bug bounty program · HackerOne

Slack

133 disclosed reports · 19 assets in scope

First the weakness classes of its disclosed reports, then what it has in scope. Each square is a report or an asset.

pays bounties: Yes

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.