Does QinetiQ Response have a bug bounty program?

QinetiQ Response runs a public vulnerability disclosure program (VDP) on HackerOne. It accepts good-faith security reports but does not offer cash rewards. It lists 30 in-scope assets.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/HackerOne/qinetiq

QinetiQ Response

HackerOne·updated 22h ago

vdpmanagedopen

Discord → RSS

payout: no bounty
scope: 30 in · 1 out
safe harbor: unknown
response: no reports

open program

hunt score

vdpfresh

formula →

payout

0/55

bounty

0/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

30 in-scope

15other
8wildcards
7urls

Scope

In scope

030

wildcards08

urls07

+airaffairs.com.au· critical
+offline.qinetiq.co.uk· critical
+qinetiq.com.au· critical
+www.naimuri.com· critical
+www.ncsiss.org.uk· critical
+www.qinetiq.com· critical
+www.t3e.uk· critical

other15

+128.98.0.0/16· critical
+148.252.225.26· critical
+185.76.92.0/24· critical
+185.76.95.0/24· critical
+192.102.214.0/24· critical
+192.150.204.0/24· critical
+194.61.176.0/20· critical
+209.91.67.138/31· critical
+209.91.67.140/31· critical
+209.91.67.142/32· critical
▸▾show 5 morehide 5 more
- +85.159.168.0/22· critical
- +85.159.172.0/24· critical
- +85.159.173.0/24· critical
- +85.159.174.0/23· critical
- +Security vulnerabilities found in …ies, are considered in scope.· critical

Out of scope

001

−accessibility.qinetiq.comurl

Change history

1 event

2026-08-06
first indexed
92d ago · 30 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for QinetiQ Response.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "id": 0,
  "url": "https://hackerone.com/qinetiq",
  "name": "QinetiQ Response",
  "handle": "qinetiq",
  "targets": {
    "in_scope": [
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.airaffairs.com.au",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.naimuri.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.qinetiq.ca",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.qinetiq.cloud",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.qinetiq.co.uk",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.qinetiq.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.qinetiq.com.au",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "*.us.qinetiq.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "128.98.0.0/16",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "IP_ADDRESS",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "148.252.225.26",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "185.76.92.0/24",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "185.76.95.0/24",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "192.102.214.0/24",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "192.150.204.0/24",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "194.61.176.0/20",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "209.91.67.138/31",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "209.91.67.140/31",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "209.91.67.142/32",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "85.159.168.0/22",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "85.159.172.0/24",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "85.159.173.0/24",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "CIDR",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "85.159.174.0/23",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": "While specific scope items are listed, they are not exhaustive. Any asset publicly recorded as belonging to QinetiQ or one of its subsidiaries through company reports or another reputable and verifiable source will be considered for submission.",
        "max_severity": "critical",
        "asset_identifier": "Security vulnerabilities found in any digital assets owned, operated, or controlled by QinetiQ, or by its publicly listed subsidiaries, are considered in scope.",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "airaffairs.com.au",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "offline.qinetiq.co.uk",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "qinetiq.com.au",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "www.naimuri.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "www.ncsiss.org.uk",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "www.qinetiq.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "www.t3e.uk",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ],
    "out_of_scope": [
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "accessibility.qinetiq.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ]
  },
  "website": "https://www.qinetiq.com",
  "offers_swag": false,
  "managed_program": true,
  "offers_bounties": false,
  "submission_state": "open",
  "allows_bounty_splitting": false,
  "average_time_to_bounty_awarded": null,
  "response_efficiency_percentage": 57,
  "average_time_to_report_resolved": 509,
  "average_time_to_first_program_response": 0
}