Does Klarna have a bug bounty program?

Yes, Klarna runs a public bug bounty program on HackerOne. It currently lists 8 in-scope assets.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/HackerOne/klarna

Klarna

HackerOne·updated 14h ago

bountymanagedopen

Discord → RSS

payout: no bounty
scope: 8 in · 8 out
safe harbor: unknown
response: no reports

open program

signalsscope ×0.7 in 90dderived from our snapshot history

hunt score

cashfresh

formula →

payout

0/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

8 in-scope

4wildcards
2other
1ios
1apis

Scope

In scope

008

wildcards04

apis01

+app.klarna.com· critical

ios01

+Klarna iOS App (com.klarna.app)· critical

other02

+Klarna Android App (com.myklarnamobile)· critical
+Merchant Portal· critical

Out of scope

008

urls07

other01

−Kustom

Change history

3 events

in-scope over 10dpeak 16

first indexedscope addedscope removedreward change

2026-08-16
− removed 8 scopes
82d ago
2026-08-13
+ added 4 scopes
85d ago
2026-08-06
first indexed
92d ago · 12 in-scope assets

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Klarna.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Similar programs

by shared scope

HackerOneGlobal Payments1× overlap

Your notes

▸ raw source payload

{
  "id": 0,
  "url": "https://hackerone.com/klarna",
  "name": "Klarna",
  "handle": "klarna",
  "targets": {
    "in_scope": [
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.klarna.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.klarna.net",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.klarnacdn.net",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.pricerunner.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "Please use your hacker email alias (e.g. h1username@wearehackerone.com) when testing. URL: https://play.google.com/store/apps/details?id=com.myklarnamobile",
        "max_severity": "critical",
        "asset_identifier": "Klarna Android App (com.myklarnamobile)",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "Please use your hacker email alias (e.g. h1username@wearehackerone.com) when testing. URL: https://apps.apple.com/it/app/klarna-shop-now-pay-later/id1115120118",
        "max_severity": "critical",
        "asset_identifier": "Klarna iOS App (com.klarna.app)",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": "https://portal.playground.klarna.com",
        "max_severity": "critical",
        "asset_identifier": "Merchant Portal",
        "eligible_for_bounty": true,
        "integrity_requirement": "not_defined",
        "eligible_for_submission": true,
        "availability_requirement": "not_defined",
        "confidentiality_requirement": "not_defined"
      },
      {
        "asset_type": "API",
        "instruction": "Klarna app's API. ",
        "max_severity": "critical",
        "asset_identifier": "app.klarna.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ],
    "out_of_scope": [
      {
        "asset_type": "OTHER",
        "instruction": "Any endpoint, URL, or functionality related to Kustom is out of scope. ",
        "max_severity": "none",
        "asset_identifier": "Kustom",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "https://api-stage.pricerunner.com/swagger-ui.html",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "https://api-us.pricerunner.com/swagger-ui.html",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "https://api.pricerunner.com/swagger-ui.html",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "https://app.klarna.com/us/api/connected_card_bff/",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": "none"
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "jobs.pricerunner.com",
        "eligible_for_bounty": false,
        "integrity_requirement": "not_defined",
        "eligible_for_submission": false,
        "availability_requirement": "not_defined",
        "confidentiality_requirement": "not_defined"
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "locker.klarna.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "nuji.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ]
  },
  "website": "https://klarna.com",
  "offers_swag": false,
  "managed_program": true,
  "offers_bounties": true,
  "submission_state": "open",
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 83,
  "response_efficiency_percentage": 71,
  "average_time_to_report_resolved": 1621,
  "average_time_to_first_program_response": 2
}