HotDoc

  • $50 – $8,000 per vulnerability
  • Partial safe harbor

Updates to the HotDoc program scope, including new COVID-19 screening and Telehealth features

Firstly, thanks everyone for continuing to test our app in these very strange times! It's been an intense few weeks for us, the COVID-19 virus has accelerated the need for a few of our new features, which we'd love for you to test!

With that in mind, we have a list of new features available to test on the HotDoc program. We highly recommend you take a look at this additional attack surface – which hopefully means more vulnerabilities! Here is what’s new:

The new features we've released include:

  • Practitioner Metadata
  • Pre-Appointment Notes
  • COVID-19 Screening Mode
  • Telehealth Appointments

Practitioner Metadata

What is it?

We have updated the Clinic and Practitioner setup pages allowing clinics to input more information in structured fields.
See more: https://support.hotdoc.com.au/hc/en-gb/articles/360000400703-How-to-add-or-edit-a-Practitioner#a2

How can I enable it?

This is now on by default for all Bugcrowd clinics, visible on the Practitioner Setup screens.

Pre-Appointment Notes

What is it?

A setting to allow asking patients for a short text response about why they're booking

How can I enable it?

The setting can be toggled on for a particular appoinment type by clicking "Ask Patients to enter the reason for their appointment" on the Edit Appointment Type screen.

COVID-19 Screening Mode

What is it?

A collection of features for screening patients before they attend an appointment
See more: https://support.hotdoc.com.au/hc/en-gb/articles/360040615772-COVID-19-Mode-FAQs

How can I enable it?

The settings for COVID-19 mode are visible in the Bookings section of the Dashboard

Telehealth Appointments

What is it?

Allow patients to book "Telehealth appointments" with their regular practitioner instead of visiting the clinic
See more: https://support.hotdoc.com.au/hc/en-gb/articles/360040817171-Telehealth-Screening-Mode

How can I enable it?

The setting can be toggled on for a particular appoinment type by clicking "This is a telehealth appointment" on the Edit Appointment Type screen.

You might notice lots of other tweaks and improvements in the site whilst you're testing the above, a lot has happened already this year!

As always, please see the program brief for the full details around testing. If you have any questions, please reach out to support@bugcrowd.com.

Thanks again for your continued hard work, and, best of luck finding more vulnerabilities!