agora

YesWeHackView on YesWeHack
RawAI Enhanced
4
In Scope
3
Out of Scope
In-Scope Assets (4)
AssetCategoryBountyQuick Links
Agora for Android (see dowload link for APK file and mobile app GitHub repository in description)ANDROIDYes-
Agora for iOS (see dowload link for IPA file and mobile app GitHub repository in description)IOSYes-
https://api.sandbox.agora.incubateur.net (source code available on GitHub, see description)URLYes-
https://app.sandbox.agora.incubateur.netURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (3)
AssetCategoryBounty
All assets not listed as in scope must be considered as out of the scope of this program. Please note that the Website "agora.beta.gouv.fr" is also out of scope.OTHERYes
Production environments are out of the scope of this programOTHERYes
Web application's Github repository (https://github.com/agora-gouv/agora-webapp), you may refer to the mobile app's repositoryOTHERYes
Scope Changes (7)
Apr 16, 2026
ChangeAssetCategoryScopeTime
Addedagora for android (see dowload link for apk file and mobile app github repository in description)ANDROIDIn Scope18:33
Addedagora for ios (see dowload link for ipa file and mobile app github repository in description)IOSIn Scope18:33
Addedhttps://app.sandbox.agora.incubateur.netURLIn Scope18:33
Addedhttps://api.sandbox.agora.incubateur.net (source code available on github, see description)URLIn Scope18:33
Addedall assets not listed as in scope must be considered as out of the scope of this program. please note that the website "agora.beta.gouv.fr" is also out of scopeOTHEROut of Scope18:33
Addedproduction environments are out of the scope of this programOTHEROut of Scope18:33
Addedweb application's github repository (https://github.com/agora-gouv/agora-webapp), you may refer to the mobile app's repositoryOTHEROut of Scope18:33