bug bounty program · HackerOne
Smartsheet (VDP)
0 disclosed reports · 5 assets in scope · 2,472 subdomains
First the weakness classes of its disclosed reports, then what it has in scope. Each square is a report or an asset, or a group of names. The last strips are its subdomains by root domain, from ProjectDiscovery's public Chaos dataset; the bright part of each is what the program's own scope covers.
Open Smartsheet (VDP) on HackerOne- pays bounties
- No
- subdomains
- 2,472
- in scope
- 3
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.