PentestingHere
Log in Join

EXNESS

EXNESS on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: Yes
  • Managed by the platform: No
  • Average first response: 0.6 days
  • Average time to resolution: 71.3 days

In scope

  • Any subdomain application issue
  • Any subdomain infrastructure issue
  • Exness Investor
  • Exness Trade: Online Trading
  • External service data leakage
  • api.excalls.mobi
  • com.exness.android.pa
  • exness.com
  • exnessaffiliates.com
  • https://my.exness.com/pa/pim/manager
  • https://my.exness.com/webtrading/
  • my.exness.com
  • pay.ibex.exchange
  • pwapi.ex2b.com

Out of scope

  • stat.* (e.g. stat.exnessaffiliates.com)

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback