PentestingHere
Log in Join

GitHub

GitHub on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: Yes
  • Managed by the platform: No
  • Average first response: 5 days
  • Average time to resolution: 73.5 days

In scope

  • *.github.net
  • *.githubapp.com
  • *.githubusercontent.com
  • Copilot
  • Copilot Chat on dotcom
  • Copilot Coding Agent
  • Copilot Spaces
  • Copilot for Business
  • Dependabot
  • GitHub CLI
  • GitHub CSP
  • GitHub Desktop
  • GitHub Enterprise Cloud
  • GitHub Enterprise Cloud with Data Residency (GHEC-DR)
  • GitHub Enterprise Server
  • GitHub Pages
  • GitHub Production Credentials
  • GitHub Spark
  • GitHub for mobile
  • api.github.com
  • classroom.github.com
  • education.github.com
  • gist.github.com
  • github.com
  • npm CLI
  • npmjs.com
  • npmjs.org

Out of scope

  • *.github.io
  • Atom
  • Electron
  • GitHub Classroom Assistant
  • blog.github.com
  • community.github.com
  • enterprise.github.com
  • git.io
  • github.blog
  • http://education.github.com/forum
  • shop.github.com
  • spectrum.chat

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback