Bug bounty program · HackerOne
Superhuman (formerly Grammarly)
Most upvoted reports23
- #496937ValidAnalysedEmployee's GitHub Token Found In Travis CI Build LogsSuperhuman (formerly Grammarly) · Information Disclosure · 2019 · needs: no account · Leaked secret or key, Information disclosure$5,000408votes
- #534450ValidAnalysedAccount takeover through the combination of cookie manipulation and XSSSuperhuman (formerly Grammarly) · Cross-site Scripting · 2019 · needs: no account · Stored XSS, Account takeover chain, Session fixation or reuse–292votes
- #976603ValidAbility to DOS any organization's SSO and open up the door to account takeoversSuperhuman (formerly Grammarly) · Authentication · 2021$10,500260votes
- #1082847ValidConfig override using non-validated query parameter allows at least reflected XSS by injecting configuration into stateSuperhuman (formerly Grammarly) · Input Validation and Logic · 2021–223votes
- #389108ValidHandling of `tracking` command allows making arbitrary blind requests with user's cookies from Grammarly Extension's originSuperhuman (formerly Grammarly) · No weakness recorded · 2019–202votes
- #667739ValidPreviously created sessions continue being valid after MFA activationSuperhuman (formerly Grammarly) · Access Control · 2019–176votes
- #395729Valid`socket` command allows sending data over WebSockets to arbitrary origins from Grammarly ExtensionSuperhuman (formerly Grammarly) · No weakness recorded · 2019–140votes
- #629892ValidLack of CSRF header validation at https://g-mail.grammarly.com/profileSuperhuman (formerly Grammarly) · Information Disclosure · 2019–140votes
- #745495ValidUnauthenticated users can access all food.grammarly.io user's dataSuperhuman (formerly Grammarly) · Access Control · 2020 · no account (title)–138votes
- #535436ValidLack or Origin check leads to Cross-Site Websocket Hijacking (CSWSH)Superhuman (formerly Grammarly) · Access Control · 2020$800134votes
Subdomains1,024
1,023 covered by the program's own scope · 0 first seen this week
1,024 names
| Name | Scope | First seen |
|---|---|---|
| 1478l2drvy.coda.io | In scope | 2026-11-14 |
| acme.coda.io | In scope | 2026-11-14 |
| adhoc.coda.io | In scope | 2026-11-14 |
| adhoc-hosted.coda.io | In scope | 2026-11-14 |
| adhoc-tp.coda.io | In scope | 2026-11-14 |
| admin.adhoc.coda.ioadmin | In scope | 2026-11-14 |
| huayang.admin.adhoc.coda.ioadmin | In scope | 2026-11-14 |
| multicolumn.admin.adhoc.coda.ioadmin | In scope | 2026-11-14 |
| packs.admin.adhoc.coda.ioadmin | In scope | 2026-11-14 |
| packs-eval.admin.adhoc.coda.ioadmin | In scope | 2026-11-14 |
| pagelayout.admin.adhoc.coda.ioadmin | In scope | 2026-11-14 |
| parent.admin.adhoc.coda.ioadmin | In scope | 2026-11-14 |
| wcdn.admin.adhoc.coda.ioadmin | In scope | 2026-11-14 |
| agent-runtime.adhoc.coda.io | In scope | 2026-11-14 |
| auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| forking.auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| huayang.auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| multicolumn.auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| packs.auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| packs-eval.auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| pagelayout.auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| redirect.auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| v1packs.auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| calc.adhoc.coda.io | In scope | 2026-11-14 |
| forking.calc.adhoc.coda.io | In scope | 2026-11-14 |
| huayang.calc.adhoc.coda.io | In scope | 2026-11-14 |
| multicolumn.calc.adhoc.coda.io | In scope | 2026-11-14 |
| packs.calc.adhoc.coda.io | In scope | 2026-11-14 |
| packs-eval.calc.adhoc.coda.io | In scope | 2026-11-14 |
| pagelayout.calc.adhoc.coda.io | In scope | 2026-11-14 |
| redirect.calc.adhoc.coda.io | In scope | 2026-11-14 |
| v1packs.calc.adhoc.coda.io | In scope | 2026-11-14 |
| wcdn.calc.adhoc.coda.io | In scope | 2026-11-14 |
| cert-service.adhoc.coda.io | In scope | 2026-11-14 |
| creosote.adhoc.coda.io | In scope | 2026-11-14 |
| dbtservice.adhoc.coda.io | In scope | 2026-11-14 |
| docservice.adhoc.coda.io | In scope | 2026-11-14 |
| forking.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| huayang.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| multicolumn.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| packs.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| packs-eval.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| pagelayout.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| redirect.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| v1packs.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| wcdn.docservice.adhoc.coda.io | In scope | 2026-11-14 |
| embeddings-indexing.adhoc.coda.io | In scope | 2026-11-14 |
| embeddings-querying.adhoc.coda.io | In scope | 2026-11-14 |
| fetcher.adhoc.coda.io | In scope | 2026-11-14 |
| forking.fetcher.adhoc.coda.io | In scope | 2026-11-14 |
| huayang.fetcher.adhoc.coda.io | In scope | 2026-11-14 |
| multicolumn.fetcher.adhoc.coda.io | In scope | 2026-11-14 |
| packs.fetcher.adhoc.coda.io | In scope | 2026-11-14 |
| pagelayout.fetcher.adhoc.coda.io | In scope | 2026-11-14 |
| toolbar.fetcher.adhoc.coda.io | In scope | 2026-11-14 |
| wcdn.fetcher.adhoc.coda.io | In scope | 2026-11-14 |
| forking.adhoc.coda.io | In scope | 2026-11-14 |
| hack-custom.adhoc.coda.io | In scope | 2026-11-14 |
| huayang.adhoc.coda.io | In scope | 2026-11-14 |
| hva-rh.adhoc.coda.io | In scope | 2026-11-14 |
| johnli-tls-s-custom.adhoc.coda.io | In scope | 2026-11-14 |
| loggingservice.adhoc.coda.io | In scope | 2026-11-14 |
| multicolumn.adhoc.coda.io | In scope | 2026-11-14 |
| new-blue.adhoc.coda.io | In scope | 2026-11-14 |
| nre-bullseye.adhoc.coda.io | In scope | 2026-11-14 |
| nre-itr.adhoc.coda.io | In scope | 2026-11-14 |
| nre-lkgdiff.adhoc.coda.io | In scope | 2026-11-14 |
| pack-binding.adhoc.coda.io | In scope | 2026-11-14 |
| pack-intent.adhoc.coda.io | In scope | 2026-11-14 |
| packs.adhoc.coda.io | In scope | 2026-11-14 |
| packs-auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| huayang.packs-auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| multicolumn.packs-auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| pagelayout.packs-auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| parent.packs-auth.adhoc.coda.ioauth | In scope | 2026-11-14 |
| packs-eval.adhoc.coda.io | In scope | 2026-11-14 |
| pagelayout.adhoc.coda.io | In scope | 2026-11-14 |
| pages.adhoc.coda.io | In scope | 2026-11-14 |
| parent.adhoc.coda.io | In scope | 2026-11-14 |
| print.adhoc.coda.io | In scope | 2026-11-14 |
| query-corrector.adhoc.coda.io | In scope | 2026-11-14 |
| redirect.adhoc.coda.io | In scope | 2026-11-14 |
| ref.adhoc.coda.io | In scope | 2026-11-14 |
| reranker.adhoc.coda.io | In scope | 2026-11-14 |
| reranker-ft.adhoc.coda.io | In scope | 2026-11-14 |
| sdm-gateway.adhoc.coda.io | In scope | 2026-11-14 |
| search.adhoc.coda.io | In scope | 2026-11-14 |
| site.adhoc.coda.io | In scope | 2026-11-14 |
| abc123.site.adhoc.coda.io | In scope | 2026-11-14 |
| mrojs5afqo.site.adhoc.coda.io | In scope | 2026-11-14 |
| slate.adhoc.coda.io | In scope | 2026-11-14 |
| standalonefetcher.adhoc.coda.io | In scope | 2026-11-14 |
| toolbar.adhoc.coda.io | In scope | 2026-11-14 |
| v1packs.adhoc.coda.io | In scope | 2026-11-14 |
| wcdn.adhoc.coda.io | In scope | 2026-11-14 |
| admin.coda.ioadmin | In scope | 2026-11-14 |
| ahxrnf01me.coda.io | In scope | 2026-11-14 |
| airflow-prod.coda.iotools | In scope | 2026-11-14 |
| apple.coda.io | In scope | 2026-11-14 |
| auth.coda.ioauth | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.