H1 HackerOne LIVE
Slack
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://slack.com
- managed triage
- no
- response efficiency
- 100%
- time to bounty
- 99h avg
19 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.slack.com | domain | yes | critical | 2026-09-20 |
app.slack.com | domain | yes | critical | 2026-09-20 |
edgeapi.slack.com | domain | yes | critical | 2026-09-20 |
slack-imgs.com | domain | yes | critical | 2026-09-20 |
slack-redir.net | domain | yes | critical | 2026-09-20 |
slack-status.com | domain | yes | critical | 2026-09-20 |
slack.com | domain | yes | critical | 2026-09-20 |
slackatwork.com | domain | yes | critical | 2026-09-20 |
slackb.com | domain | yes | critical | 2026-09-20 |
spaces.pm | domain | yes | critical | 2026-09-20 |
www.quip.com | domain | yes | critical | 2026-09-20 |
https://salesforce.quip.com/blog/desktop | executable | yes | critical | 2026-09-20 |
com.Slack | mobile | yes | critical | 2026-09-20 |
com.slack.slackmdm | mobile | yes | critical | 2026-09-20 |
com.tinyspeck.chatlyio | mobile | yes | critical | 2026-09-20 |
https://apps.apple.com/us/app/quip-docs-chat-sheets/id647922896 | mobile | yes | critical | 2026-09-20 |
Slack Desktop Application | other | yes | critical | 2026-09-20 |
https://github.com/slackhq/nebula | source code | yes | critical | 2026-09-20 |
*.quip.com | wildcard | yes | critical | 2026-09-20 |
6 out of scope — black ICE, don't touch
slackhq.comdomainstatus.slack.comdomaincom.Slack.intunemobilecom.slack.slackintunemobile3rd Party Quip Appsother*.glitchthegame.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.