H1 HackerOne LIVE
1Password - Enterprise Password Manager
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://1password.com
- managed triage
- no
- response efficiency
- 93%
- time to bounty
- 212h avg
4 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://events.1password.com/api/ | api | yes | critical | 2026-09-20 |
http://--your-own-1password-account--.1password.com | domain | yes | critical | 2026-09-20 |
<Your own 1Password account> —> Latest stable, beta, or nightly Browser Extension (Chrome, Brave, Firefox, Edge, and Safari) | other | yes | critical | 2026-09-20 |
<Your own 1Password account> —> Latest stable, beta, or nightly Command Line Interface (CLI) | other | yes | critical | 2026-09-20 |
4 out of scope — black ICE, don't touch
https://support.1password.comdomainhttps://www.1password.com/domainAll other domains, subdomains, and 1Password Accounts that are not owned by you, including accounts where you are a user but not the owner, are out of scope.other*.agilebits.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.