QuintoAndar Managed Bug Bounty Engagement

At a glance#

• Maximum payout: $1,000
• Public disclosure: Not allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://www.quintoandar.com.br/*
• https://www.user.quintoandar.com.br/admin/*
• https://www.financeiro.quintoandar.com.br/*
• https://apigw.prod.quintoandar.com.br/pixar-api/*
• https://finance.quintoandar.com.br/*
• https://trato-feito-api.quintoandar.com.br/*
• https://apigw.prod.quintoandar.com.br/checkout-api/*
• https://apigw.prod.quintoandar.com.br/sales-flow-api/*
• https://apigw.prod.quintoandar.com.br/nazare-api/*
• https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*

Imported from the public directory. Always confirm scope on the official program page before testing.