affirm

HackerOneView on HackerOne

RawAI Enhanced

3

In Scope

1

Out of Scope

In-Scope Assets (3)

Asset	Category	Bounty	Quick Links
com.affirm.central.audit	ANDROID	Yes	Play Store APKPure APKMirror
com.affirm.internal.hackerone	OTHER	Yes	-
sandbox.affirm.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (1)

Asset	Category	Bounty
*.affirm.com	WILDCARD	No

Scope Changes (11)

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	com.affirm.central.audit	ANDROID	In Scope	19:10
Added	*.affirm.com	WILDCARD	Out of Scope	19:10
Added	com.affirm.internal.hackerone	OTHER	In Scope	19:10
Added	sandbox.affirm.com	URL	In Scope	19:10

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	com.affirm.internal.hackerone	IOS	In Scope	00:41
Added	sandbox.affirm.com	URL	In Scope	00:41
Added	com.affirm.central.audit	ANDROID	In Scope	00:41
Added	*.affirm.com	WILDCARD	Out of Scope	00:41

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	com.affirm.internal.hackerone	OTHER	In Scope	21:38
Removed	sandbox.affirm.com	URL	In Scope	21:38
Removed	com.affirm.central.audit	ANDROID	In Scope	21:38