H1 HackerOne LIVE
Automattic
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://automattic.com
- managed triage
- no
- response efficiency
- 54%
- time to bounty
- 838h avg
31 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
akismet.com | domain | yes | critical | 2026-09-20 |
api.tumblr.com | domain | yes | critical | 2026-09-20 |
assets.tumblr.com | domain | yes | critical | 2026-09-20 |
clay.earth | domain | yes | high | 2026-09-20 |
embed.tumblr.com | domain | yes | critical | 2026-09-20 |
gravatar.com | domain | yes | high | 2026-09-20 |
intensedebate.com | domain | yes | medium | 2026-09-20 |
mailpoet.com | domain | yes | critical | 2026-09-20 |
my.pressable.com | domain | yes | critical | 2026-09-20 |
parse.ly | domain | yes | critical | 2026-09-20 |
safe.tumblr.com | domain | yes | critical | 2026-09-20 |
secure.tumblr.com | domain | yes | critical | 2026-09-20 |
simperium.com | domain | yes | high | 2026-09-20 |
simplenote.com | domain | yes | high | 2026-09-20 |
t.umblr.com | domain | yes | critical | 2026-09-20 |
wordpress.com | domain | yes | critical | 2026-09-20 |
wpscan.com | domain | yes | high | 2026-09-20 |
www.tumblr.com | domain | yes | critical | 2026-09-20 |
com.clay.ios | mobile | yes | high | 2026-09-20 |
com.tumblr | mobile | yes | high | 2026-09-20 |
com.tumblr.tumblr | mobile | yes | high | 2026-09-20 |
Beeper | other | yes | high | 2026-09-20 |
Crowdsignal | other | yes | critical | 2026-09-20 |
Texts | other | yes | high | 2026-09-20 |
WP Cloud | other | yes | critical | 2026-09-20 |
WooCommerce | other | yes | critical | 2026-09-20 |
WordPress Plugins & Themes | other | yes | critical | 2026-09-20 |
WordPress VIP | other | yes | critical | 2026-09-20 |
Jetpack | source code | yes | critical | 2026-09-20 |
*.srvcs.tumblr.com | wildcard | yes | critical | 2026-09-20 |
*.tumblr.com | wildcard | yes | critical | 2026-09-20 |
12 out of scope — black ICE, don't touch
atavist.comdomainhappy.toolsdomaintry.pressable.comdomain*/xmlrpc.phpother*.crowdsignal.netwildcard*.poll.fmwildcard*.survey.fmwildcard*.txmblr.comwildcardafterthedeadline.com,*.afterthedeadline.comwildcardlearnboost.com,*.learnboost.comwildcardpolishmywriting.com,*.polishmywriting.comwildcardscrollkit.com,*.scrollkit.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.