H1 HackerOne LIVE
X / xAI
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://x.com
- managed triage
- yes
- response efficiency
- 76%
- first response
- 169h avg
- time to bounty
- 379h avg
24 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
accounts.x.ai | domain | yes | critical | 2026-09-20 |
chat.x.com | domain | yes | critical | 2026-09-20 |
console.x.ai | domain | yes | critical | 2026-09-20 |
console.x.com | domain | yes | critical | 2026-09-20 |
grok.com | domain | yes | critical | 2026-09-20 |
grokipedia.com | domain | yes | critical | 2026-09-20 |
money.x.com | domain | yes | critical | 2026-09-20 |
pscp.tv | domain | yes | critical | 2026-09-20 |
t.co | domain | yes | medium | 2026-09-20 |
x.ai | domain | yes | critical | 2026-09-20 |
x.com | domain | yes | critical | 2026-09-20 |
xadsacademy.com | domain | no | medium | 2026-09-20 |
grok-build | executable | yes | medium | 2026-09-20 |
ai.x.GrokApp | mobile | yes | critical | 2026-09-20 |
ai.x.grok | mobile | yes | critical | 2026-09-20 |
com.atebits.Tweetie2 | mobile | yes | critical | 2026-09-20 |
com.twitter.android | mobile | yes | critical | 2026-09-20 |
X Pixel Helper (Chrome Extension) | other | yes | critical | 2026-09-20 |
*.grok.com | wildcard | yes | critical | 2026-09-20 |
*.twimg.com | wildcard | yes | critical | 2026-09-20 |
*.twitter.com | wildcard | yes | critical | 2026-09-20 |
*.vine.co | wildcard | yes | critical | 2026-09-20 |
*.x.ai | wildcard | yes | critical | 2026-09-20 |
*.x.com | wildcard | yes | critical | 2026-09-20 |
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.