how we sort the index, not an estimate of what you’ll earn
Attack surface
3 in-scope
api.sorare.comurl· criticalsorare.comurl· criticalws.sorare.comurl· criticalnone listed
first indexed
90d ago · 3 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Sorare.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/sorare",
"name": "Sorare",
"handle": "sorare",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "This is Sorare's GraphQL Open API. More documentation about the API can be found on GitHub: https://github.com/sorare/api",
"max_severity": "critical",
"asset_identifier": "api.sorare.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This is Sorare's main application.",
"max_severity": "critical",
"asset_identifier": "sorare.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This is Sorare's WebSocket domain, providing GraphQL subscriptions capabilities as described in https://github.com/sorare/api#subscribing-to-graphql-events",
"max_severity": "critical",
"asset_identifier": "ws.sorare.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "high"
}
],
"out_of_scope": []
},
"website": "https://sorare.com",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 415,
"response_efficiency_percentage": 80,
"average_time_to_report_resolved": 433,
"average_time_to_first_program_response": 4
}