Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
26 in-scope
*.dropbox.comscope· Tier 3*.dropboxer.netscope· Tier 3*.dropboxforum.comscope· Tier 3*.dropboxpartners.comscope· Tier 3*.hellofax.comscope· Tier 3*.docsend.comscope· Tier 3*.reclaim.aiscope· Tier 3*.helloworks.comscope· Tier 3*.hellosign.comscope· Tier 3*.dash.aiscope· Tier 3Dropbox.com· Tier 1sign.dropbox.com· Tier 1HelloSign.com· Tier 1dash.ai· Tier 1api.dropbox.com· Tier 1HelloFax.com· Tier 2docsend.com· Tier 2app.Reclaim.ai· Tier 2dropbox.com/paper· Tier 2com.dropbox.dash· Tier 2com.dropbox.android· Tier 2327630330· Tier 26450553960· Tier 21080074001· Tier 2dash.dropbox.com· Tier 1Dropbox Desktop Application· Tier 21126623662BoxcryptorFormswiftDropbox PasswordsDropbox Capture Windows Desktop AppDropbox Capture macOS Desktop Appfirst indexed
92d ago · 26 in-scope assets
No reports yet. Be the first to share your triage timing for Dropbox Bug Bounty.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "e540980d-b56e-4956-afff-f914653a4f6e",
"url": "https://www.intigriti.com/programs/dropbox/dropbox/detail",
"name": "Dropbox Bug Bounty",
"handle": "dropbox",
"status": "open",
"targets": {
"in_scope": [
{
"type": "url",
"impact": "Tier 1",
"endpoint": "Dropbox.com",
"description": "Dropbox Core Web Application"
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "sign.dropbox.com",
"description": "Sign by Dropbox (formerly HelloSign)"
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "HelloSign.com",
"description": "HelloSign (now Dropbox Sign)"
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "dash.ai",
"description": "Web Browser Extension"
},
{
"type": "other",
"impact": "Tier 1",
"endpoint": "dash.dropbox.com",
"description": "Dash by Dropbox MacOS and PC"
},
{
"type": "url",
"impact": "Tier 1",
"endpoint": "api.dropbox.com",
"description": "Dropbox Public API"
},
{
"type": "other",
"impact": "Tier 2",
"endpoint": "Dropbox Desktop Application",
"description": "Dropbox for MacOS and PC"
},
{
"type": "ios",
"impact": "Tier 2",
"endpoint": "327630330",
"description": "Dropbox iOS Application"
},
{
"type": "ios",
"impact": "Tier 2",
"endpoint": "6450553960",
"description": "Dash by Dropbox iOS Application"
},
{
"type": "ios",
"impact": "Tier 2",
"endpoint": "1080074001",
"description": "Dropbox EMM iOS Application"
},
{
"type": "android",
"impact": "Tier 2",
"endpoint": "com.dropbox.dash",
"description": "Dash by Dropbox Android Application"
},
{
"type": "android",
"impact": "Tier 2",
"endpoint": "com.dropbox.android",
"description": "Dropbox Android Application"
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "HelloFax.com",
"description": "HelloFax Web Application"
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "docsend.com",
"description": "Docsend Web Application"
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "app.Reclaim.ai",
"description": "Reclaim.ai Web Application"
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "dropbox.com/paper",
"description": "Paper by Dropbox Application"
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.dropbox.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.dropboxer.net",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.dropboxforum.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.dropboxpartners.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.hellofax.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.docsend.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.reclaim.ai",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.helloworks.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.hellosign.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.dash.ai",
"description": null
}
],
"out_of_scope": [
{
"type": "url",
"impact": "Out of scope",
"endpoint": "community.dropbox.com",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "replay.dropbox.com",
"description": "Dropbox Replay is undergoing a planned deprecation and replacement. The current Replay application and its associated APIs are out of scope until the new version is released."
},
{
"type": "other",
"impact": "Out of scope",
"endpoint": "Boxcryptor",
"description": "Including: \n\n*.boxcryptor.com"
},
{
"type": "other",
"impact": "Out of scope",
"endpoint": "Formswift",
"description": "Including:\n\n*.formswift.com"
},
{
"type": "other",
"impact": "Out of scope",
"endpoint": "Dropbox Passwords",
"description": "Including:\n\niOS and Android Applications"
},
{
"type": "other",
"impact": "Out of scope",
"endpoint": "Dropbox Capture Windows Desktop App",
"description": null
},
{
"type": "other",
"impact": "Out of scope",
"endpoint": "Dropbox Capture macOS Desktop App",
"description": null
},
{
"type": "android",
"impact": "Out of scope",
"endpoint": "com.dropbox.paper",
"description": "Paper by Dropbox Android Application"
},
{
"type": "ios",
"impact": "Out of scope",
"endpoint": "1126623662",
"description": "Paper by Dropbox iOS Application"
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "community-stage.dropbox.com",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "community-dev.dropbox.com",
"description": null
}
]
},
"max_bounty": {
"value": 15000,
"currency": "USD"
},
"min_bounty": {
"value": 100,
"currency": "USD"
},
"tacRequired": false,
"company_handle": "dropbox",
"twoFactorRequired": false,
"confidentiality_level": "public"
}