PullString

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
app.pullstring.com URL high high high critical
This is our core web application. You will need to contact us at security@pullstring.com and provide an email address in order to receive an account invitation.
cyberbird.pullstring.com URL high high high critical
This is the backend service for our app.pullstring.com application.

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
docs.pullstring.com URL none
This service is hosted by a third party that we do not control.
help.pullstring.com URL none
This service is hosted by a third party that we do not control.
status.pullstring.com URL none
This service is hosted by a third party that we do not control.
www.pullstring.com URL low low low none
This site is hosted on a third-party service (HubSpot) and we are limited in the settings we can change.