H1 HackerOne LIVE
23andMe Bug Bounty
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://23andme.org
- managed triage
- yes
- response efficiency
- 95%
- first response
- 11h avg
- time to bounty
- 42h avg
18 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
23andme.org/ancestry/last-names | domain | yes | critical | 2026-09-20 |
23andme.org/blog | domain | yes | critical | 2026-09-20 |
23andme.org/clinicians | domain | yes | critical | 2026-09-20 |
23andme.org/education | domain | yes | critical | 2026-09-20 |
23andme.org/media-center | domain | yes | critical | 2026-09-20 |
23andme.org/research | domain | yes | medium | 2026-09-20 |
23andmeresearchinstitute.org | domain | yes | critical | 2026-09-20 |
api.23andme.com | domain | yes | critical | 2026-09-20 |
auth.23andme.com | domain | yes | critical | 2026-09-20 |
fulfillment.23andme.com | domain | yes | critical | 2026-09-20 |
merch.23andme.com | domain | yes | critical | 2026-09-20 |
portal.23andme.com | domain | yes | critical | 2026-09-20 |
refer.23andme.com | domain | yes | critical | 2026-09-20 |
store.23andme.org | domain | yes | critical | 2026-09-20 |
style.23andme.org | domain | yes | critical | 2026-09-20 |
trust.23andme.com | domain | yes | critical | 2026-09-20 |
www.23andme.org | domain | yes | critical | 2026-09-20 |
you.23andme.com | domain | yes | critical | 2026-09-20 |
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.