H1 HackerOne LIVE
PortSwigger Web Security
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://portswigger.net
- managed triage
- no
- response efficiency
- 99%
- first response
- 13h avg
- time to bounty
- 221h avg
11 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
ai.portswigger.net | domain | yes | critical | 2026-09-20 |
collections.portswigger.net | domain | yes | critical | 2026-09-20 |
http1mustdie.com | domain | yes | high | 2026-09-20 |
id.portswigger.net | domain | yes | critical | 2026-09-20 |
links.portswigger.net | domain | yes | critical | 2026-09-20 |
portswigger.net | domain | yes | critical | 2026-09-20 |
share.portswigger.net | domain | yes | critical | 2026-09-20 |
Burp Collaborator | executable | yes | critical | 2026-09-20 |
Burp Suite Extension (BApps) | executable | no | none | 2026-09-20 |
Burp Suite Pro/Community | executable | yes | high | 2026-09-20 |
Burp Suite DAST | other | yes | critical | 2026-09-20 |
2 out of scope — black ICE, don't touch
*.portswigger.netwildcard*.web-security-academy.netwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.