Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
21 in-scope
*.steamstatic.comscope· criticalapi.steampowered.com· criticaldeveloper.valvesoftware.com· lowhelp.steampowered.com· criticalpartner.steamgames.com· criticalpartner.steampowered.com· criticalplayartifact.com· criticalsteamcommunity.com· criticalstore.steampowered.com· criticalstorefront.steampowered.com· criticalsupport.steampowered.com· criticalwiki.teamfortress.com· criticalwww.counter-strike.net· criticalwww.dota2.com· criticalwww.teamfortress.com· criticalwww.valvesoftware.com· criticalcom.valvesoftware.Steam· criticalgithub.com/valvesoftware· criticalSteam Client· criticalSteam Servers· criticalcom.valvesoftware.Steam· criticallist.valvesoftware.comurltranslation.steampowered.comurlvalvestore.forfansbyfans.com,store.valvesoftware.comurlwww.steamgames.comurlwww.steampowered.comurlfirst indexed
92d ago · 21 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Valve.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/valve",
"name": "Valve",
"handle": "valve",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.steamstatic.com",
"eligible_for_bounty": true,
"integrity_requirement": "none",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "high"
},
{
"asset_type": "OTHER",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "Steam Client",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "Steam Servers",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "api.steampowered.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.valvesoftware.Steam",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.valvesoftware.Steam",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "low",
"asset_identifier": "developer.valvesoftware.com",
"eligible_for_bounty": true,
"integrity_requirement": "none",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "help.steampowered.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "SOURCE_CODE",
"instruction": "We are happy to receive reports on code assets, but to be eligible for bounty they must be accompanied by a working POC against a shipping product.",
"max_severity": "critical",
"asset_identifier": "https://github.com/valvesoftware",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "partner.steamgames.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "partner.steampowered.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "playartifact.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "steamcommunity.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "store.steampowered.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This site is out of scope pending engineering cleanup. We are only interested in reports on this domain with a CVSS score above 8 at this time.",
"max_severity": "critical",
"asset_identifier": "storefront.steampowered.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "support.steampowered.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "This asset is a community run site, not part of Valve or its infrastructure. Reports about issues for this domain are appreciated and will be passed along to the volunteers that run the site.",
"max_severity": "critical",
"asset_identifier": "wiki.teamfortress.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.counter-strike.net",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.dota2.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.teamfortress.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.valvesoftware.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "URL",
"instruction": "This site is run by a 3rd party.",
"max_severity": "none",
"asset_identifier": "list.valvesoftware.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "translation.steampowered.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "This site is run by a 3rd party.",
"max_severity": "none",
"asset_identifier": "valvestore.forfansbyfans.com,store.valvesoftware.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Pending cleanup from engineering.",
"max_severity": "none",
"asset_identifier": "www.steamgames.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "This subdomain is out of scope pending code cleanup",
"max_severity": "none",
"asset_identifier": "www.steampowered.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://www.valvesoftware.com",
"offers_swag": true,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 632,
"response_efficiency_percentage": 70,
"average_time_to_report_resolved": 14630,
"average_time_to_first_program_response": 1
}