H1 HackerOne LIVE
Klarna
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://klarna.com
- managed triage
- yes
- response efficiency
- 76%
- first response
- 7h avg
- time to bounty
- 81h avg
8 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
app.klarna.com | api | yes | critical | 2026-09-20 |
Klarna Android App (com.myklarnamobile) | mobile | yes | critical | 2026-09-20 |
Klarna iOS App (com.klarna.app) | mobile | yes | critical | 2026-09-20 |
Merchant Portal | other | yes | critical | 2026-09-20 |
*.klarna.com | wildcard | yes | critical | 2026-09-20 |
*.klarna.net | wildcard | yes | critical | 2026-09-20 |
*.klarnacdn.net | wildcard | yes | critical | 2026-09-20 |
*.pricerunner.com | wildcard | yes | critical | 2026-09-20 |
8 out of scope — black ICE, don't touch
https://api-stage.pricerunner.com/swagger-ui.htmldomainhttps://api-us.pricerunner.com/swagger-ui.htmldomainhttps://api.pricerunner.com/swagger-ui.htmldomainhttps://app.klarna.com/us/api/connected_card_bff/domainjobs.pricerunner.comdomainlocker.klarna.comdomainnuji.comdomainKustomother
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.