Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
2 in-scope
Any public (Internet-facing) infra…ned and operated by Palantir.other· criticalAny public cloud (e.g. Amazon AWS,…ated and managed by Palantir.other· criticalAny infrastructure or assets relat… other Palantir acquisitions.first indexed
92d ago · 2 in-scope assets
No reports yet. Be the first to share your triage timing for Palantir Public.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/palantir_public",
"name": "Palantir Public",
"handle": "palantir_public",
"targets": {
"in_scope": [
{
"asset_type": "OTHER",
"instruction": "This is an expansive scope to help you identify security issues in any Internet-facing infrastructure we run. \n\nAll domains and subdomains owned and operated by Palantir are included within the scope. These may include, but are not limited to: \n* palantir.com\n* palantir.tech\n* palantir.build\n* palantircloud.com\n* palantircloud.co.uk\n* palantirfoundry.com\n* palantirfoundry.co.uk\n* palantirfoundry.de\n* palantirfoundry.fr\n* palantirfoundry.com.au \n* palantirgov.com\n* foundrygov.com\n\nAll assets and services on these, and other Palantir-owned domains (unless otherwise noted as out-of-scope) may be eligible for awards. This may include cloud resources, firewalls, network devices, servers, and other assets or applications.",
"max_severity": "critical",
"asset_identifier": "Any public (Internet-facing) infrastructure owned and operated by Palantir.",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER",
"instruction": "- Public cloud storage accounts. (e.g. AWS S3 buckets, Azure data blobs)\n- Public cloud compute servers. (e.g. AWS EC2 instances, Azure Virtual Machines)",
"max_severity": "critical",
"asset_identifier": "Any public cloud (e.g. Amazon AWS, Microsoft Azure) resource or infrastructure operated and managed by Palantir.",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "OTHER",
"instruction": "",
"max_severity": "none",
"asset_identifier": "Any infrastructure or assets related to Silk, FancyThat, or other Palantir acquisitions.",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "blog.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "certification.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "community.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "explore.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "gear.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "go.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "SOURCE_CODE",
"instruction": "Any public code repository is out of scope under the program. Reports in most cases will not be eligible for bounties.",
"max_severity": "none",
"asset_identifier": "https://github.com/palantir/*",
"eligible_for_bounty": false,
"integrity_requirement": "not_defined",
"eligible_for_submission": false,
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "info.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "investors.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "3rd-party certification website/service.\n",
"max_severity": "none",
"asset_identifier": "learn.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Any domain related to FedStart or Palantir FedStart. ",
"max_severity": "none",
"asset_identifier": "palantirfedstart.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "Any domain related to the Palantir PAC. ",
"max_severity": "none",
"asset_identifier": "palantirpacusa.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "sandbox.training.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "store.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "training.palantir.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://palantir.com",
"offers_swag": true,
"managed_program": false,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 419,
"response_efficiency_percentage": 59,
"average_time_to_report_resolved": 927,
"average_time_to_first_program_response": 193
}