In-scope assets typically include:

Specific domains and subdomains (e.g., `*.example.com`) - Mobile applications (iOS and Android) - APIs and API documentation - Specific IP ranges - Open source repositories