H1 HackerOne LIVE
Matomo
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://matomo.org
- managed triage
- no
- response efficiency
- 100%
- first response
- 7h avg
- time to bounty
- 162h avg
11 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://github.com/matomo-org/docker | domain | yes | critical | 2026-09-20 |
matomo.cloud | domain | yes | critical | 2026-09-20 |
737216887 | mobile | no | medium | 2026-09-20 |
org.piwik.mobile2 | mobile | no | medium | 2026-09-20 |
https://github.com/innocraft/ | source code | yes | high | 2026-09-20 |
https://github.com/matomo-org | source code | yes | high | 2026-09-20 |
https://github.com/matomo-org/developer-documentation | source code | yes | low | 2026-09-20 |
https://github.com/matomo-org/matomo | source code | yes | critical | 2026-09-20 |
https://github.com/matomo-org/tracker-proxy | source code | yes | medium | 2026-09-20 |
https://plugins.matomo.org/developer/innocraft | source code | yes | critical | 2026-09-20 |
https://plugins.matomo.org/developer/matomo-org | source code | yes | critical | 2026-09-20 |
5 out of scope — black ICE, don't touch
api.matomo.orgdomainforum.matomo.orgdomainmatomo.orgdomainplugins.matomo.orgdomainshop.matomo.orgdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.