H1 HackerOne LIVE
REI BBP
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://rei.com
- managed triage
- yes
- response efficiency
- 98%
- first response
- 3h avg
- time to bounty
- 800h avg
6 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
http://collaboration.rei.com | domain | yes | critical | 2026-09-20 |
http://www.rei.com/learn/expert-advice | domain | yes | critical | 2026-09-20 |
login.rei.com | domain | yes | critical | 2026-09-20 |
rei.com | domain | yes | critical | 2026-09-20 |
Android & iOS App for REI Customers | other | yes | critical | 2026-09-20 |
Any public cloud resource or infrastructure operated and managed by REI. | other | yes | critical | 2026-09-20 |
19 out of scope — black ICE, don't touch
desktop.rei.comdomaindestinations.rei.comdomainengineering.rei.comdomainforyourbenefit-rei.com/domaingreenvestrentals.rei.comdomainhttp://rei.com/blogdomainhttp://rei.com/listsdomainhttp://rei.com/rei-garagedomainhttp://rei.com/rentalsdomainhttp://rei.com/useddomainpartners2.rei.comdomainrei.gladly.comdomainrei.jobsdomainreicasting.comdomainreifund.orgdomaintest-login.rei.comdomainvpn.rei.comdomainwpvip.rei.comdomain*.rentals.rei.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.