PentestingHere
Log in Join

Kiwi.com

Kiwi.com on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: Yes
  • Managed by the platform: Yes
  • Average first response: 1.9 days
  • Average time to resolution: 35.1 days

In scope

  • *.kiwi.com
  • *.skypicker.com
  • auth.skypicker.com
  • com.skypicker.Skypicker
  • com.skypicker.main
  • http://www.kiwi.com/stories
  • https://github.com/kiwicom/js-iam-middleware
  • https://github.com/kiwicom/k8s-vault-operator
  • https://github.com/kiwicom/kiwi-cache
  • https://github.com/kiwicom/kiwi-json
  • https://github.com/kiwicom/kiwi-structlog-config
  • https://github.com/kiwicom/konfetti
  • https://github.com/kiwicom/navigation-compose-typed
  • https://github.com/kiwicom/orbit
  • https://github.com/kiwicom/pg2avro
  • https://github.com/kiwicom/request-session
  • jobs.kiwi.com
  • tequila.kiwi.com
  • www.kiwi.com

Out of scope

  • *._domainkey.kiwi.com
  • *.coupons.kiwi.com
  • *_domainkey.skypicker.com
  • *cars.kiwi.com
  • *citi-sign.kiwi.com
  • *code.kiwi.com
  • *experiences.kiwi.com
  • *learn.kiwi.com
  • *ov.kiwi.com
  • *parking.kiwi.com
  • *sg.kiwi.com
  • email*kiwi.com
  • email*skypicker.com
  • kiwistore.kiwi.com
  • link.kiwi.com
  • mail.skypicker.com
  • nyrujhhu3yuk.nest.skypicker.com
  • outbound.intercom.kiwi.com
  • packages.kiwi.com
  • retool.skypicker.com
  • rooms.kiwi.com
  • status.kiwi.com
  • vacation.kiwi.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback