H1 HackerOne LIVE
Stripe
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://stripe.com
- managed triage
- yes
- response efficiency
- 77%
- first response
- 1h avg
- time to bounty
- 298h avg
52 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.stripe.com | domain | yes | critical | 2026-09-20 |
api.taxjar.com | domain | yes | critical | 2026-09-20 |
app.taxjar.com | domain | yes | critical | 2026-09-20 |
js.stripe.com | domain | yes | critical | 2026-09-20 |
mcp.stripe.com | domain | yes | critical | 2026-09-20 |
www.stripe.partners | domain | no | critical | 2026-09-20 |
978516833 | mobile | yes | critical | 2026-09-20 |
com.stripe.android.dashboard | mobile | yes | critical | 2026-09-20 |
Customer Portal | other | yes | critical | 2026-09-20 |
Global Payouts | other | yes | critical | 2026-09-20 |
Munkisrv Open Source Project | other | yes | critical | 2026-09-20 |
Sandboxes | other | yes | critical | 2026-09-20 |
Smokescreen Open Source Project | other | yes | critical | 2026-09-20 |
Stripe Apps | other | yes | critical | 2026-09-20 |
Stripe Atlas | other | yes | critical | 2026-09-20 |
Stripe Billing | other | yes | critical | 2026-09-20 |
Stripe CLI | other | yes | critical | 2026-09-20 |
Stripe Capital | other | yes | critical | 2026-09-20 |
Stripe Checkout | other | yes | critical | 2026-09-20 |
Stripe Climate | other | yes | critical | 2026-09-20 |
Stripe Connect | other | yes | critical | 2026-09-20 |
Stripe Dashboard | other | yes | critical | 2026-09-20 |
Stripe Data Pipeline | other | yes | critical | 2026-09-20 |
Stripe Elements | other | yes | critical | 2026-09-20 |
Stripe Financial Connections | other | yes | critical | 2026-09-20 |
Stripe Identity | other | yes | critical | 2026-09-20 |
Stripe Invoicing | other | yes | critical | 2026-09-20 |
Stripe Issuing | other | yes | critical | 2026-09-20 |
Stripe Open Source | other | yes | critical | 2026-09-20 |
Stripe Organizations | other | yes | critical | 2026-09-20 |
Stripe Payment Links | other | yes | critical | 2026-09-20 |
Stripe Payments | other | yes | critical | 2026-09-20 |
Stripe Projects | other | yes | critical | 2026-09-20 |
Stripe Radar | other | yes | critical | 2026-09-20 |
Stripe Revenue Recognition | other | yes | critical | 2026-09-20 |
Stripe SDKs | other | yes | critical | 2026-09-20 |
Stripe Sigma | other | yes | critical | 2026-09-20 |
Stripe Tax | other | yes | critical | 2026-09-20 |
Stripe Terminal | other | yes | critical | 2026-09-20 |
Stripe Treasury | other | yes | critical | 2026-09-20 |
Stripe fiat-to-crypto onramp | other | yes | critical | 2026-09-20 |
Stripe for Visual Studio Code | other | yes | critical | 2026-09-20 |
Tap to Pay (Android) | other | yes | critical | 2026-09-20 |
Tap to Pay (iOS) | other | yes | critical | 2026-09-20 |
*.bridge.xyz | wildcard | yes | critical | 2026-09-20 |
*.lemonsqueezy.com | wildcard | yes | critical | 2026-09-20 |
*.link.co | wildcard | yes | critical | 2026-09-20 |
*.metronome.com | wildcard | yes | critical | 2026-09-20 |
*.recko.io | wildcard | yes | critical | 2026-09-20 |
*.reckoproduction.com | wildcard | yes | critical | 2026-09-20 |
*.reckostaging.com | wildcard | yes | critical | 2026-09-20 |
*.stripe.com | wildcard | yes | critical | 2026-09-20 |
3 out of scope — black ICE, don't touch
Onboarding Verification Link CrawlingotherStripe Third Party Apps and Integrationsother*.getbouncer.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.