— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Cognition.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"average_time_to_first_program_response": 3,
"average_time_to_report_resolved": null,
"handle": "cognition",
"id": 0,
"managed_program": true,
"name": "Cognition",
"offers_bounties": false,
"offers_swag": false,
"response_efficiency_percentage": 67,
"submission_state": "open",
"url": "https://hackerone.com/cognition",
"website": "https://cognition.ai",
"targets": {
"in_scope": [
{
"asset_identifier": "*.cognition.ai",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "*.cognition.com",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "*.devin.ai",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "*.windsurf.com",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "Devin CLI",
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "Devin Desktop",
"asset_type": "OTHER",
"availability_requirement": "medium",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "We are looking to identify bugs in the IDE which pertain to features which we have implemented. Underlying VSCode vulnerabilities will not be considered valid bugs unless they directly can be used to exploit a feature which we have implemented.",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "Windsurf Plugins",
"asset_type": "OTHER",
"availability_requirement": "medium",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "deepwiki.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "not_defined",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "high"
}
],
"out_of_scope": []
}
}Devin CLI· criticalDevin Desktop· criticalWindsurf Plugins· critical— none listed —