YWH YesWeHack LIVE
GOJEK - Public Bounty Program
€5 –€3,500
Open on YesWeHack ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- no
16 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.gobiz.co.id | api | · | · | 2026-09-20 |
api.gojek.co.id | api | · | · | 2026-09-20 |
gocorp.gojek.com | domain | · | · | 2026-09-20 |
gofood.co.id | domain | · | · | 2026-09-20 |
portal.gofoodmerchant.co.id | domain | · | · | 2026-09-20 |
https://apps.apple.com/id/app/gojek/id944875099 | mobile | · | · | 2026-09-20 |
https://apps.apple.com/sg/app/gojek-driver/id1573529788 | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.gojek.app | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.gojek.partner | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.gojek.resto | mobile | · | · | 2026-09-20 |
*.gobiz.co.id | wildcard | · | · | 2026-09-20 |
*.gofood.co.id | wildcard | · | · | 2026-09-20 |
*.gofoodmerchant.co.id | wildcard | · | · | 2026-09-20 |
*.gojek.com | wildcard | · | · | 2026-09-20 |
*.gojekapi.com | wildcard | · | · | 2026-09-20 |
*.golabs.io | wildcard | · | · | 2026-09-20 |
2 out of scope — black ICE, don't touch
All other Goto assets not listed above are to be considered as out of scopeotherAny staging environment will be out of scope (staging domain could be indicated by words like test/integration/staging, etc)other
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.