H1 HackerOne LIVE
Notion Labs, Inc.
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://www.notion.so
- managed triage
- yes
- response efficiency
- 94%
- first response
- 8h avg
- time to bounty
- 669h avg
12 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
Notion AI | ai/ml | yes | critical | 2026-09-20 |
calendar.notion.so | domain | yes | critical | 2026-09-20 |
mail.notion.so | domain | yes | critical | 2026-09-20 |
Notion Desktop App | executable | yes | critical | 2026-09-20 |
notion.id | mobile | yes | critical | 2026-09-20 |
Github Repositories or other public artifacts owned by makenotion | other | yes | critical | 2026-09-20 |
Notion Authentication | other | yes | critical | 2026-09-20 |
Notion Frontend | other | yes | critical | 2026-09-20 |
Notion Integrations | other | yes | critical | 2026-09-20 |
Privilege Escalation | other | yes | critical | 2026-09-20 |
Product API | other | yes | critical | 2026-09-20 |
Public API | other | yes | critical | 2026-09-20 |
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.