Opera Public Bug Bounty

At a glance#

• Maximum payout: $5,000
• Public disclosure: Not allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://auth.opera.com
• https://accounts.opera.com
• https://flow.opera.com
• https://autoupdate.geo.opera.com
• https://net.geo.opera.com
• https://download.opera.com
• https://speeddials.opera.com
• https://browser-notifications.opera.com
• https://www.opera.com/
• https://www.opera.com/computer/thanks?ni=stable&os=windows
• https://www.opera.com/computer/thanks?ni=eapgx&os=windows
• https://www.operaneon.com
• https://www.opera.com/computer/thanks?ni=opera_air&os=windows
• https://get.geo.opera.com
• https://play.google.com/store/apps/details?id=com.opera.mini.native
• https://play.google.com/store/apps/details?id=com.opera.app.sports
• https://play.google.com/store/apps/details?id=com.opera.browser
• https://play.google.com/store/apps/details?id=com.opera.app.news
• https://play.google.com/store/apps/details?id=com.opera.gx
• https://apps.apple.com/us/app/opera-ai-browser-with-vpn/id1411869974
• https://apps.apple.com/pl/app/opera-gx/id1559740799
• https://play.google.com/store/apps/details?id=com.opera.minipay
• https://cryptowallet.opera-api.com
• https://suggestions.opera-api.com
• *.opera.software
• weather.opera-api.com
• push.opera.com
• *.osp.opera.software
• https://bugs.opera.com/
• *.opera.technology
• https://gx.games
• https://create.gx.games
• https://gx.me
• https://features.opera-api.com
• https://cdn-store.opera-api.com
• *.sec-tunnel.com
• *.opera.com
• exchange.opera.com
• merchandise.opera-api.com
• blocklist.opera-api.com

49 more assets on the official page.

Out of scope#

• concurso.opera.com
• investor.opera.com
• help.yoyogames.com
• bugs.yoyogames.com
• admanager.opera.com
• accountsstage.yoyogames.com
• control.gx-servers.opera.com
• help.gx-servers.opera.com
• verizon-us-seattle.opera-mini.net
• s2{1,2}-05-08-v09.opera-mini.net
• verizon-us-lvs-seattle.opera-mini.net
• 107.167.127.4{0,1}
• jobs.opera.com
• verizon-us-lvs-ashburn.opera-mini.net
• interstitial.opera-mini.net
• certs.opera.com
• checkout.opera.com
• contest.opera.com
• catch.opera.com
• wallpaper.opera.com
• tabfulness.opera.com
• 32s.opera.com

Imported from the public directory. Always confirm scope on the official program page before testing.