figma

HackerOneView on HackerOne

RawAI Enhanced

7

In Scope

1

Out of Scope

In-Scope Assets (7)

Asset	Category	Bounty	Quick Links
Figma Atlassian App	OTHER	Yes	-
Figma Desktop App	OTHER	Yes	-
Figma Slack App	OTHER	Yes	-
Figma for Microsoft Teams	OTHER	Yes	-
Figma iOS and Android apps	OTHER	Yes	-
api.figma.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
www.figma.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (1)

Asset	Category	Bounty
www.designsystems.com	URL	No

Scope Changes (24)

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	figma ios and android apps	OTHER	In Scope	19:12
Added	figma slack app	URL	In Scope	19:12
Added	figma for microsoft teams	URL	In Scope	19:12
Added	www.figma.com	URL	In Scope	19:12
Added	api.figma.com	URL	In Scope	19:12
Added	figma atlassian app	URL	In Scope	19:12
Added	www.designsystems.com	URL	Out of Scope	19:12
Added	figma desktop app	OTHER	In Scope	19:12

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	api.figma.com	URL	In Scope	00:42
Added	figma atlassian app	URL	In Scope	00:42
Added	www.designsystems.com	URL	Out of Scope	00:42
Added	figma desktop app	OTHER	In Scope	00:42
Added	figma ios and android apps	IOS	In Scope	00:42
Added	figma ios and android apps	IOS	In Scope	00:42
Added	figma slack app	URL	In Scope	00:42
Added	figma for microsoft teams	URL	In Scope	00:42
Added	www.figma.com	URL	In Scope	00:42

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	figma desktop app	OTHER	In Scope	21:38
Removed	figma ios and android apps	OTHER	In Scope	21:38
Removed	figma slack app	OTHER	In Scope	21:38
Removed	figma for microsoft teams	OTHER	In Scope	21:38
Removed	www.figma.com	URL	In Scope	21:38
Removed	api.figma.com	URL	In Scope	21:38
Removed	figma atlassian app	OTHER	In Scope	21:38