tchap-public
10
In Scope
2
Out of Scope
In-Scope Assets (10)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| Specific scenarios (see program description) | OTHER | Yes | - | |
| https://apps.apple.com/fr/app/tchap/id1446253779 | IOS | Yes | - | |
| https://github.com/tchapgouv | OTHER | Yes | - | |
| https://matrix.agent.*.tchap.gouv.fr | URL | Yes | ||
| https://matrix.agent.tchap.gouv.fr | URL | Yes | ||
| https://matrix.e.tchap.gouv.fr | URL | Yes | ||
| https://matrix.i.tchap.gouv.fr | URL | Yes | ||
| https://play.google.com/store/apps/details?id=fr.gouv.tchap.a&hl=fr | ANDROID | Yes | ||
| https://www.beta.tchap.gouv.fr | URL | Yes | ||
| https://www.tchap.gouv.fr | URL | Yes |
Out-of-Scope Assets (2)
| Asset | Category | Bounty | |
|---|---|---|---|
| Everything that not listed as in scope is to be considered as out of scope of this program | OTHER | Yes | |
| Please note that Tchap is hosted by a third party and thus vulnerabilities related to the host are out of the scope | OTHER | Yes |
Scope Changes (12)
Apr 16, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://www.tchap.gouv.fr | URL | In Scope | 18:33 |
| Added | https://matrix.agent.tchap.gouv.fr | URL | In Scope | 18:33 |
| Added | matrix.agent.*.tchap.gouv.fr | URL | In Scope | 18:33 |
| Added | https://github.com/tchapgouv | OTHER | In Scope | 18:33 |
| Added | https://play.google.com/store/apps/details?id=fr.gouv.tchap.a&hl=fr | ANDROID | In Scope | 18:33 |
| Added | https://apps.apple.com/fr/app/tchap/id1446253779 | IOS | In Scope | 18:33 |
| Added | https://www.beta.tchap.gouv.fr | URL | In Scope | 18:33 |
| Added | https://matrix.i.tchap.gouv.fr | URL | In Scope | 18:33 |
| Added | https://matrix.e.tchap.gouv.fr | URL | In Scope | 18:33 |
| Added | specific scenarios (see program description) | OTHER | In Scope | 18:33 |
| Added | everything that not listed as in scope is to be considered as out of scope of this program | OTHER | Out of Scope | 18:33 |
| Added | please note that tchap is hosted by a third party and thus vulnerabilities related to the host are out of the scope | OTHER | Out of Scope | 18:33 |