Featured on
Featured on
Any public (Internet-facing) infra…ned and operated by Palantir.other· criticalAny public cloud (e.g. Amazon AWS,…ated and managed by Palantir.other· critical— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Palantir Public.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 494,
"average_time_to_first_program_response": 238,
"average_time_to_report_resolved": 680,
"handle": "palantir_public",
"id": 0,
"managed_program": false,
"name": "Palantir Public",
"offers_bounties": true,
"offers_swag": true,
"response_efficiency_percentage": 60,
"submission_state": "open",
"url": "https://hackerone.com/palantir_public",
"website": "https://palantir.com",
"targets": {
"in_scope": [
{
"asset_identifier": "Any public (Internet-facing) infrastructure owned and operated by Palantir.",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This is an expansive scope to help you identify security issues in any Internet-facing infrastructure we run. \n\nAll domains and subdomains owned and operated by Palantir are included within the scope. These may include, but are not limited to: \n* palantir.com\n* palantir.tech\n* palantir.build\n* palantircloud.com\n* palantircloud.co.uk\n* palantirfoundry.com\n* palantirfoundry.co.uk\n* palantirfoundry.de\n* palantirfoundry.fr\n* palantirfoundry.com.au \n* palantirgov.com\n* foundrygov.com\n\nAll assets and services on these, and other Palantir-owned domains (unless otherwise noted as out-of-scope) may be eligible for awards. This may include cloud resources, firewalls, network devices, servers, and other assets or applications.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "Any public cloud (e.g. Amazon AWS, Microsoft Azure) resource or infrastructure operated and managed by Palantir.",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "- Public cloud storage accounts. (e.g. AWS S3 buckets, Azure data blobs)\n- Public cloud compute servers. (e.g. AWS EC2 instances, Azure Virtual Machines)",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "Any infrastructure or assets related to Silk, FancyThat, or other Palantir acquisitions.",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "blog.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "certification.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "community.palantir.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "explore.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "gear.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "go.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "info.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "investors.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "learn.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "3rd-party certification website/service.\n",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "palantirfedstart.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Any domain related to FedStart or Palantir FedStart. ",
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "palantirpacusa.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Any domain related to the Palantir PAC. ",
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "sandbox.training.palantir.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "store.palantir.com",
"asset_type": "URL",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "training.palantir.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}Any infrastructure or assets relat… other Palantir acquisitions.