H1 HackerOne LIVE
Deriv.com
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.deriv.com
- managed triage
- no
- response efficiency
- 99%
- first response
- 1h avg
- time to bounty
- 95h avg
18 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.deriv.com | domain | yes | critical | 2026-09-20 |
app.deriv.com | domain | yes | critical | 2026-09-20 |
cashier.deriv.com | domain | yes | critical | 2026-09-20 |
core-api.deriv.com | domain | yes | critical | 2026-09-20 |
ct.deriv.com | domain | no | critical | 2026-09-20 |
deriv.partners | domain | no | none | 2026-09-20 |
derivws.com | domain | yes | critical | 2026-09-20 |
home.deriv.com | domain | yes | critical | 2026-09-20 |
https://api-core.deriv.com | domain | yes | critical | 2026-09-20 |
oauth.deriv.com | domain | yes | critical | 2026-09-20 |
partners.deriv.com | domain | no | none | 2026-09-20 |
secure-dfadmin.deriv.com | domain | yes | critical | 2026-09-20 |
smarttrader.deriv.com | domain | yes | critical | 2026-09-20 |
github.com/deriv-com | other | yes | critical | 2026-09-20 |
github.com/binary-com | source code | yes | medium | 2026-09-20 |
*.deriv.cloud | wildcard | yes | critical | 2026-09-20 |
*.deriv.com | wildcard | yes | critical | 2026-09-20 |
*.derivws.com | wildcard | yes | critical | 2026-09-20 |
7 out of scope — black ICE, don't touch
community.deriv.comdomainderiv.aedomainderiv.slack.comdomainhttps://deriv.atlassian.net/servicedesk/customer/user/signupdomaintrade.mql5.comdomaintradingview.deriv.comdomainAny 3rd party managed domainother
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.