GoTo Financial - Public Bounty Program

In Scope

• https://apps.apple.com/id/app/gopay-transfer-pulsa-bills/id6446321594 mobile bounty-eligible
• https://play.google.com/store/apps/details?id=com.gojek.gopay&hl=id mobile bounty-eligible
• *.gopayapi.com other bounty-eligible
• gopaymerchant.midtrans.com web bounty-eligible
• mokapos.com web bounty-eligible
• *.go-pay.co.id other bounty-eligible
• api.midtrans.com api bounty-eligible
• app.midtrans.com web bounty-eligible
• www.midtrans.com web bounty-eligible
• *.gaming.gopayapi.com other bounty-eligible
• *.findaya.com other bounty-eligible
• *.findaya.co.id other bounty-eligible
• *.gtflabs.io other bounty-eligible
• *.mab.co.id other bounty-eligible

Out of Scope

- Any staging environment will be out of scope (staging domain could be indicated by words like test/integration/staging, etc), - All other Goto Financial assets not listed above are to be considered as out of scope