H1 HackerOne LIVE
Snapchat
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.snapchat.com/
- managed triage
- no
- response efficiency
- 93%
- first response
- 13h avg
- time to bounty
- 394h avg
39 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
accounts.snapchat.com | domain | yes | critical | 2026-09-20 |
ads.snapchat.com | domain | yes | high | 2026-09-20 |
app.snapchat.com | domain | yes | critical | 2026-09-20 |
blog.playcanvas.com | domain | yes | medium | 2026-09-20 |
business.snapchat.com | domain | yes | critical | 2026-09-20 |
businesshelp.snapchat.com | domain | yes | high | 2026-09-20 |
code.playcanvas.com | domain | yes | medium | 2026-09-20 |
create.snapchat.com | domain | yes | high | 2026-09-20 |
developer.playcanvas.com | domain | yes | medium | 2026-09-20 |
forum.playcanvas.com | domain | yes | medium | 2026-09-20 |
geofilters.snapchat.com | domain | yes | high | 2026-09-20 |
kit.snapchat.com | domain | yes | high | 2026-09-20 |
launch.playcanvas.com | domain | yes | medium | 2026-09-20 |
login.playcanvas.com | domain | yes | medium | 2026-09-20 |
map.snapchat.com | domain | yes | low | 2026-09-20 |
msg.playcanvas.com | domain | yes | medium | 2026-09-20 |
my.snapchat.com | domain | yes | high | 2026-09-20 |
playcanv.as | domain | yes | medium | 2026-09-20 |
playcanvas.com | domain | yes | medium | 2026-09-20 |
relay.playcanvas.com | domain | yes | medium | 2026-09-20 |
rt.playcanvas.com | domain | yes | medium | 2026-09-20 |
scan.snapchat.com | domain | yes | low | 2026-09-20 |
snappublisher.snapchat.com | domain | yes | high | 2026-09-20 |
spectacles.com | domain | yes | low | 2026-09-20 |
store.playcanvas.com | domain | yes | medium | 2026-09-20 |
store.snapchat.com | domain | yes | critical | 2026-09-20 |
story.snapchat.com | domain | yes | low | 2026-09-20 |
web.snapchat.com | domain | yes | critical | 2026-09-20 |
www.bitmoji.com | domain | yes | medium | 2026-09-20 |
www.bitstrips.com | domain | yes | medium | 2026-09-20 |
Lens Studio | executable | yes | medium | 2026-09-20 |
com.bitstrips.imoji | mobile | yes | medium | 2026-09-20 |
com.snapchat.android | mobile | yes | critical | 2026-09-20 |
com.toyopagroup.picaboo | mobile | yes | high | 2026-09-20 |
*.sc-corp.net | other | yes | critical | 2026-09-20 |
Tier A - Core Assets | other | yes | critical | 2026-09-20 |
Tier B - Non Core (Bitmoji, Playcanvas) | other | yes | medium | 2026-09-20 |
https://lensstudio.snapchat.com/api/ | source code | yes | critical | 2026-09-20 |
*.sc-core.net | wildcard | yes | critical | 2026-09-20 |
6 out of scope — black ICE, don't touch
dev.playcanv.asdomainreturns.spectacles.comdomainsupport.snapchat.comdomainSpectacleshardwareSpectacles charging casehardwarehttp://dev*.playcanvas.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.