Coalition, Inc.

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
api.thecoalition.com URL high high high critical
platform.thecoalition.com URL high high high critical

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
blog.thecoalition.com URL low none none none
Coalition's blog is hosted by Ghost. Security bugs in Ghost may be reported per https://github.com/TryGhost/Ghost/blob/master/SECURITY.md
help.thecoalition.com URL none
Coalition's help site is hosted by Intercom. Security bugs in Intercom may be reported directly to the vendor.
www.thecoalition.com URL none
Coalition's www site is hosted by Webflow. Security bugs in Webflow may be reported to the service provider.