bounty.index
/to search
Live data paused. Neon is grumpy. Programs still load from the upstream mirror; watchlists and alerts are taking a nap.
Featured on
Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates
programs/HackerOne/valve
Valve

HackerOne·21 in-scope · 5 out·updated 47m ago·RSS
Discord →open program
bountyswagmanagedopen
first response
—
no reports yet
scope
5 out
asset mix
url
15 url · 3 other · 1 wildcard
last change
—
no history yet
In scope

021
wildcards01
+*.steamstatic.com· critical
urls15
+api.steampowered.com
Recent changes

— no diffs detected in snapshot history yet —
Community reports

0 reports
No reports yet — be the first to share your triage timing for Valve.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
Your notes

▸ raw source payload
{
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 178,
  "average_time_to_first_program_response": 2,
  "average_time_to_report_resolved": 16867,
  "handle": "valve",
  "id": 0,
  "managed_program": true,
  "name": "Valve",
  "offers_bounties": true,
  "offers_swag": true,
  "response_efficiency_percentage": 74,
  "submission_state": "open",
  "url": "https://hackerone.com/valve",
  "website": "https://www.valvesoftware.com",
  "targets": {
    "in_scope": [
      {
        "asset_identifier": "*.steamstatic.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "none",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": "none",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Steam Client",
        "asset_type": "OTHER",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Steam Servers",
        "asset_type": "OTHER",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "api.steampowered.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.valvesoftware.Steam",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.valvesoftware.Steam",
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "developer.valvesoftware.com",
        "asset_type": "URL",
        "availability_requirement": "none",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "none",
        "max_severity": "low"
      },
      {
        "asset_identifier": "help.steampowered.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "https://github.com/valvesoftware",
        "asset_type": "SOURCE_CODE",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "We are happy to receive reports on code assets, but to be eligible for bounty they must be accompanied by a working POC against a shipping product.",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "partner.steamgames.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "partner.steampowered.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "playartifact.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "steamcommunity.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "store.steampowered.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "storefront.steampowered.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "This site is out of scope pending engineering cleanup. We are only interested in reports on this domain with a CVSS score above 8 at this time.",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "support.steampowered.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "wiki.teamfortress.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "This asset is a community run site, not part of Valve or its infrastructure. Reports about issues for this domain are appreciated and will be passed along to the volunteers that run the site.",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "www.counter-strike.net",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "www.dota2.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "www.teamfortress.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "www.valvesoftware.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      }
    ],
    "out_of_scope": [
      {
        "asset_identifier": "list.valvesoftware.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "This site is run by a 3rd party.",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "translation.steampowered.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "valvestore.forfansbyfans.com,store.valvesoftware.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "This site is run by a 3rd party.",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "www.steamgames.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "Pending cleanup from engineering.",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "www.steampowered.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "This subdomain is out of scope pending code cleanup",
        "integrity_requirement": null,
        "max_severity": "none"
      }
    ]
  }
}