H1 HackerOne LIVE
Semrush
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.semrush.com/
- managed triage
- no
- response efficiency
- 99%
- first response
- 8h avg
- time to bounty
- 167h avg
14 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
investors.semrush.com | domain | no | medium | 2026-09-20 |
workflows.semrush.com | domain | no | medium | 2026-09-20 |
www.semrush.com | domain | yes | critical | 2026-09-20 |
Leaked/Сompromised Employee accounts | other | yes | medium | 2026-09-20 |
Other Semrush Related Asset | other | yes | critical | 2026-09-20 |
*.berush.com | wildcard | no | high | 2026-09-20 |
*.myinsights.io | wildcard | yes | high | 2026-09-20 |
*.prowly.com | wildcard | no | critical | 2026-09-20 |
*.scatec.io | wildcard | yes | high | 2026-09-20 |
*.sellzone.com | wildcard | yes | medium | 2026-09-20 |
*.semrush.com | wildcard | yes | critical | 2026-09-20 |
*.semrush.net | wildcard | yes | critical | 2026-09-20 |
*.seoab.io | wildcard | yes | high | 2026-09-20 |
*.seoquake.com | wildcard | yes | high | 2026-09-20 |
2 out of scope — black ICE, don't touch
advocates.semrush.comdomainemail.semrush.comdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.