H1 HackerOne LIVE
Valve
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.valvesoftware.com
- managed triage
- yes
- response efficiency
- 74%
- first response
- 2h avg
- time to bounty
- 171h avg
20 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.steampowered.com | domain | yes | critical | 2026-09-20 |
developer.valvesoftware.com | domain | yes | low | 2026-09-20 |
help.steampowered.com | domain | yes | critical | 2026-09-20 |
partner.steamgames.com | domain | yes | critical | 2026-09-20 |
partner.steampowered.com | domain | yes | critical | 2026-09-20 |
playartifact.com | domain | yes | critical | 2026-09-20 |
steamcommunity.com | domain | yes | critical | 2026-09-20 |
store.steampowered.com | domain | yes | critical | 2026-09-20 |
storefront.steampowered.com | domain | no | critical | 2026-09-20 |
support.steampowered.com | domain | yes | critical | 2026-09-20 |
wiki.teamfortress.com | domain | no | critical | 2026-09-20 |
www.counter-strike.net | domain | yes | critical | 2026-09-20 |
www.dota2.com | domain | yes | critical | 2026-09-20 |
www.teamfortress.com | domain | yes | critical | 2026-09-20 |
www.valvesoftware.com | domain | yes | critical | 2026-09-20 |
com.valvesoftware.Steam | mobile | yes | critical | 2026-09-20 |
Steam Client | other | yes | critical | 2026-09-20 |
Steam Servers | other | yes | critical | 2026-09-20 |
https://github.com/valvesoftware | source code | no | critical | 2026-09-20 |
*.steamstatic.com | wildcard | yes | critical | 2026-09-20 |
5 out of scope — black ICE, don't touch
list.valvesoftware.comdomaintranslation.steampowered.comdomainvalvestore.forfansbyfans.com,store.valvesoftware.comdomainwww.steamgames.comdomainwww.steampowered.comdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.