Auth0 by Okta

At a glance#

• Maximum payout: $50,000
• Public disclosure: Allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• config.cic-bug-bounty.auth0app.com
• https://manage.cic-bug-bounty.auth0app.com/
• *.cic-bug-bounty.auth0app.com
• https://play.google.com/store/apps/details?id=com.auth0.guardian&hl=en_US&gl=US
• https://apps.apple.com/us/app/auth0-guardian/id1093447833
• https://marketplace.auth0.com
• MFA Integrations
• https://dashboard.fga.dev/
• https://api.us1.fga.dev/
• https://customers.us1.fga.dev/
• https://play.fga.dev/
• https://github.com/auth0/auth0.js
• https://github.com/auth0/lock
• https://github.com/auth0/auth0-spa-js
• https://github.com/auth0/Auth0.Net
• https://github.com/auth0/nextjs-auth0
• https://github.com/auth0/auth0-java
• https://github.com/auth0/react-native-auth0
• https://github.com/auth0/auth0-php
• auth0.com
• samltool.io
• webauthn.me
• openidconnect.net
• jwt.io
• auth0.net

Out of scope#

• auth0.auth0.com
• manage.auth0.com
• accounts.auth0.com
• webtask.io
• phenix.rocks
• Auth0 Docs (including quickstarts)
• sharelock.io
• goextend.io
• https://support.auth0.com/tickets/new
• support.auth0.com
• community.auth0.com
• https://github.com/auth0/passport-wsfed-saml2

Imported from the public directory. Always confirm scope on the official program page before testing.