803d8e0-da0b-4559-9279-050148816a16","code":"usaa","state":"in_progress","endsAt":null,"bountyId":"72d075ef-0d77-430a-9ee7-da75e3f54bd7","startsAt":"2017-12-14T22:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Finance","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/31b0/e2aa/339ec192/976c6242148265bb29d011a46c1d041c_Screen_Shot_2020-01-09_at_8.03.20_AM.png","logoBackgroundColor":"#123958","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2017-12-14T22:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/usaa","changelogs":"/engagements/usaa/changelog","submissions":null,"announcements":"/engagements/usaa/announcements","hallOfFame":"/engagements/usaa/hall_of_fames","crowdstream":null},"announcementsCount":15,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Priority Triage","submitReportUrl":"/engagements/usaa/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=usaa\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/usaa/engagement_subscribers","engagementChangelogsUrl":"/engagements/usaa/changelog","publishedAt":"2026-03-05T20:12:45.742Z","engagementChangelogUrl":"/engagements/usaa/changelog/6e2b5e03-644a-4127-9a22-24d539aa9622","createUserFeedbacksUrl":"/engagements/usaa/feedbacks","engagementCrowdstreamUrl":null,"acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}