Program Removed
This program is no longer available on HackerOne. The scope data shown below is historical and may not reflect the final state of the program.
netlify
14
In Scope
8
Out of Scope
In-Scope Assets (14)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| api.netlify.com | URL | Yes | ||
| app.netlify.com | URL | Yes | ||
| infra-prod.nsvcs.net | WILDCARD | Yes | ||
| internal-docs.netlify.com | URL | Yes | ||
| internal.netlify.com | URL | Yes | ||
| list-v2--netlify-plugins.netlify.app | URL | Yes | ||
| netlify-cdp-loader.netlify.app | URL | Yes | ||
| netlify-rum.netlify.app | URL | Yes | ||
| onegraph.com | WILDCARD | Yes | ||
| ops.netlify.com | WILDCARD | Yes | ||
| screenshot-proxy.netlify.app | URL | Yes | ||
| services-prod.nsvcs.net | WILDCARD | Yes | ||
| services.netlify.com | WILDCARD | Yes | ||
| supportal.netlify.app | URL | Yes |
Out-of-Scope Assets (8)
| Asset | Category | Bounty | |
|---|---|---|---|
| answers.netlify.com | URL | No | |
| docs.netlify.com | URL | No | |
| https://github.com/netlify | URL | No | |
| netlify.app | WILDCARD | No | |
| netlify.com | WILDCARD | No | |
| netlifycms.org | WILDCARD | No | |
| webpop.com | URL | No | |
| www.netlify.com | URL | No |
Scope Changes (59)
Oct 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 11:18 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.netlify.com | WILDCARD | Out of Scope | 19:10 |
| Added | api.netlify.com | URL | In Scope | 19:10 |
| Added | *.services.netlify.com | WILDCARD | In Scope | 19:10 |
| Added | *.services-prod.nsvcs.net | WILDCARD | In Scope | 19:10 |
| Added | app.netlify.com | URL | In Scope | 19:10 |
| Added | *.netlifycms.org | WILDCARD | Out of Scope | 19:10 |
| Added | *.onegraph.com | WILDCARD | In Scope | 19:10 |
| Added | screenshot-proxy.netlify.app | URL | In Scope | 19:10 |
| Added | list-v2--netlify-plugins.netlify.app | URL | In Scope | 19:10 |
| Added | docs.netlify.com | URL | Out of Scope | 19:10 |
| Added | answers.netlify.com | URL | Out of Scope | 19:10 |
| Added | *.netlify.app | WILDCARD | Out of Scope | 19:10 |
| Added | www.netlify.com | URL | Out of Scope | 19:10 |
| Added | internal.netlify.com | URL | In Scope | 19:10 |
| Added | *.infra-prod.nsvcs.net | WILDCARD | In Scope | 19:10 |
| Added | *.ops.netlify.com | WILDCARD | In Scope | 19:10 |
| Added | netlify-rum.netlify.app | URL | In Scope | 19:10 |
| Added | supportal.netlify.app | URL | In Scope | 19:10 |
| Added | webpop.com | URL | Out of Scope | 19:10 |
| Added | https://github.com/netlify | URL | Out of Scope | 19:10 |
| Added | netlify-cdp-loader.netlify.app | URL | In Scope | 19:10 |
| Added | internal-docs.netlify.com | URL | In Scope | 19:10 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | netlify-rum.netlify.app | URL | In Scope | 00:41 |
| Added | webpop.com | URL | Out of Scope | 00:41 |
| Added | *.services-prod.nsvcs.net | WILDCARD | In Scope | 00:41 |
| Added | docs.netlify.com | URL | Out of Scope | 00:41 |
| Added | answers.netlify.com | URL | Out of Scope | 00:41 |
| Added | *.netlifycms.org | WILDCARD | Out of Scope | 00:41 |
| Added | www.netlify.com | URL | Out of Scope | 00:41 |
| Added | *.onegraph.com | WILDCARD | In Scope | 00:41 |
| Added | *.infra-prod.nsvcs.net | WILDCARD | In Scope | 00:41 |
| Added | screenshot-proxy.netlify.app | URL | In Scope | 00:41 |
| Added | supportal.netlify.app | URL | In Scope | 00:41 |
| Added | app.netlify.com | URL | In Scope | 00:41 |
| Added | *.netlify.com | WILDCARD | Out of Scope | 00:41 |
| Added | *.netlify.app | WILDCARD | Out of Scope | 00:41 |
| Added | netlify-cdp-loader.netlify.app | URL | In Scope | 00:41 |
| Added | list-v2--netlify-plugins.netlify.app | URL | In Scope | 00:41 |
| Added | internal-docs.netlify.com | URL | In Scope | 00:41 |
| Added | api.netlify.com | URL | In Scope | 00:41 |
| Added | https://github.com/netlify | URL | Out of Scope | 00:41 |
| Added | *.services.netlify.com | WILDCARD | In Scope | 00:41 |
| Added | internal.netlify.com | URL | In Scope | 00:41 |
| Added | *.ops.netlify.com | WILDCARD | In Scope | 00:41 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | *.onegraph.com | WILDCARD | In Scope | 21:38 |
| Removed | *.services.netlify.com | WILDCARD | In Scope | 21:38 |
| Removed | *.services-prod.nsvcs.net | WILDCARD | In Scope | 21:38 |
| Removed | internal.netlify.com | URL | In Scope | 21:38 |
| Removed | *.infra-prod.nsvcs.net | WILDCARD | In Scope | 21:38 |
| Removed | *.ops.netlify.com | WILDCARD | In Scope | 21:38 |
| Removed | netlify-cdp-loader.netlify.app | URL | In Scope | 21:38 |
| Removed | screenshot-proxy.netlify.app | URL | In Scope | 21:38 |
| Removed | netlify-rum.netlify.app | URL | In Scope | 21:38 |
| Removed | list-v2--netlify-plugins.netlify.app | URL | In Scope | 21:38 |
| Removed | internal-docs.netlify.com | URL | In Scope | 21:38 |
| Removed | supportal.netlify.app | URL | In Scope | 21:38 |
| Removed | app.netlify.com | URL | In Scope | 21:38 |
| Removed | api.netlify.com | URL | In Scope | 21:38 |