test host for an authorized HackerOne engagement