Does EXNESS have a bug bounty program?

Yes, EXNESS runs a public bug bounty program on HackerOne. It currently lists 14 in-scope assets.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/HackerOne/exness

EXNESS

HackerOne·updated 20h ago

bountyswagopen

Discord → RSS

payout: no bounty
scope: 14 in · 1 out
safe harbor: unknown
response: no reports

open program

hunt score

cashfresh

formula →

payout

0/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

14 in-scope

8urls
4other
2ios

Scope

In scope

014

urls08

ios02

+Exness Investor· critical
+Exness Trade: Online Trading· critical

other04

+Any subdomain application issue· critical
+Any subdomain infrastructure issue· critical
+External service data leakage· critical
+com.exness.android.pa· critical

Out of scope

001

−stat.* (e.g. stat.exnessaffiliates.com)url

Change history

1 event

2026-08-06
first indexed
93d ago · 14 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for EXNESS.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "id": 0,
  "url": "https://hackerone.com/exness",
  "name": "EXNESS",
  "handle": "exness",
  "targets": {
    "in_scope": [
      {
        "asset_type": "OTHER",
        "instruction": "Exness subdomains of exness.(tld)",
        "max_severity": "critical",
        "asset_identifier": "Any subdomain application issue",
        "eligible_for_bounty": false,
        "integrity_requirement": "medium",
        "eligible_for_submission": true,
        "availability_requirement": "low",
        "confidentiality_requirement": "medium"
      },
      {
        "asset_type": "OTHER",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "Any subdomain infrastructure issue",
        "eligible_for_bounty": false,
        "integrity_requirement": "low",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "low"
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://apps.apple.com/id/app/exness-investor/id1579331769",
        "max_severity": "critical",
        "asset_identifier": "Exness Investor",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://apps.apple.com/id/app/exness-trader-trade-on-the-go/id1359763701",
        "max_severity": "critical",
        "asset_identifier": "Exness Trade: Online Trading",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "OTHER",
        "instruction": "Feel free to search secrets on github/pastebin and other services, but keep in mind, that such issues could be posted earlier and are ineligible for a bounty for now",
        "max_severity": "critical",
        "asset_identifier": "External service data leakage ",
        "eligible_for_bounty": false,
        "integrity_requirement": "none",
        "eligible_for_submission": true,
        "availability_requirement": "medium",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "Mobile API",
        "max_severity": "critical",
        "asset_identifier": "api.excalls.mobi",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "Exness Trade: Online Trading\nhttps://play.google.com/store/apps/details?id=com.exness.android.pa",
        "max_severity": "critical",
        "asset_identifier": "com.exness.android.pa",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "Public Area for Web Trading",
        "max_severity": "medium",
        "asset_identifier": "exness.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "low",
        "eligible_for_submission": true,
        "availability_requirement": "low",
        "confidentiality_requirement": "low"
      },
      {
        "asset_type": "URL",
        "instruction": "Partnership programs",
        "max_severity": "critical",
        "asset_identifier": "exnessaffiliates.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "Portfolio Management",
        "max_severity": "high",
        "asset_identifier": "https://my.exness.com/pa/pim/manager",
        "eligible_for_bounty": true,
        "integrity_requirement": "low",
        "eligible_for_submission": true,
        "availability_requirement": "medium",
        "confidentiality_requirement": "low"
      },
      {
        "asset_type": "URL",
        "instruction": "Web Terminal For Trading",
        "max_severity": "critical",
        "asset_identifier": "https://my.exness.com/webtrading/",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "Personal Area for Web Trading",
        "max_severity": "critical",
        "asset_identifier": "my.exness.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "Payments Services",
        "max_severity": "critical",
        "asset_identifier": "pay.ibex.exchange",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "Public Web API",
        "max_severity": "critical",
        "asset_identifier": "pwapi.ex2b.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      }
    ],
    "out_of_scope": [
      {
        "asset_type": "URL",
        "instruction": "Deprecated",
        "max_severity": "none",
        "asset_identifier": "stat.* (e.g. stat.exnessaffiliates.com)",
        "eligible_for_bounty": false,
        "integrity_requirement": "none",
        "eligible_for_submission": false,
        "availability_requirement": "none",
        "confidentiality_requirement": "none"
      }
    ]
  },
  "website": "https://www.exness.com",
  "offers_swag": true,
  "managed_program": false,
  "offers_bounties": true,
  "submission_state": "open",
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 149,
  "response_efficiency_percentage": 89,
  "average_time_to_report_resolved": 740,
  "average_time_to_first_program_response": 29
}