H1 HackerOne LIVE
Anthropic
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://www.anthropic.com
- managed triage
- no
- response efficiency
- 96%
- first response
- 13h avg
- time to bounty
- 130h avg
14 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
API & SDKs | ai/ml | yes | critical | 2026-09-20 |
anthropic.atlassian.com | domain | yes | critical | 2026-09-20 |
api.anthropic.com | domain | yes | critical | 2026-09-20 |
claude.ai | domain | yes | critical | 2026-09-20 |
console.anthropic.com | domain | yes | critical | 2026-09-20 |
docs.anthropic.com | domain | yes | critical | 2026-09-20 |
support.anthropic.com | domain | yes | critical | 2026-09-20 |
Claude Code | other | yes | critical | 2026-09-20 |
Claude Desktop Extensions and Claude.ai MCP servers | other | yes | critical | 2026-09-20 |
Claude in Chrome | other | yes | critical | 2026-09-20 |
Infrastructure & Internal Apps/Services | other | yes | critical | 2026-09-20 |
Leaked Employee API Keys | other | yes | critical | 2026-09-20 |
Official Clients | other | yes | critical | 2026-09-20 |
github.com/anthropics | source code | yes | critical | 2026-09-20 |
1 out of scope — black ICE, don't touch
https://github.com/modelcontextprotocolsource code
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.