Grade K

Unit 1: Math Is…

Unit 4: Sort, Classify and Count Objects

Unit 5: 2-Dimensional Shapes

Unit 6: Understand Addition

Unit 7: Understand Subtraction

Unit 8: Addition and Subtraction Strategies

Unit 13: Analyze, Compare and Compose Shapes

Unit 14: Compare Measurable Attributes

Grade 1

Unit 2: Number Patterns

Unit 3: Place Value

Unit 4: Addition within 20: Facts and Strategies

Unit 5: Subtraction within 20: Facts and Strategies

Unit 7: Meanings of Addition

Unit 8: Meanings of Subtraction

Unit 13: Equal Shares

Grade 2

Unit 2: Place Value to 1,000

Unit 3: Patterns within Numbers

Unit 4: Meanings of Addition and Subtraction

Unit 5: Strategies to Add Fluently Within 100

Unit 7: Measure and Compare Lengths

Unit 8: Measurement, Time and Money

Unit 9: Strategies to Add 3-Digit Numbers

Unit 11: Data Analysis

Grade 3

Unit 2: Use Place Value Fluently to Add and Subtract within 1001

Unit 3: Multiplication and Division

Unit 4: Use Patterns to Multiply by 0,1, 2, 5 and 11

Unit 6: Connect Area and Multiplication

Unit 7: Fractions

Unit 9: Use Multiplication to Divide

Unit 12: Measurement and Data

Unit 13: Describe and Analyze 2-Dimensional Shapes

Grade 4

Unit 4: Multiplication as Comparison

Unit 5: Numbers and Number Patterns

Unit 6: Multiplication Strategies with Multi-Digit Numbers

Unit 9: Addition and Subtractions Meanings and Strategies with Fractions

Unit 10: Addition and Subtraction Strategies with Mixed Numbers

Unit 11: Multiply Fractions by Whole Numbers

Unit 12: Decimal Fractions

Grade 5

Unit 2: Volume

Unit 3: Place Value and Number Relationships

Unit 5: Multiply Multi-Digit Whole Numbers

Unit 6: Multiply Decimals

Unit 7: Divide Whole Numbers

Unit 8: Divide Decimals

Unit 10: Multiply Fractions

Unit 13: Geometry

Grade 6

Module 1: Ratios and Rates

Module 2: Fractions, Decimals, and Percents

Module 3: Compute with Multi-Digit Numbers and Fractions

Module 4: Integers, Rational Numbers, and the Coordinate Plane

Module 5: Numerical and Algebraic Expressions

Module 6: Relationships in Geometry

Module 7: Relationships Between Two Variables

Module 8: Area

Module 9: Volume and Surface Area

Module 10: Statistical Measures and Displays

Grade 7

Module 1: Proportional Relationships

Module 2: Solve Percent Problems

Module 3: Operations with Integers

Module 4: Operations with Rational Numbers

Module 5: Simplify Algebraic Expressions

Module 6: Write and Solve Equations

Module 7: Write and Solve Inequalities

Module 8: Geometric Figures

Module 9: Measure Figures

Module 10: Probability

Module 11: Sampling and Statistics

Grade 8

Module 1: Exponents and Scientific Notation

Module 2: Real Numbers

Module 3: Solve Equations with Variables on Each Side

Module 4: Linear Relationships and Slope

Module 5: Functions

Module 6: Systems of Linear Equations

Module 7: Triangles and the Pythagorean Theorem

Module 8: Transformations

Module 9: Congruence and Similarity

Module 10: Volume

Module 11: Scatter Plots and Two-Way Tables

Disclaimer

This document is for informational purposes only; references to third-party programs do not imply endorsement or affiliation, and all trademarks are the property of their respective owners.

Grade K

Unit 1: Position, Length, Height, and Sorting

Unit 2: Numbers to 5, Shapes and Weight

Unit 3: Addition and Subtractions with 5 and Shapes,

Unit 4: Numbers to 10 and Shapes

Unit 6: Addition and Subtraction Within 10

Unit 7: Teen Numbers and Shapes

Grade 1

Unit 1: Relating Addition and Subtraction

Unit 2: Addition and Subtraction Within 20

Unit 4: Using Tens and Ones to Organize and Count

Unit 5: Operations with Tens and Ones

Unit 6: Geometry and Measurement

Grade 1 (ADM G2)

Unit 1: Relating Addition and Subtraction

Grade 2

Unit 1: Numbers Within 20

Unit 2: Numbers Within 100

Unit 3: Numbers Within 1000

Unit 4: Length

Unit 5: Shapes and Arrays

Grade 2 (ADM G3)

Unit 2: Numbers Within 100

Unit 4: Length

Grade 3

Unit 2: Multiplication and Division

Unit 3: Multiplication

Unit 4: Fractions

Unit 6: Shapes

Grade 4

Unit 2: Operations

Unit 3: Multi-Digit Operations and Measurement

Unit 4: Fractions, Decimals, and Measurement

Unit 5: Geometry and Measurement

Grade 5

Unit 1: Whole Number Operations and Applications

Unit 2: Decimals and Fractions

Unit 3: More Decimals & Fractions

Unit 5: Algebraic Thinking and the Coordinate Plane

Grade 6

Unit 1: Expressions and Equations: Area, Algebraic Expressions, and Exponents

Unit 2: Decimals and Fractions: Base-Ten Operations, Division with Fractions, and Volume

Unit 3: Ratio Reasoning: Ratio Concepts and Equivalent Ratios

Unit 4: Ratio Reasoning: Unit Rates and Percent

Unit 5: Algebraic Thinking: Equivalent Expressions and Equations with Variables

Unit 6: Positive and Negative Numbers: Absolute Value, Inequalities, and the Coordinate Plane

Unit 7: Statistical Thinking: Data Distributions and Measures of Center and Variability

Grade 7

Unit 1: Proportional Relationships: Ratios, Rates, and Circles

Unit 2: Numbers and Operations: Add and Subtract Rational Numbers

Unit 3: Numbers and Operations: Multiply and Divide Rational Numbers

Unit 4: Algebraic Thinking: Expressions, Equations, and Inequalities

Unit 5: Proportional Reasoning: Percents and Statistical Samples

Unit 6: Geometry: Solids, Triangles, and Angles

Unit 7: Probability: Theoretical Probability, Experimental Probability, and Compound Events

Grade 8

Unit 1: Geometric Figures: Rigid Transformations and Congruence

Unit 2: Geometric Figures: Transformations, Similarity, and Angle Relationships

Unit 3: Linear Relationships: Slope, Linear Equations, and Systems

Unit 4: Functions: Linear and Nonlinear Relationships

Unit 5: Integer Exponents: Properties and Scientific Notation

Unit 6: Real Numbers: Rational Numbers, Irrational Numbers, and the Pythagorean Theorem

Unit 7: Statistics: Two-Variable Data and Fitting a Linear Model

Disclaimer

This document is for informational purposes only; references to third-party programs do not imply endorsement or affiliation, and all trademarks are the property of their respective owners.

Introduction

If your district uses firewall allowlisting by IP Address, you will need to change your firewall rules to ensure access to your Amplify products.

The appropriate IT administrator for your school or district can update your allowlist. If you have any questions, please contact Customer Services at (800) 823-1969.

Amplify Curriculum

To ensure access to all our curriculum products, add the following URLs to the appropriate district- and school-level filters. Please consult this list.

Amplify Email

In some cases, district-level spam filters may mistakenly classify Amplify messages as junk mail. Add the following domains to your allowlist to ensure important email communications are not blocked.

Content

Legal

Vulnerability Disclosure Policy

As a provider of technology solutions to schools, Amplify’s commitment to data privacy and security is essential to our organization. Amplify demonstrates that commitment in part through the physical, technical, and administrative safeguards we maintain to protect student data and other sensitive information entrusted to our care.

Amplify looks forward to working with the security community to find security vulnerabilities and support our efforts to keep our data and systems safe and secure.

Before reporting a vulnerability, please read our program rules, eligibility overview, report submission rules and guidelines, legal terms, and out-of-scope list set out below.

General Rules

• We appreciate reports on any Amplify-owned asset, but only vulnerabilities that prove to be outside of expected behavior are eligible for acceptance.
• Reports involving third party services or providers not under Amplify’s control are out-of-scope for submission.
• Amplify places a high priority on privacy. Vulnerabilities in the areas of inadvertent exposure of our customers’ personally identifiable information (PII) are considered to be of Critical severity.
• We classify vulnerability severity per CVSS (the Common Vulnerability Scoring Standard). These are general guidelines, and the ultimate decision over a reward – whether to give one and in what amount – is a decision that lies entirely within our discretion on a case-by-case basis.
• In order to receive an award for validated reports, you must have a HackerOne account. Please note reward decisions are subject to the discretion of Amplify. Please note these are general guidelines, and that reward decisions are subject to the discretion of Amplify.
• Only interact with test accounts that you created via self sign-up or were provided by Amplify. The use of any credentials outside of these areas for testing purposes, including legacy credentials supplied through the program and leaked credentials from third parties is strictly prohibited.
• Do not contact Amplify’s customer support for questions or to submit a vulnerability report.
• Amplify may, in its sole discretion, disqualify you if you breach this policy or fail to comply with any of the program’s rules and terms.
• Amplify reserves the right to cancel or modify this program without notice at any time.

Eligibility

• You are not eligible for participation if you 1) are employed by Amplify or any of its affiliates 2) are an immediate family member of a person employed by Amplify or any of its affiliates or 3) left the employment of Amplify or its affiliates or subsidiaries within the past (12) months.
• You are not eligible for participation if you have been prohibited in writing from participating in the Bug Bounty Program by Amplify at any time.
• You may not be in violation of any national, state, or local law or regulation with respect to any activities directly or indirectly related to conducting your tests.
• You may not compromise the privacy or safety of our customer and the operation of our services;
• You may not cause harm to Amplify, our customers, or others;
• You must follow the policy guidelines to responsibly disclose vulnerabilities to Amplify.

Vulnerability Submission Rules & Guidelines

• Any testing conducted on customer data or accounts is strictly prohibited and will result in removal from the program.
• If during the course of testing you encounter any sensitive data outside of your test accounts (including student or teacher names, login info, assessment data, activity data, and student work, etc.), please cease testing immediately and report what you have found. DO NOT include any text, screenshots, etc. with PII in the report. This action safeguards both potentially vulnerable data and yourself.
• Do not access, download, or share any data you encounter in your testing.
• Only interact with test accounts that you created or that we provided. The use of any credentials outside of these areas for testing purposes is strictly prohibited.
• Provide detailed reports with reproducible steps. If the report is not detailed enough to reproduce the issue, the issue will not be eligible for a reward.
• In some cases, you may not have all of the context information to assess the impact of a vulnerability. If you’re unsure of the direct impact but are reasonably certain that you have identified a vulnerability, we encourage you to submit a detailed report and state the open questions on impact.
• When duplicate submissions for the same vulnerability occur, we only award the first report that was received, provided that it can be fully reproduced.
• Multiple reports describing the same vulnerability against multiple assets or endpoints must be submitted within a single report.
• Avoid destruction of data and interruption or degradation of our service.
• Proof of Concept (POC) videos that do not include PII are highly recommended to help verify the issue, provide clarity, and save time on triage.
• Please provide timely responses to any follow-up questions and requests for additional information.
• Understand that there could be submissions for which we accept the risk, have other compensating controls, or will not address in the manner expected. When this happens, we will act as transparently as we can to provide you with the necessary context as to how the decision was made.
• Reports submitted using methods that violate policy rules will not be accepted and may result in account suspension from/denial of entrance to the program.
• Please refer to any noted out-of-scope areas listed under Out-of-Scope Vulnerabilities.

Out-of-Scope Vulnerabilities

When reporting vulnerabilities, please consider (1) attack scenario / exploitability, and (2) security impact of the bug. The following issues are considered out-of scope. In addition, please refer to any noted Out of Scope areas listed under the program assets.

• Social engineering (e.g. phishing, vishing, smishing) is prohibited.
• Clickjacking on pages with no sensitive actions.
• Unauthenticated/logout/login CSRF.
• Attacks requiring MITM or physical access to a user’s device.
• Previously known vulnerable libraries without a working Proof of Concept.
• Comma Separated Values (CSV) injection without demonstrating a vulnerability.
• Missing best practices in SSL/TLS configuration.
• Any activity that could lead to the disruption of our service (DoS).
• Content spoofing and text injection issues without showing an attack vector/without being able to modify HTML/CSS.
• XSRF that requires the knowledge of a secret.
• Automated tools that could generate significant traffic and possibly impair the functioning of our services.
• Testing or demonstrating the ability to upload unlimited audio/video files to exhaust resources.
• Leaked credentials from third party providers, including invalid or stale employee credential dumps, and/or leaked personal information of Amplify staff.
• Leaked credentials for Amplify customers not caused by vulnerabilities in our systems.
• Vulnerabilities identified via third party services or providers where Amplify is not the owner.
• Issues that merely result in spam/annoyance without additional impact (e.g sending emails without sufficient rate limiting)
• Attempts to access our offices or data centers.
• Any activity that could contribute to the disruption of our service (DoS). Automated scanning tests should be kept to 10 requests per second or less.
• Self XSS.
• Broken links and/or crashes in general.
• Issues that require unlikely user interaction.
• Issues that do not affect the latest version of modern browsers
• Issues that require physical access to a victim’s computer/device.
• Disclosure of information that does not present a significant risk
• Please refer to any noted out-of-scope areas listed under program assets.

Legal

• Any information you receive or collect about us, our affiliates or any of our users, employees or agents in connection with the Bug Bounty Program (“Confidential Information”) must be kept confidential and only used in connection with the Bug Bounty Program. You may not use, disclose or distribute any such Confidential Information, including without limitation any information regarding your Submission, without our prior written consent. You must get written consent by submitting a disclosure request through the HackerOne platform.
• Researchers must follow HackerOne’s disclosure guidelines. Public disclosure or disclosure to other third parties without the explicit permission of Amplify is prohibited.
• We will not take legal action against you if vulnerabilities are found and responsibly reported in compliance with all of the terms and conditions outlined in this policy.
• Amplify reserves the right to modify the terms and conditions of this program without notice at any time, and your participation in the Program constitutes acceptance of all terms.

Submit Vulnerability Report