Treasury Board of Canada Secretariat/Secrétariat du Conseil du Trésor du Canada · in scope
Web applications
18 assets in scope
Every dot is an asset the program lists in scope. They are all named here.
Open on HackerOneEvery one of the 18 is a mark on the map. Named now: 1 to 18, as listed first.
- api.forms-formulaires.alpha.canada.ca
- api.login-connexion.canada.ca
- api.migration.login-connexion.canada.ca
- app.login-connexion.canada.ca
- app.migration.login-connexion.canada.ca
- articles.alpha.canada.ca
- auth.cdssandbox.xyz
- auth.forms-formulaires.alpha.canada.ca
- delivrance-verification.alpha.canada.ca
- design-system.alpha.canada.ca
- design-system.canada.ca
- forms-formulaires.alpha.canada.ca
- gciv-dvgc.alpha.canada.ca
- issue-verify.alpha.canada.ca
- staging.tracker.canada.ca
- talent.canada.ca
- tracker.canada.ca
- validate-email.cdssandbox.xyz
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.