Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
40 in-scope
*.sc-core.netscope· criticalaccounts.snapchat.com· criticalads.snapchat.com· highapp.snapchat.com· criticalblog.playcanvas.com· mediumbusiness.snapchat.com· criticalbusinesshelp.snapchat.com· highcode.playcanvas.com· mediumcreate.snapchat.com· highdeveloper.playcanvas.com· mediumforum.playcanvas.com· mediumgeofilters.snapchat.com· highkit.snapchat.com· highlaunch.playcanvas.com· mediumlogin.playcanvas.com· mediummap.snapchat.com· lowmsg.playcanvas.com· mediummy.snapchat.com· highplaycanv.as· mediumplaycanvas.com· mediumrelay.playcanvas.com· mediumrt.playcanvas.com· mediumscan.snapchat.com· lowsnappublisher.snapchat.com· highspectacles.com· lowstore.playcanvas.com· mediumstore.snapchat.com· criticalstory.snapchat.com· lowweb.snapchat.com· criticalwww.bitmoji.com· mediumwww.bitstrips.com· mediumcom.bitstrips.imoji· mediumcom.toyopagroup.picaboo· highlensstudio.snapchat.com/api/· critical*.sc-corp.netscope· criticalLens Studio· mediumTier A - Core Assets· criticalTier B - Non Core (Bitmoji, Playcanvas)· mediumcom.bitstrips.imoji· mediumcom.snapchat.android· criticalSpectaclesSpectacles charging casefirst indexed
92d ago · 40 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Snapchat.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/snapchat",
"name": "Snapchat",
"handle": "snapchat",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "Snapchat's internal services",
"max_severity": "critical",
"asset_identifier": "*.sc-core.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "OTHER",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.sc-corp.net",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "Lens Studio",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "OTHER",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "Tier A - Core Assets",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "Tier B - Non Core (Bitmoji, Playcanvas)",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "[Core asset]\nSnapchat's account management website. ",
"max_severity": "critical",
"asset_identifier": "accounts.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "high",
"asset_identifier": "ads.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "[Core asset]\nMain server-side application hosted on Google App Engine under the hostname feelinsonice-hrd.appspot.com and app.snapchat.com.",
"max_severity": "critical",
"asset_identifier": "app.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "blog.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "Snapchat's Business Manager. ",
"max_severity": "critical",
"asset_identifier": "business.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "Snapchat's Salesforce instance",
"max_severity": "high",
"asset_identifier": "businesshelp.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "code.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Non-core asset]\n[iOS App Store](https://itunes.apple.com/us/app/bitmoji-keyboard-your-avatar/id868077558)",
"max_severity": "medium",
"asset_identifier": "com.bitstrips.imoji",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[Non-core asset]\n[Google Play Store](https://play.google.com/store/apps/details?id=com.bitstrips.imoji)",
"max_severity": "medium",
"asset_identifier": "com.bitstrips.imoji",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[Core asset]\n[Google Play Store](https://play.google.com/store/apps/details?id=com.snapchat.android)",
"max_severity": "critical",
"asset_identifier": "com.snapchat.android",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "medium"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Core asset]\n[iOS App Store](https://itunes.apple.com/us/app/snapchat/id447188370?mt=8)",
"max_severity": "high",
"asset_identifier": "com.toyopagroup.picaboo",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": "Snapchat's Geofilter creation tool. ",
"max_severity": "high",
"asset_identifier": "create.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "developer.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "forum.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "[Core asset]\nSnapchat's on-demand Geofilters purchase website. ",
"max_severity": "high",
"asset_identifier": "geofilters.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "medium"
},
{
"asset_type": "SOURCE_CODE",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "https://lensstudio.snapchat.com/api/",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "[Core asset]\nSNAPKIT web application and SDKs",
"max_severity": "high",
"asset_identifier": "kit.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "launch.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "login.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "low",
"asset_identifier": "map.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "msg.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "Snapchat's Spotlight on the web. ",
"max_severity": "high",
"asset_identifier": "my.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "playcanv.as",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "relay.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "rt.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "[Core asset]\nSnapcode creation website",
"max_severity": "low",
"asset_identifier": "scan.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "none",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "[Core asset]\nSnapchat's publisher tool. ",
"max_severity": "high",
"asset_identifier": "snappublisher.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": "[Core asset]\nSnapchat's spectacles purchase website. ",
"max_severity": "low",
"asset_identifier": "spectacles.com",
"eligible_for_bounty": true,
"integrity_requirement": "none",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "store.playcanvas.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "Snapchat's Bitmoji Merch Store",
"max_severity": "critical",
"asset_identifier": "store.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "low",
"asset_identifier": "story.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "web.snapchat.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "[Non-core asset]",
"max_severity": "medium",
"asset_identifier": "www.bitmoji.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "[Non-core asset]",
"max_severity": "medium",
"asset_identifier": "www.bitstrips.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
}
],
"out_of_scope": [
{
"asset_type": "HARDWARE",
"instruction": null,
"max_severity": "none",
"asset_identifier": "Spectacles",
"eligible_for_bounty": false,
"integrity_requirement": "low",
"eligible_for_submission": false,
"availability_requirement": "low",
"confidentiality_requirement": "medium"
},
{
"asset_type": "HARDWARE",
"instruction": "",
"max_severity": "none",
"asset_identifier": "Spectacles charging case",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "dev.playcanv.as",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "none",
"asset_identifier": "http://dev*.playcanvas.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "returns.spectacles.com application is owned and managed by Netsuite. Please consider reporting vulnerabilities directly to them.",
"max_severity": "none",
"asset_identifier": "returns.spectacles.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Static support website",
"max_severity": "none",
"asset_identifier": "support.snapchat.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://www.snapchat.com/",
"offers_swag": false,
"managed_program": false,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 601,
"response_efficiency_percentage": 93,
"average_time_to_report_resolved": 1701,
"average_time_to_first_program_response": 14
}