H1 HackerOne LIVE
KOHO
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://koho.ca
- managed triage
- no
- response efficiency
- 99%
- first response
- 0h avg
- time to bounty
- 49h avg
11 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
app.koho.ca | domain | yes | critical | 2026-09-20 |
assets.koho.ca | domain | yes | low | 2026-09-20 |
clicks.koho.ca | domain | yes | low | 2026-09-20 |
http://api.koho.ca/1.0 | domain | yes | critical | 2026-09-20 |
http://api.koho.ca/partner | domain | yes | critical | 2026-09-20 |
login.koho.ca | domain | yes | critical | 2026-09-20 |
usercontent.koho.ca | domain | yes | medium | 2026-09-20 |
web.koho.ca | domain | yes | critical | 2026-09-20 |
www.koho.ca | domain | yes | medium | 2026-09-20 |
1091010942 | mobile | yes | critical | 2026-09-20 |
ca.koho | mobile | yes | critical | 2026-09-20 |
2 out of scope — black ICE, don't touch
*.koho.ca/cdn-cgiwildcard*.line-of-credit.koho.cawildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.