how we sort the index, not an estimate of what you’ll earn
Attack surface
10 in-scope
ai.portswigger.net· criticalcollections.portswigger.net· criticalhttp1mustdie.com· highid.portswigger.net· criticallinks.portswigger.net· criticalportswigger.net· criticalshare.portswigger.net· criticalBurp Collaborator· criticalBurp Suite DAST· criticalBurp Suite Pro/Community· highBurp Suite Extension (BApps)− removed 1 scope · Burp Suite Extension (BApps)
37d ago
first indexed
93d ago · 11 in-scope assets
No reports yet. Be the first to share your triage timing for PortSwigger Web Security.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/portswigger",
"name": "PortSwigger Web Security",
"handle": "portswigger",
"targets": {
"in_scope": [
{
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"instruction": "Burp Collaborator is part of Burp Suite Pro - for further information refer to https://portswigger.net/burp/help/collaborator.html",
"max_severity": "critical",
"asset_identifier": "Burp Collaborator",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "high"
},
{
"asset_type": "OTHER",
"instruction": "Install from https://portswigger.net/burp/enterprise",
"max_severity": "critical",
"asset_identifier": "Burp Suite DAST",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"instruction": "Download from https://portswigger.net/burp",
"max_severity": "high",
"asset_identifier": "Burp Suite Pro/Community",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "ai.portswigger.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "collections.portswigger.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "This is static content hosted using CloudFront.",
"max_severity": "high",
"asset_identifier": "http1mustdie.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "id.portswigger.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "links.portswigger.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "https://portswigger.net",
"max_severity": "critical",
"asset_identifier": "portswigger.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "share.portswigger.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "WILDCARD",
"instruction": "Subdomains of portswigger.net that are not explicitly whitelisted are out of scope.",
"max_severity": "none",
"asset_identifier": "*.portswigger.net",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "The Academy contains numerous intentional vulnerabilities, and is completely isolated from our other infrastructure.",
"max_severity": "none",
"asset_identifier": "*.web-security-academy.net",
"eligible_for_bounty": false,
"integrity_requirement": "low",
"eligible_for_submission": false,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"instruction": "These are made by third parties. Please report issues in these directly to the maintainer. ",
"max_severity": "none",
"asset_identifier": "Burp Suite Extension (BApps)",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
}
]
},
"website": "https://portswigger.net",
"offers_swag": true,
"managed_program": false,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 530,
"response_efficiency_percentage": 99,
"average_time_to_report_resolved": null,
"average_time_to_first_program_response": 13
}