FINRA Response

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.finra.org URL critical
https://ews.qa.finra.org/* URL critical

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.fip.finra.org URL none
https://ews.finra.org/* URL none