Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
8 in-scope
All domains not listed In-ScopeotherThird-party widgets on www.datadome.co and app.datadome.cootherfirst indexed
92d ago · 8 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for DataDome Bug Bounty.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "datadome-bug-bounty",
"name": "DataDome Bug Bounty",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "web-application",
"target": "https://app.datadome.co"
},
{
"type": "api",
"target": "https://api-app.datadome.co/"
},
{
"type": "api",
"target": "https://customer-api.datadome.co"
},
{
"type": "api",
"target": "https://api.datadome.co"
},
{
"type": "api",
"target": "https://api-js.datadome.co"
},
{
"type": "web-application",
"target": "https://*.captcha-delivery.com"
},
{
"type": "web-application",
"target": "https://auth.datadome.co"
},
{
"type": "web-application",
"target": "https://datadome.co"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All domains not listed In-Scope"
},
{
"type": "other",
"target": "Third-party widgets on www.datadome.co and app.datadome.co"
}
]
},
"disabled": false,
"max_bounty": 3000,
"min_bounty": 50
}