{"id":"c4d23f5f-95dc-4d27-9126-4dafc4eb05ef","engagementId":"e3b9a7ad-49aa-431b-8b01-e02869ff45fe","data":{"brief":{"id":"252200a5-c30a-43f2-89cd-f59a944d1004","name":"Virtru Vulnerability Disclosure Program","tagline":"Virtru Vulnerability Disclosure Program","description":"\u003cp\u003eVirtru provides solutions at the intersection of privacy and security by leveraging the open Trusted Data Format (TDF) to allow organizations and individuals to protect their data wherever it is stored and shared. At Virtru, we believe security and privacy applications should be community driven. We are passionate about the role of open-source software in this realm and understand the valuable role that independent security researchers play in security. \u003c/p\u003e\n\n\u003cp\u003eVirtru offers a range of data protection products that provide encryption, access controls, key management, and persistent audit for customers that need to meet privacy and compliance requirements. You can read more about our solutions offerings at our \u003ca href=\"https://www.virtru.com/data-security-platform/product-overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eProduct Overview Page\u003c/a\u003e to understand further how we protect our customer's data (and get some ideas of bug we would be most interested in). \u003c/p\u003e\n\n\u003cp\u003ePlease review our scope overview for rules, exclusions, and tips for getting started. We appreciate your efforts and hard work in making us more secure and look forward to working with the community!\u003c/p\u003e","industryTagId":"0def401b-0941-4302-b6d6-5f49469b8ca5","targetsOverview":"\u003ch3\u003eRatings/Rewards\u003c/h3\u003e\n\n\u003cp\u003e_For the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that a vulnerability's priority may be modified due to its likelihood or impact, or other potentially mitigating factors.\u003c/p\u003e\n\n\u003cp\u003eIn general we don't provide financial bounties on for reports on our VDP program.  However every report is handled in a case by cases basis, with the typical response being an invite into our private bounty focused program.\u003c/p\u003e\n\n\u003ch3\u003eRules\u003c/h3\u003e\n\n\u003cp\u003eCarefully review these rules, by participating in our Bugcrowd VDP program you are agreeing to these terms. For reports to be valid they must follow these rules, and present a valid security risk with a working proof of concept.\u003c/p\u003e\n\n\u003ch4\u003eTesting Credentials:\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003ePlease sign up for an account using your @bugcrowdninja.com email address. If you need more accounts for testing, you can use any email address to test sending, receiving, and sharing emails and files with your @bugcrowdninja account. \u003c/li\u003e\n\u003cli\u003e For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://researcherdocs.bugcrowd.com/v2.0/docs/your-bugcrowdninja-email-address\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eTesting Restrictions\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003eSocial engineering, phishing, physical attacks, or other non-technical attacks are all forbidden\u003c/li\u003e\n\u003cli\u003eDenial of service testing against production is prohibited (Application level DoS testing is allowed against staging (\u003ca href=\"https://chrome.google.com/webstore/detail/virtru-email-protection-s/dngppihiaccdnhfincioaidejhndmcpk\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003estaging plugin\u003c/a\u003e - \u003ca href=\"https://secure.staging.virtru.com/secure-share\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003estaging secure share\u003c/a\u003e), contact bugbounty@virtru.com before testing if you have questions)\u003c/li\u003e\n\u003cli\u003eAlways use non-disruptive options for demonstrating impact, and make a good faith effort to avoid privacy violations. If the only way to demonstrate impact is potentially disruptive then report the issue noting this and we will validate impact.\u003c/li\u003e\n\u003cli\u003eOnly interact with accounts you created and own\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eTips for Success\u003c/h2\u003e\n\n\u003cp\u003eOur product is well hardened, because of that our program does not typically have much low hanging fruit that would be found from automated scanners. Successful researchers in our program typically \u003cstrong\u003elearn our product and understand how it’s used\u003c/strong\u003e. In addition, watch our product release page and try to focus your efforts on parts of our product which are evolving. If you have questions our team is happy to help you, you can reach out to our security team at bugbounty@virtru.com.\u003c/p\u003e\n\n\u003ch3\u003eResources:\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.virtru.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eVirtru Website\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://support.virtru.com/hc/en-us\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eVirtru Support Aricles\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.virtru.com/developer/get-started\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eVirtru Developer Docs\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://support.virtru.com/hc/en-us\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eVirtru Support Docs\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://support.virtru.com/hc/en-us/sections/360001594294-Release-Notes\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eProduct Release Notes\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eDisclosure\u003c/h2\u003e\n\n\u003cp\u003eOur program operates using \u003ccode\u003eDiscretionary Disclosure\u003c/code\u003e. On a monthly cadence we review fixed and closed reports for disclosure. We generally seek to disclose resolved issues to help communicate with our community, so that we can all benefit from the work of our fellow researchers. Once an issue has been resolved, you may request disclosure to be included in the next review, however you can not share the report with third parties until that authorization has been provided.\u003c/p\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"95da6ac8-ffd4-4553-98c9-da729b907c0f","name":"Virtru SaaS APIs","targets":[{"id":"e7ade08c-16d5-42bd-ae5a-6127934a8fbe","uri":"https://api.virtru.com/*","name":"api.virtru.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9f171cad-13eb-4f4b-8507-977a1be759ee","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"e7ade08c-16d5-42bd-ae5a-6127934a8fbe"},{"id":"9dd4899d-3a63-4126-8c83-c1fc1de50c25","name":"Amazon Cloudfront","targetId":"e7ade08c-16d5-42bd-ae5a-6127934a8fbe"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"e7ade08c-16d5-42bd-ae5a-6127934a8fbe"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"e7ade08c-16d5-42bd-ae5a-6127934a8fbe"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"e7ade08c-16d5-42bd-ae5a-6127934a8fbe"}],"recentChangeFlags":null},{"id":"bcd23ce0-53ed-42a1-a887-a3274c0c6a61","uri":"","name":"api.virtru.com/accounts","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a702a26c-919b-4054-ab81-2daf0429fe52","sortOrder":1},"sortOrder":1,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"bcd23ce0-53ed-42a1-a887-a3274c0c6a61"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"bcd23ce0-53ed-42a1-a887-a3274c0c6a61"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"bcd23ce0-53ed-42a1-a887-a3274c0c6a61"}],"recentChangeFlags":null},{"id":"c30fe256-2613-49ca-9eea-60cf9bf317d9","uri":"","name":"api.virtru.com/kas","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fc1d2bcc-2a03-40d6-87fe-82729bc388f4","sortOrder":2},"sortOrder":2,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"c30fe256-2613-49ca-9eea-60cf9bf317d9"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"c30fe256-2613-49ca-9eea-60cf9bf317d9"}],"recentChangeFlags":null},{"id":"4e89f3f1-f553-4876-a564-9ec23c3aa468","uri":"","name":"audit.virtru.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e899692e-3fa8-40c5-a481-eaf9093c845b","sortOrder":3},"sortOrder":3,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"4e89f3f1-f553-4876-a564-9ec23c3aa468"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"4e89f3f1-f553-4876-a564-9ec23c3aa468"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"4e89f3f1-f553-4876-a564-9ec23c3aa468"}],"recentChangeFlags":null},{"id":"f02560fb-d5cf-4fcf-8051-678060afceb4","uri":"","name":"api.virtru.com/encrypted-storage","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e16eb9b4-af46-4b0f-bb2f-07c1e1e19a92","sortOrder":4},"sortOrder":4,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"f02560fb-d5cf-4fcf-8051-678060afceb4"},{"id":"803518dc-5ae1-4e48-8de4-5b61b42a6bd0","name":"Amazon S3","targetId":"f02560fb-d5cf-4fcf-8051-678060afceb4"},{"id":"9dd4899d-3a63-4126-8c83-c1fc1de50c25","name":"Amazon Cloudfront","targetId":"f02560fb-d5cf-4fcf-8051-678060afceb4"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"f02560fb-d5cf-4fcf-8051-678060afceb4"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"f02560fb-d5cf-4fcf-8051-678060afceb4"}],"recentChangeFlags":null},{"id":"89d4ed14-3c73-445b-b414-f338b2fb57d3","uri":"","name":"api.virtru.com/auth","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4bc1647a-44d7-4b23-8c33-77c283f9cdc9","sortOrder":5},"sortOrder":5,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"89d4ed14-3c73-445b-b414-f338b2fb57d3"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"89d4ed14-3c73-445b-b414-f338b2fb57d3"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"89d4ed14-3c73-445b-b414-f338b2fb57d3"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eVirtru\u0026#39;s encryption clients leverage their restful SaaS APIs. Example API docs are provided here: https://api.virtru.com/policies/docs/doc.json\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"a16f2c38-c815-4cbc-af0f-acdc4df0009c","name":"Virtru SDKs","targets":[{"id":"60fd6ea1-fe41-4e5e-a4bb-31f7f1050a4f","uri":"https://developer.virtru.com/docs/sdk","name":"Virtru SDKs","category":"iot","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bd876a83-7cfa-4abb-92d0-13c7cbbe80c4","sortOrder":0},"sortOrder":0,"tags":[{"id":"86402f5d-20d0-4c88-92b9-0994786e4241","name":"C++","targetId":"60fd6ea1-fe41-4e5e-a4bb-31f7f1050a4f"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"60fd6ea1-fe41-4e5e-a4bb-31f7f1050a4f"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"60fd6ea1-fe41-4e5e-a4bb-31f7f1050a4f"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"60fd6ea1-fe41-4e5e-a4bb-31f7f1050a4f"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eA key purpose of this engagement is to test Virtru\u0026#39;s SDKs. \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eDetails and documentation about the Virtru SDKs are available on the \u003ca href=\"https://developer.virtru.com/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eVirtru Developer Hub\u003c/a\u003e. \u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://developer.virtru.com/docs/sample-apps\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eDemo Applications\u003c/a\u003e built using Virtru\u0026#39;s SDKs can be found on the Developer Hub. Demo applications should be used as a reference point for the functionality of the SDKs and how the SDKs interact with Virtru APIs. \u003cstrong\u003eThe Demo Applications in the Developer Hub are Out of Scope.\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e You can also check out \u003ca href=\"https://medium.com/virtru\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eVirtru Technology Blog\u003c/a\u003e for more use cases and sample apps.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"1666924a-2b3f-462b-894f-59eaf50d02cb","name":"Virtru Encryption Clients","targets":[{"id":"5dfc03e9-f89c-452f-9b43-b4cccb91cff4","uri":"https://www.virtru.com/install/#","name":"Virtru Gmail Plugin","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d3e4c0fc-b3b1-4867-a8a3-59906f4ef13a","sortOrder":0},"sortOrder":0,"tags":[{"id":"59791207-9cf4-4498-b5e1-510fee95dc40","name":"Browser Extension","targetId":"5dfc03e9-f89c-452f-9b43-b4cccb91cff4"}],"recentChangeFlags":null},{"id":"7f696f5c-7fa1-485e-bb83-1fc92a2466ef","uri":"https://www.virtru.com/install/#","name":"Virtru Outlook Plugin ['10, '13, '16, '19]","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e65d3ce8-9a5a-4f16-a747-7ff5c1b59f0a","sortOrder":1},"sortOrder":1,"tags":[{"id":"9c63a0f4-0db6-40da-85f0-65d0aa72bfbe","name":"Windows","targetId":"7f696f5c-7fa1-485e-bb83-1fc92a2466ef"}],"recentChangeFlags":null},{"id":"628e5a18-15c8-49f1-bd8d-4e40ebb1c7c8","uri":"https://apps.apple.com/us/app/virtru-email-protection/id789957178#?platform=iphone","name":"Virtru iOS Application","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1f28f17f-a3cc-420e-a028-d122fd4f8bd8","sortOrder":2},"sortOrder":2,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"628e5a18-15c8-49f1-bd8d-4e40ebb1c7c8"}],"recentChangeFlags":null},{"id":"d71c5b1a-ed40-44dd-9086-e323a4259cba","uri":"https://play.google.com/store/apps/details?id=com.virtru.email\u0026hl=en_US\u0026gl=US","name":"Virtru Android App","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1a932ba2-1172-41b4-931e-d1bc83f12959","sortOrder":3},"sortOrder":3,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"d71c5b1a-ed40-44dd-9086-e323a4259cba"}],"recentChangeFlags":null},{"id":"41b60450-b8b5-45d3-9753-ca1e558acd71","uri":"https://support.virtru.com/hc/en-us/articles/1500010860821","name":"Virtru O365/Outlook Plugin","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f55de7d1-76ce-493e-9a01-7b600cf67a61","sortOrder":4},"sortOrder":4,"tags":[{"id":"59791207-9cf4-4498-b5e1-510fee95dc40","name":"Browser Extension","targetId":"41b60450-b8b5-45d3-9753-ca1e558acd71"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eVirtru encryption clients provide client-side encryption for certain platforms. All of these encryption clients leverage the APIs listed in Virtru SaaS APIs.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"0d6a7b20-2013-4820-a2b9-82aa3c1e4403","name":"Virtru Web Apps","targets":[{"id":"508bbfa5-10ca-43c5-87ec-7c422e22258e","uri":"https://secure.virtru.com/secure-reader","name":"Secure Reader","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fcf8b002-93be-447e-844d-0aaacfe176eb","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"508bbfa5-10ca-43c5-87ec-7c422e22258e"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"508bbfa5-10ca-43c5-87ec-7c422e22258e"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"508bbfa5-10ca-43c5-87ec-7c422e22258e"}],"recentChangeFlags":null},{"id":"8a619015-9dc9-405f-8f3a-55c47131aa33","uri":"https://secure.virtru.com/dashboard","name":"Virtru Control Center (formerly Dashboard)","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"46d0c7ee-359b-47fc-8d02-f5a05bf2c2b6","sortOrder":1},"sortOrder":1,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"8a619015-9dc9-405f-8f3a-55c47131aa33"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"8a619015-9dc9-405f-8f3a-55c47131aa33"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"8a619015-9dc9-405f-8f3a-55c47131aa33"}],"recentChangeFlags":null},{"id":"b1b014d0-5ab0-4cff-acda-e84d5d2538ca","uri":"https://secure.virtru.com/secure-share","name":"Secure Share","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fa4a2d15-0f7f-4d33-baa6-74c5ac87f947","sortOrder":2},"sortOrder":2,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"b1b014d0-5ab0-4cff-acda-e84d5d2538ca"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"b1b014d0-5ab0-4cff-acda-e84d5d2538ca"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":3,"description":null,"rewardRange":null,"descriptionHtml":"\u003cul\u003e\n\u003cli\u003eThe Virtru Dashboard provides audits and controls for all emails and files encrypted using Virtru clients. \u003c/li\u003e\n\u003cli\u003eThe Secure Reader is a web application that allows users to decrypt emails and files, and allows client-side encrypted replies, without installing a plugin.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.virtru.com/secure-share/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eThe Secure Share\u003c/a\u003e is a web application for requesting and receiving documents security, protected by Virtru\u0026#39;s client-side encryption.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"e3b9a7ad-49aa-431b-8b01-e02869ff45fe","code":"virtru-vdp-pro","state":"in_progress","endsAt":null,"bountyId":"23ef8ee3-5053-43ad-8826-c026482931df","startsAt":"2025-01-08T21:31:13Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Media","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/9f76/88b2/d3aab334/a688edf7af988bbda4642d7d9965c564_virtru_LOGOMARKMASTER_BLUE_FINAL.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-01-08T21:31:13.989Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/virtru-vdp-pro","changelogs":"/engagements/virtru-vdp-pro/changelog","submissions":null,"announcements":"/engagements/virtru-vdp-pro/announcements","hallOfFame":"/engagements/virtru-vdp-pro/hall_of_fames","crowdstream":"/engagements/virtru-vdp-pro/crowdstream"},"announcementsCount":0,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/virtru-vdp-pro/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":"updated","userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=virtru-vdp-pro\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/virtru-vdp-pro/engagement_subscribers","engagementChangelogsUrl":"/engagements/virtru-vdp-pro/changelog","publishedAt":"2026-09-30T21:20:35.055Z","engagementChangelogUrl":"/engagements/virtru-vdp-pro/changelog/c4d23f5f-95dc-4d27-9126-4dafc4eb05ef","createUserFeedbacksUrl":"/engagements/virtru-vdp-pro/feedbacks","engagementCrowdstreamUrl":"/engagements/virtru-vdp-pro/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}