H1 HackerOne LIVE
NBA Public Bug Bounty
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.nba.com
- managed triage
- yes
- response efficiency
- 89%
- first response
- 2h avg
- time to bounty
- 165h avg
428 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
cpskyhawks-qa.gleague.nba.com | domain | yes | critical | 2026-09-20 |
cpskyhawks.gleague.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-aws-qa.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-aws-uat-uw2.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-aws-uat.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-dev-aws.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-dev-preview.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-dev.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-devint.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-preview.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-qa-aws.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-qa-preview.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-qa.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-uat-preview.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-uat-uc-preview.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-uat-uc.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-uc-preview.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott-uc.nba.com | domain | yes | critical | 2026-09-20 |
cweb-ott.nba.com | domain | yes | critical | 2026-09-20 |
cweb-qa-aws-preview.nba.com | domain | yes | critical | 2026-09-20 |
cweb-slot1-ott-dev.nba.com | domain | yes | critical | 2026-09-20 |
cweb-slot2-ott-dev.nba.com | domain | yes | critical | 2026-09-20 |
cweb-slot3-ott-dev.nba.com | domain | yes | critical | 2026-09-20 |
cweb-slot4-ott-dev.nba.com | domain | yes | critical | 2026-09-20 |
cweb-slot5-ott-dev.nba.com | domain | yes | critical | 2026-09-20 |
cweb-slot6-ott-dev.nba.com | domain | yes | critical | 2026-09-20 |
cweb-slot6-preview-ott-dev.nba.com | domain | yes | critical | 2026-09-20 |
data-test.nba.com | domain | yes | critical | 2026-09-20 |
delaware-dev.gleague.nba.com | domain | yes | critical | 2026-09-20 |
delaware-qa.gleague.nba.com | domain | yes | critical | 2026-09-20 |
delaware.gleague.nba.com | domain | yes | critical | 2026-09-20 |
detroit-dev.gleague.nba.com | domain | yes | critical | 2026-09-20 |
detroit-qa.gleague.nba.com | domain | yes | critical | 2026-09-20 |
detroit.gleague.nba.com | domain | yes | critical | 2026-09-20 |
dev.courtside.nba.com | domain | yes | critical | 2026-09-20 |
dev.stats.gleague.nba.com | domain | yes | critical | 2026-09-20 |
dev.stats.nba.com | domain | yes | critical | 2026-09-20 |
dream-dev.wnba.com | domain | yes | critical | 2026-09-20 |
dream-qa.wnba.com | domain | yes | critical | 2026-09-20 |
dream-qa2.wnba.com | domain | yes | critical | 2026-09-20 |
dream.wnba.com | domain | yes | critical | 2026-09-20 |
dwhreports.nba.com | domain | yes | critical | 2026-09-20 |
ec2-redirect-west.nba.com | domain | yes | critical | 2026-09-20 |
ec2redirect-west.nba.com | domain | yes | critical | 2026-09-20 |
elm.nba.com | domain | yes | critical | 2026-09-20 |
erie-dev.gleague.nba.com | domain | yes | critical | 2026-09-20 |
erie-qa.gleague.nba.com | domain | yes | critical | 2026-09-20 |
erie.gleague.nba.com | domain | yes | critical | 2026-09-20 |
fever-dev.wnba.com | domain | yes | critical | 2026-09-20 |
fever-qa.wnba.com | domain | yes | critical | 2026-09-20 |
fever-qa2.wnba.com | domain | yes | critical | 2026-09-20 |
fever.wnba.com | domain | yes | critical | 2026-09-20 |
fire-dev.wnba.com | domain | yes | critical | 2026-09-20 |
fire-qa.wnba.com | domain | yes | critical | 2026-09-20 |
fire.wnba.com | domain | yes | critical | 2026-09-20 |
fit.nba.com | domain | yes | critical | 2026-09-20 |
fortwayne-dev.gleague.nba.com | domain | yes | critical | 2026-09-20 |
fortwayne-qa.gleague.nba.com | domain | yes | critical | 2026-09-20 |
fortwayne.gleague.nba.com | domain | yes | critical | 2026-09-20 |
gamenotes.nba.com | domain | yes | critical | 2026-09-20 |
gatoradetrainingcenter.nba.com | domain | yes | critical | 2026-09-20 |
gldatacenter.nba.com | domain | yes | critical | 2026-09-20 |
gleague-dev.nba.com | domain | yes | critical | 2026-09-20 |
gleague-qa.nba.com | domain | yes | critical | 2026-09-20 |
gleague.nba.com | domain | yes | critical | 2026-09-20 |
globalstores-dev.nba.com | domain | yes | critical | 2026-09-20 |
globalstores-qa.nba.com | domain | yes | critical | 2026-09-20 |
globalstores.nba.com | domain | yes | critical | 2026-09-20 |
gms-prev.nba.com | domain | yes | critical | 2026-09-20 |
gms.nba.com | domain | yes | critical | 2026-09-20 |
grae.nba.com | domain | yes | critical | 2026-09-20 |
grandrapids-dev.gleague.nba.com | domain | yes | critical | 2026-09-20 |
grandrapids-qa.gleague.nba.com | domain | yes | critical | 2026-09-20 |
grandrapids.gleague.nba.com | domain | yes | critical | 2026-09-20 |
green.nba.com | domain | yes | critical | 2026-09-20 |
greensboro-dev.gleague.nba.com | domain | yes | critical | 2026-09-20 |
greensboro-qa.gleague.nba.com | domain | yes | critical | 2026-09-20 |
greensboro.gleague.nba.com | domain | yes | critical | 2026-09-20 |
hoop.nba.com | domain | yes | critical | 2026-09-20 |
hoopsfortroops.nba.com | domain | yes | critical | 2026-09-20 |
huddle.nba.com | domain | yes | critical | 2026-09-20 |
id.nba.com | domain | yes | critical | 2026-09-20 |
identity-dev.nba.com | domain | yes | critical | 2026-09-20 |
identity-ng.nba.com | domain | yes | critical | 2026-09-20 |
identity-ping.nba.com | domain | yes | critical | 2026-09-20 |
identity-qa.nba.com | domain | yes | critical | 2026-09-20 |
identity-server-dev.nba.com | domain | yes | critical | 2026-09-20 |
identity-server-ping-dev.nba.com | domain | yes | critical | 2026-09-20 |
identity-server-ping-qa.nba.com | domain | yes | critical | 2026-09-20 |
identity-server-ping-uat.nba.com | domain | yes | critical | 2026-09-20 |
identity-server-ping.nba.com | domain | yes | critical | 2026-09-20 |
identity-server-qa.nba.com | domain | yes | critical | 2026-09-20 |
identity-server-uat.nba.com | domain | yes | critical | 2026-09-20 |
identity-server.nba.com | domain | yes | critical | 2026-09-20 |
identity-uat.nba.com | domain | yes | critical | 2026-09-20 |
identity.nba.com | domain | yes | critical | 2026-09-20 |
ignite-dev.gleague.nba.com | domain | yes | critical | 2026-09-20 |
ignite-qa.gleague.nba.com | domain | yes | critical | 2026-09-20 |
ignite.gleague.nba.com | domain | yes | critical | 2026-09-20 |
inclusion-dev.nba.com | domain | yes | critical | 2026-09-20 |
29 out of scope — black ICE, don't touch
2kleague-dev.nba.comdomain2kleague-qa.nba.comdomain2kleague.nba.comdomainak-static.cms-dev.nba.comdomainak-static.cms-qa.nba.comdomainak-static.cms.nba.comdomainarcade.nba.comdomainbrand.nba.comdomaincms-dev.nba.comdomaincms-int.nba.comdomaincms-qa.nba.comdomaincms.nba.comdomaincoalition.nba.comdomaindev.stats.2kleague.nba.comdomainevents.bal.nba.comdomainevergent.comdomaingames.nbaacademy.nba.comdomainjr.nba.comdomainleaguepass.wnba.comdomainlogin-sandbox.nba.comdomainmediacentral.nba.comdomainmindhealth.nba.comdomainnbafoundation-dev.nba.comdomainnbafoundation-qa.nba.comdomainnbafoundation.nba.comdomainpayment.nba.comdomainsmm.events.nba.comdomainstats.2kleague.nba.comdomaintotalhealth.nba.comdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.