H1 HackerOne LIVE
Airtable
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://staging.airtable.com/
- managed triage
- yes
- response efficiency
- 74%
- time to bounty
- 160h avg
7 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api-staging.airtable.com | domain | yes | critical | 2026-09-20 |
mcp.staging.airtable.com | domain | yes | critical | 2026-09-20 |
staging.airtable.com | domain | yes | critical | 2026-09-20 |
airtable.js SDK (https://www.npmjs.com/package/airtable) | source code | yes | critical | 2026-09-20 |
https://www.npmjs.com/package/@airtable/mcp-cli | source code | yes | critical | 2026-09-20 |
*.staging-airtableblocks.com | wildcard | yes | critical | 2026-09-20 |
*.staging.airtable.com | wildcard | yes | critical | 2026-09-20 |
11 out of scope — black ICE, don't touch
airtable.comdomainblog.airtable.comdomaincommunity.airtable.comdomaindl.airtable.comdomaindl.getforma.comdomainguide.airtable.comdomainsupport.airtable.comdomaincom.FormaGrid.Hyperbasemobilecom.formagrid.airtablemobileAirtable Windows appotherAirtable macOS appother
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.