bounty.index
/to search
Live data paused. Neon is grumpy. Programs still load from the upstream mirror; watchlists and alerts are taking a nap.
Featured on
Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates
programs/HackerOne/slack
Slack

HackerOne·19 in-scope · 6 out·updated 13m ago·RSS
Discord →open program
bountyopen
first response
—
no reports yet
scope
6 out
asset mix
url
11 url · 3 other · 3 ios
last change
—
no history yet
In scope

019
wildcards01
+*.quip.com· critical
urls11
+api.slack.com· critical
Recent changes

— no diffs detected in snapshot history yet —
Community reports

0 reports
No reports yet — be the first to share your triage timing for Slack.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
Your notes

▸ raw source payload
{
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 99,
  "average_time_to_first_program_response": null,
  "average_time_to_report_resolved": null,
  "handle": "slack",
  "id": 0,
  "managed_program": false,
  "name": "Slack",
  "offers_bounties": true,
  "offers_swag": false,
  "response_efficiency_percentage": 100,
  "submission_state": "open",
  "url": "https://hackerone.com/slack",
  "website": "https://slack.com",
  "targets": {
    "in_scope": [
      {
        "asset_identifier": "*.quip.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Only accepting Critical reports as of 2023-12-01",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Slack Desktop Application",
        "asset_type": "OTHER",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "api.slack.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "The Slack API",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "app.slack.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.Slack",
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.slack.slackmdm",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Reports are accepted for vulnerabilities specific to the [Slack EMM/MDM version of the app](https://apps.apple.com/us/app/slack-for-emm/id1254292716).\n\nEMM client vulnerabilities in the absence of a valid MDM configuration via a supported MDM provider, (such as MobileIron), on an EMM-enabled Slack team are excluded.",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.tinyspeck.chatlyio",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "The main Slack app is included: [Slack iOS App](https://apps.apple.com/us/app/slack/id618783545)\n\nOther versions of the app, such as the EMM and Intune versions, are not included.",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "edgeapi.slack.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "https://apps.apple.com/us/app/quip-docs-chat-sheets/id647922896",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Only accepting Critical reports as of 2023-12-01",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "https://github.com/slackhq/nebula",
        "asset_type": "SOURCE_CODE",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Accepting Critical severity ONLY as of 2026-05-27. Refer to Out of Scope section for detailed guidance",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "https://salesforce.quip.com/blog/desktop",
        "asset_type": "DOWNLOADABLE_EXECUTABLES",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "slack-imgs.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "slack-redir.net",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "slack-status.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "slack.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "The slack.com site and application.",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "slackatwork.com",
        "asset_type": "URL",
        "availability_requirement": "low",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "slackb.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "spaces.pm",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "www.quip.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Only accepting Critical reports as of 2023-12-01",
        "integrity_requirement": null,
        "max_severity": "critical"
      }
    ],
    "out_of_scope": [
      {
        "asset_identifier": "*.glitchthegame.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "This domain was part of a prior company. ",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "3rd Party Quip Apps",
        "asset_type": "OTHER",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "3rd Party Quip App are not eligible for bug bounty program.",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "com.Slack.intune",
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "com.slack.slackintune",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "slackhq.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "Includes any subdomains (e.g.*.slackhq.com)",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "status.slack.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "The Slack status site",
        "integrity_requirement": null,
        "max_severity": "none"
      }
    ]
  }
}