bug bounty program · HackerOne

Palo Alto Software

9 disclosed reports · 4 assets in scope · 2,377 subdomains

First the weakness classes of its disclosed reports, then what it has in scope. Each square is a report or an asset, or a group of names. The last strips are its subdomains by root domain, from ProjectDiscovery's public Chaos dataset; the bright part of each is what the program's own scope covers. Access Control tops its disclosed reports (38%).