bug bounty program exposure analysis, drawn from neobotnet's data.
8x8 runs other companies' phone lines and contact centers — and quietly publishes a map of its own: 86 contact-center admin consoles laid out region by region, a 20-year graveyard of voip brands still in scope, and a clean url surface that reads as a checklist of what a researcher looks for first.
epic's bounty scope is fifteen acquisitions. reading it top-down: the sso login flow it publishes in full, the tokens that ride in its urls, and a few emails in plain sight.
mercado libre locks the storefront down hard — short-lived expired tokens, 403s everywhere, no secrets. then its back office, adminml.com, narrates its own internals in public.
Latitude Financial's public web surface across 20 in-scope domains: the brands behind it, the development logins it leaves open, and the source maps and tokens it publishes.
t-mobile's public web surface across 17 in-scope domains: what resolves, what's running, and what its login pages disclose.
what 66 live web servers, 45,352 indexed URLs, and 119 published source maps say about crypto.com.