how we sort the index, not an estimate of what you’ll earn
Attack surface
1 in-scope
Tor Browserother· criticalnone listed
− removed 1 scope · Tor
64d ago
first indexed
92d ago · 2 in-scope assets
No reports yet. Be the first to share your triage timing for Tor.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/torproject",
"name": "Tor",
"handle": "torproject",
"targets": {
"in_scope": [
{
"asset_type": "OTHER",
"instruction": "https://gitlab.torproject.org/tpo/applications/tor-browser\n\nIt's a good start to look at the latest stable, alpha, and nightly builds. The former can be found at https://www.torproject.org/download/ and nightlies can be obtained via http://umj4zbqdfcyevlkgqgpq6foxk3z75zzxsbgt5jqmfxofrbrjh3crbnad.onion/nightly-builds/tor-browser-builds/.",
"max_severity": "critical",
"asset_identifier": "Tor Browser",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": []
},
"website": "https://www.torproject.org/",
"offers_swag": true,
"managed_program": false,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 825,
"response_efficiency_percentage": 24,
"average_time_to_report_resolved": 808,
"average_time_to_first_program_response": 252
}