H1 HackerOne LIVE
Figma
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://figma.com
- managed triage
- yes
- response efficiency
- 79%
- first response
- 12h avg
- time to bounty
- 183h avg
8 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.figma.com | domain | yes | critical | 2026-09-20 |
www.figma.com | domain | yes | critical | 2026-09-20 |
Figma Atlassian App | other | yes | critical | 2026-09-20 |
Figma Desktop App | other | yes | critical | 2026-09-20 |
Figma Slack App | other | yes | critical | 2026-09-20 |
Figma Weave | other | yes | critical | 2026-09-20 |
Figma for Microsoft Teams | other | yes | critical | 2026-09-20 |
Figma iOS and Android apps | other | yes | critical | 2026-09-20 |
1 out of scope — black ICE, don't touch
www.designsystems.comdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.