H1 HackerOne LIVE
Plaid
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://plaid.com
- managed triage
- yes
- response efficiency
- 87%
- first response
- 21h avg
- time to bounty
- 316h avg
12 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
cdn.plaid.com | domain | yes | critical | 2026-09-20 |
dashboard.plaid.com | domain | yes | critical | 2026-09-20 |
demo.plaid.com | domain | yes | medium | 2026-09-20 |
my.plaid.com | domain | yes | critical | 2026-09-20 |
plaid.com | domain | yes | medium | 2026-09-20 |
production.plaid.com | domain | yes | critical | 2026-09-20 |
secure.plaid.com | domain | yes | critical | 2026-09-20 |
https://github.com/plaid/plaid-link-android | source code | yes | critical | 2026-09-20 |
https://github.com/plaid/plaid-link-ios | source code | yes | critical | 2026-09-20 |
https://github.com/plaid/plaid-ruby | source code | yes | critical | 2026-09-20 |
https://github.com/plaid/react-native-plaid-link-sdk | source code | yes | critical | 2026-09-20 |
https://github.com/plaid/react-plaid-link | source code | yes | critical | 2026-09-20 |
1 out of scope — black ICE, don't touch
https://my.plaid.com/data-subject-request-formdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.