Deliveroo

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.deliveroo-data-test.io URL medium medium medium critical
*.deliveroo-data.io URL medium medium medium critical
*.deliveroo-data.net URL medium medium medium critical
*.deliveroo.com URL medium medium medium critical
*.deliveroo.net URL medium medium medium critical
Namespace used for most of our semi-internal services
com.deliveroo.orderapp GOOGLE_PLAY_APP_ID medium medium medium critical
The official Android app of Deliveroo
com.deliveroo.orderapp APPLE_STORE_APP_ID medium medium medium critical
deliveroo.ae URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.be URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.co.uk URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.com.au URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.com.sg URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.de URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.es URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.fr URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.hk URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.ie URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.it URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
deliveroo.nl URL high high high critical
This is our flagship website where customers can order food. Issues we care about here include things like being able to take over another user's account, get free food, modify another user's settings, etc.
*.deliveroo-streams.net URL medium medium medium critical
Note: To be eligible for an award, please ensure your report relates to a deliveroo managed asset and not one run by a third party.
*.deliveroo.* URL medium medium medium critical
Note: To be eligible for an award, please ensure your report relates to a deliveroo managed asset and not one run by a third party.
com.deliveroo.driverapp GOOGLE_PLAY_APP_ID medium medium medium critical
com.deliveroo.riderapp APPLE_STORE_APP_ID medium medium medium critical

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*demo*.deliveroo.* URL critical
test, development, staging and demo servers are out of scope
*dev*.deliveroo.* URL critical
test, development, staging and demo servers are out of scope
*staging*.deliveroo.* URL critical
test, development, staging and demo servers are out of scope
*test*.deliveroo.* URL critical
test, development, staging and demo servers are out of scope
blog.deliveroo.* URL critical
blog.deliveroo.* is out of scope because of third party hosting
careers.deliveroo.* URL critical
careers.deliveroo.* is out of scope because of third party hosting
cdn*.deliveroo.* URL critical
cdn*.deliveroo.* is out of scope because of third party hosting
deliveroo-packaging.com URL none
email-assets.deliveroo.co.uk URL critical
email-assets.deliveroo.co.uk is out of scope because of third party hosting
foodscene.deliveroo.* URL critical
foodscene.deliveroo.* is out of scope due to third-party hosting
fs1.deliveroo.co.uk URL critical
fs1.deliveroo.co.uk is out of scope due to third-party hosting
news.deliveroo.* URL critical
news.deliveroo.* is out of scope because of third party hosting
packaging.deliveroo.* URL critical
packaging.deliveroo.* is out of scope because of third party hosting
rider.deliveroo.* URL critical
rider.deliveroo.* is out of scope because of third party hosting
terms.deliveroo.* URL critical
terms.deliveroo.* is out of scope because of third party hosting
dtm.deliveroo.co.uk URL none
dtm.deliveroo.co.uk is out of scope due to third-party hosting
dtmc.deliveroo.co.uk URL none
dtmc.deliveroo.co.uk is out of scope due to third-party hosting
dtm.deliveroo.* URL none
dtm.deliveroo.* is out of scope due to third-party hosting
dtmc.deliveroo.* URL none
dtmc.deliveroo.* is out of scope due to third-party hosting
go.deliveroo.com URL none
go.deliveroo.com is out of scope due to third-party hosting