/

Shopify

Shopify on HackerOne · HackerOne Active

Not rated be the first 0 Researchers 0 Findings 0 Reviews Feedback

Scope

At a glance

Bounties: Yes
Swag: Yes
Managed by the platform: No
Average first response: 5 days
Average time to resolution: 113.6 days

In scope

*.pci.shopifyinc.com
*.shopify.com
*.shopify.io
*.shopifycloud.com
*.shopifycs.com
*.shopifykloud.com
Authentication & ATO
Shopify Developed Apps
Shopify Mobile Applications
Shopify Third Party Apps
Shopify Third Party Store
accounts.shopify.com
admin.shopify.com
arrive-server.shopifycloud.com
https://github.com/Shopify/*
linkpop.com
partners.shopify.com
shop.app
shopify.plus
shopifyinbox.com
your-store.myshopify.com

Out of scope

*.email.shopify.com
Other
academy.shopify.com
cdn.shopify.com
community.shopify.com
community.shopify.dev
investors.shopify.com
livechat.shopify.com
supplier-portal.shopifycloud.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback