H1 HackerOne LIVE
GitHub
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://bounty.github.com
- managed triage
- no
- response efficiency
- 35%
- first response
- 163h avg
- time to bounty
- 1512h avg
27 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.github.com | domain | yes | critical | 2026-09-20 |
classroom.github.com | domain | yes | critical | 2026-09-20 |
education.github.com | domain | yes | critical | 2026-09-20 |
gist.github.com | domain | yes | critical | 2026-09-20 |
github.com | domain | yes | critical | 2026-09-20 |
npmjs.com | domain | yes | critical | 2026-09-20 |
npmjs.org | domain | yes | critical | 2026-09-20 |
GitHub CLI | executable | yes | high | 2026-09-20 |
GitHub Desktop | executable | yes | critical | 2026-09-20 |
npm CLI | executable | yes | high | 2026-09-20 |
GitHub Enterprise Server | hardware | yes | critical | 2026-09-20 |
Copilot | other | yes | critical | 2026-09-20 |
Copilot Chat on dotcom | other | yes | high | 2026-09-20 |
Copilot Coding Agent | other | yes | critical | 2026-09-20 |
Copilot Spaces | other | yes | critical | 2026-09-20 |
Copilot for Business | other | yes | critical | 2026-09-20 |
Dependabot | other | yes | critical | 2026-09-20 |
GitHub CSP | other | yes | high | 2026-09-20 |
GitHub Enterprise Cloud | other | yes | critical | 2026-09-20 |
GitHub Enterprise Cloud with Data Residency (GHEC-DR) | other | yes | critical | 2026-09-20 |
GitHub Pages | other | yes | critical | 2026-09-20 |
GitHub Production Credentials | other | yes | critical | 2026-09-20 |
GitHub Spark | other | yes | critical | 2026-09-20 |
GitHub for mobile | other | yes | critical | 2026-09-20 |
*.github.net | wildcard | yes | critical | 2026-09-20 |
*.githubapp.com | wildcard | yes | critical | 2026-09-20 |
*.githubusercontent.com | wildcard | yes | critical | 2026-09-20 |
12 out of scope — black ICE, don't touch
blog.github.comdomaincommunity.github.comdomainenterprise.github.comdomaingit.iodomaingithub.blogdomainhttp://education.github.com/forumdomainshop.github.comdomainspectrum.chatdomainAtomexecutableElectronexecutableGitHub Classroom Assistantexecutable*.github.iowildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.