H1 HackerOne LIVE
Kong
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://konghq.com
- managed triage
- yes
- response efficiency
- 84%
- first response
- 17h avg
- time to bounty
- 329h avg
14 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
developer.konghq.com | domain | yes | high | 2026-09-20 |
http://cloud.konghq.com | domain | yes | critical | 2026-09-20 |
https://app.insomnia.rest/ | domain | yes | critical | 2026-09-20 |
konghq.com | domain | yes | high | 2026-09-20 |
Insomnia CLI (inso) | executable | yes | critical | 2026-09-20 |
Insomnia Desktop Client | executable | yes | critical | 2026-09-20 |
Kong Gateway Enterprise | executable | yes | critical | 2026-09-20 |
Kong Gateway OSS | executable | no | medium | 2026-09-20 |
Kong Gateway Plugins (Kong-Supported Only) | executable | yes | critical | 2026-09-20 |
Kong Mesh | executable | yes | critical | 2026-09-20 |
GitHub Actions in our Public Repositories | other | yes | none | 2026-09-20 |
Subdomain Takeover - konghq.com | other | yes | high | 2026-09-20 |
https://*.api.konghq.com | wildcard | yes | critical | 2026-09-20 |
https://us.identity.konghq.com/* | wildcard | yes | critical | 2026-09-20 |
10 out of scope — black ICE, don't touch
https://docs.konghq.comdomainhttps://httpbin.konghq.com/domainhttps://insomnia.rest/domainhttps://kuma.io/domainNon-Kong PluginsexecutableKong Enterprise Gateway - Sandbox FunctionalityotherNon-Kong GitHub Repositoriesother*.*.edge.gateways.konghq.comwildcard*.gateways.konghq.comwildcardhttps://*.konghq.techwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.