H1 HackerOne LIVE
TikTok
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://tiktok.com
- managed triage
- yes
- response efficiency
- 85%
- first response
- 8h avg
- time to bounty
- 214h avg
35 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
academy-outbound-ads.tiktok.com | domain | yes | critical | 2026-09-20 |
ads.tiktok.com | domain | yes | critical | 2026-09-20 |
affiliate-id.tokopedia.com | domain | yes | critical | 2026-09-20 |
business.tiktok.com | domain | yes | critical | 2026-09-20 |
careers.tiktok.com | domain | yes | critical | 2026-09-20 |
creatormarketplace.tiktok.com | domain | yes | critical | 2026-09-20 |
developers.tiktok.com | domain | yes | critical | 2026-09-20 |
effecthouse.tiktok.com | domain | yes | critical | 2026-09-20 |
fp-sg.tiktokv.com | domain | yes | critical | 2026-09-20 |
live-backstage.tiktok.com | domain | yes | critical | 2026-09-20 |
partner.tiktokshop.com | domain | yes | critical | 2026-09-20 |
pay.tokopediax.com | domain | yes | critical | 2026-09-20 |
seller-id.tokopedia.com | domain | yes | critical | 2026-09-20 |
shop-id.tokopedia.com | domain | yes | critical | 2026-09-20 |
shop.tiktok.com | domain | yes | critical | 2026-09-20 |
tiktok.com | domain | yes | critical | 2026-09-20 |
www.pangleglobal.com | domain | yes | critical | 2026-09-20 |
www.soundon.global | domain | yes | critical | 2026-09-20 |
1235601864 | mobile | yes | critical | 2026-09-20 |
1591003012 | mobile | yes | critical | 2026-09-20 |
641062073 | mobile | yes | critical | 2026-09-20 |
835599320 | mobile | yes | critical | 2026-09-20 |
com.ss.android.ugc.now | mobile | yes | critical | 2026-09-20 |
com.ss.android.ugc.trill | mobile | yes | critical | 2026-09-20 |
com.tiktok.tv | mobile | yes | critical | 2026-09-20 |
com.tiktokshop.seller | mobile | yes | critical | 2026-09-20 |
com.zhiliao.musically.livewallpaper | mobile | yes | critical | 2026-09-20 |
com.zhiliaoapp.musically | mobile | yes | critical | 2026-09-20 |
Other Asset (Campaigns) | other | yes | critical | 2026-09-20 |
*.pipopay.com | wildcard | yes | critical | 2026-09-20 |
*.soundon.global | wildcard | yes | critical | 2026-09-20 |
*.tiktok.com | wildcard | yes | critical | 2026-09-20 |
*.tiktokcdn.com | wildcard | yes | critical | 2026-09-20 |
*.tiktokpublishers.com | wildcard | yes | critical | 2026-09-20 |
*.tiktokv.com | wildcard | yes | critical | 2026-09-20 |
14 out of scope — black ICE, don't touch
drama.tiktok.comdomainhttps://developers.tiktok.com/minis/domainp16-bg.tiktokcdn-us.comdomainp16-sign.tiktokcdn-us.comdomainp16-webcast.tiktokcdn-us.comdomainp19-sign.tiktokcdn-us.comdomainp19-webcast.tiktokcdn-us.comdomainshortdrama.tiktok.comdomainusds.tiktok.comdomainusdsjv.tiktok.comdomain6754134922mobilecom.ss.android.ttmd.videomobile*tiktokv.uswildcard*us.tiktokv.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.