H1 HackerOne LIVE
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.reddit.com
- managed triage
- yes
- response efficiency
- 90%
- first response
- 1h avg
- time to bounty
- 85h avg
27 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
accounts.reddit.com | domain | yes | critical | 2026-09-20 |
ads.reddit.com | domain | yes | critical | 2026-09-20 |
amp.reddit.com | domain | yes | critical | 2026-09-20 |
api.reddit.com | domain | yes | critical | 2026-09-20 |
business.reddithelp.com | domain | yes | critical | 2026-09-20 |
developers.reddit.com | domain | yes | critical | 2026-09-20 |
gateway.reddit.com | domain | yes | critical | 2026-09-20 |
gql.reddit.com | domain | yes | critical | 2026-09-20 |
m.reddit.com | domain | yes | critical | 2026-09-20 |
matrix.redditspace.com | domain | yes | critical | 2026-09-20 |
meta-api.reddit.com | domain | yes | high | 2026-09-20 |
mod.reddit.com | domain | yes | critical | 2026-09-20 |
new.reddit.com | domain | yes | critical | 2026-09-20 |
redditforbusiness.com | domain | yes | medium | 2026-09-20 |
sh.reddit.com | domain | yes | critical | 2026-09-20 |
strapi.reddit.com | domain | yes | critical | 2026-09-20 |
Android App | other | yes | high | 2026-09-20 |
Core Assets | other | yes | critical | 2026-09-20 |
Non-Core Assets | other | yes | critical | 2026-09-20 |
iOS App | other | yes | high | 2026-09-20 |
*.reddit.com | wildcard | yes | critical | 2026-09-20 |
*.redditblog.com | wildcard | yes | medium | 2026-09-20 |
*.reddithelp.com | wildcard | yes | medium | 2026-09-20 |
*.redditinc.com | wildcard | yes | medium | 2026-09-20 |
*.redditmedia.com | wildcard | yes | high | 2026-09-20 |
*.snooguts.net | wildcard | yes | critical | 2026-09-20 |
*.spiketrap.io | wildcard | yes | medium | 2026-09-20 |
2 out of scope — black ICE, don't touch
memorable.iodomainreddit.secure.force.comdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.