PentestingHere
Log in Join

Automattic

Automattic on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: Yes
  • Managed by the platform: No
  • Average first response: Not published
  • Average time to resolution: Not published

In scope

  • *.srvcs.tumblr.com
  • *.tumblr.com
  • Beeper
  • Crowdsignal
  • Jetpack
  • Texts
  • WP Cloud
  • WooCommerce
  • WordPress Plugins & Themes
  • WordPress VIP
  • akismet.com
  • api.tumblr.com
  • assets.tumblr.com
  • clay.earth
  • com.clay.ios
  • com.tumblr
  • com.tumblr.tumblr
  • embed.tumblr.com
  • gravatar.com
  • intensedebate.com
  • mailpoet.com
  • my.pressable.com
  • parse.ly
  • safe.tumblr.com
  • secure.tumblr.com
  • simperium.com
  • simplenote.com
  • t.umblr.com
  • wordpress.com
  • wpscan.com
  • www.tumblr.com

Out of scope

  • *.crowdsignal.net
  • *.poll.fm
  • *.survey.fm
  • *.txmblr.com
  • */xmlrpc.php
  • afterthedeadline.com,*.afterthedeadline.com
  • atavist.com
  • happy.tools
  • learnboost.com,*.learnboost.com
  • polishmywriting.com,*.polishmywriting.com
  • scrollkit.com,*.scrollkit.com
  • try.pressable.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback