H1 HackerOne LIVE
KAYAK
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.kayak.com
- managed triage
- yes
- response efficiency
- 88%
- first response
- 0h avg
- time to bounty
- 287h avg
12 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
business.kayak.com | domain | yes | critical | 2026-09-20 |
kayak.ai | domain | yes | critical | 2026-09-20 |
www.cheapflights.com | domain | yes | critical | 2026-09-20 |
www.checkfelix.com | domain | yes | critical | 2026-09-20 |
www.hotelscombined.com | domain | yes | critical | 2026-09-20 |
www.kayak.com | domain | yes | critical | 2026-09-20 |
www.momondo.com | domain | yes | critical | 2026-09-20 |
www.mundi.com.br | domain | yes | critical | 2026-09-20 |
www.swoodoo.com | domain | yes | critical | 2026-09-20 |
com.kayak.android | mobile | yes | critical | 2026-09-20 |
com.kayak.travel | mobile | yes | critical | 2026-09-20 |
*.kayak.com | wildcard | yes | critical | 2026-09-20 |
7 out of scope — black ICE, don't touch
affiliates.kayak.comdomaincruises.kayak.comdomainklassereise.checkfelix.comdomainhttps://*.kayakairplanemode.comwildcardkayak.com/guides/*wildcardkayak.com/hotelowner/*wildcardkayak.com/moira/ehoe/*wildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.