Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
6 in-scope
Distributed attacks (scraping must…d from a single IP at a time)otherDenial of service attacks or any t…ass and will not be rewarded.otherSocial engineering of DataDome employees or contractorsotherClient-side web vulnerabilitiesotherfirst indexed
92d ago · 6 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for DataDome Bot Bounty.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "datadome-bot-bounty",
"name": "DataDome Bot Bounty",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "web-application",
"target": "https://bounty-nodejs.datashield.co"
},
{
"type": "web-application",
"target": "https://bounty-fastly.datashield.co"
},
{
"type": "web-application",
"target": "https://bounty-nginx.datashield.co"
},
{
"type": "web-application",
"target": "*.captcha-delivery.com"
},
{
"type": "web-application",
"target": "js.datadome.co"
},
{
"type": "api",
"target": "api-js.datadome.co"
}
],
"out_of_scope": [
{
"type": "other",
"target": "Distributed attacks (scraping must be performed from a single IP at a time)"
},
{
"type": "other",
"target": "Denial of service attacks or any technique whose goal is to degrade infrastructure availability. This falls outside the scope of bot protection bypass and will not be rewarded."
},
{
"type": "other",
"target": "Social engineering of DataDome employees or contractors"
},
{
"type": "other",
"target": "Client-side web vulnerabilities"
}
]
},
"disabled": false,
"max_bounty": 1000,
"min_bounty": 200
}