H1 HackerOne LIVE
Yelp
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.yelp.com
- managed triage
- no
- response efficiency
- 44%
- first response
- 107h avg
- time to bounty
- 302h avg
8 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
yelptop100.com | domain | yes | low | 2026-09-20 |
284910350 | mobile | yes | critical | 2026-09-20 |
542767785 | mobile | yes | critical | 2026-09-20 |
936983378 | mobile | yes | critical | 2026-09-20 |
com.yelp.android | mobile | yes | critical | 2026-09-20 |
com.yelp.android.biz | mobile | yes | critical | 2026-09-20 |
*.yelp.com | wildcard | yes | critical | 2026-09-20 |
*.yelpwifi.com | wildcard | yes | low | 2026-09-20 |
7 out of scope — black ICE, don't touch
blog.yelp.comdomaincloud.e.yelp-business.comdomainengineeringblog.yelp.comdomainwww.yelp-ir.comdomainyelp-press.comdomainyelp.careersdomain*.yelp-support.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.