netlify

HackerOneView on HackerOne
RawAI Enhanced
14
In Scope
8
Out of Scope
In-Scope Assets (14)
AssetCategoryBountyQuick Links
*.infra-prod.nsvcs.netWILDCARDYes
*.onegraph.comWILDCARDYes
*.ops.netlify.comWILDCARDYes
*.services-prod.nsvcs.netWILDCARDYes
*.services.netlify.comWILDCARDYes
api.netlify.comURLYes
app.netlify.comURLYes
internal-docs.netlify.comURLYes
internal.netlify.comURLYes
list-v2--netlify-plugins.netlify.appURLYes
netlify-cdp-loader.netlify.appURLYes
netlify-rum.netlify.appURLYes
screenshot-proxy.netlify.appURLYes
supportal.netlify.appURLYes
Out-of-Scope Assets (8)
AssetCategoryBounty
*.netlify.appWILDCARDNo
*.netlify.comWILDCARDNo
*.netlifycms.orgWILDCARDNo
answers.netlify.comURLNo
docs.netlify.comURLNo
https://github.com/netlify/URLNo
webpop.comURLNo
www.netlify.comURLNo
Scope Changes (58)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedinternal-docs.netlify.comURLIn Scope19:10
Added*.netlify.comWILDCARDOut of Scope19:10
Addedapi.netlify.comURLIn Scope19:10
Added*.services.netlify.comWILDCARDIn Scope19:10
Added*.services-prod.nsvcs.netWILDCARDIn Scope19:10
Addedapp.netlify.comURLIn Scope19:10
Added*.netlifycms.orgWILDCARDOut of Scope19:10
Added*.onegraph.comWILDCARDIn Scope19:10
Addedscreenshot-proxy.netlify.appURLIn Scope19:10
Addedlist-v2--netlify-plugins.netlify.appURLIn Scope19:10
Addeddocs.netlify.comURLOut of Scope19:10
Addedanswers.netlify.comURLOut of Scope19:10
Added*.netlify.appWILDCARDOut of Scope19:10
Addedwww.netlify.comURLOut of Scope19:10
Addedinternal.netlify.comURLIn Scope19:10
Added*.infra-prod.nsvcs.netWILDCARDIn Scope19:10
Added*.ops.netlify.comWILDCARDIn Scope19:10
Addednetlify-rum.netlify.appURLIn Scope19:10
Addedsupportal.netlify.appURLIn Scope19:10
Addedwebpop.comURLOut of Scope19:10
Addedhttps://github.com/netlifyURLOut of Scope19:10
Addednetlify-cdp-loader.netlify.appURLIn Scope19:10
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.ops.netlify.comWILDCARDIn Scope00:41
Added*.onegraph.comWILDCARDIn Scope00:41
Added*.infra-prod.nsvcs.netWILDCARDIn Scope00:41
Addedscreenshot-proxy.netlify.appURLIn Scope00:41
Addedsupportal.netlify.appURLIn Scope00:41
Addedapp.netlify.comURLIn Scope00:41
Added*.netlify.comWILDCARDOut of Scope00:41
Added*.netlify.appWILDCARDOut of Scope00:41
Addednetlify-cdp-loader.netlify.appURLIn Scope00:41
Addedlist-v2--netlify-plugins.netlify.appURLIn Scope00:41
Addedinternal-docs.netlify.comURLIn Scope00:41
Addedapi.netlify.comURLIn Scope00:41
Addedhttps://github.com/netlifyURLOut of Scope00:41
Added*.services.netlify.comWILDCARDIn Scope00:41
Addedinternal.netlify.comURLIn Scope00:41
Addednetlify-rum.netlify.appURLIn Scope00:41
Addedwebpop.comURLOut of Scope00:41
Added*.services-prod.nsvcs.netWILDCARDIn Scope00:41
Addeddocs.netlify.comURLOut of Scope00:41
Addedanswers.netlify.comURLOut of Scope00:41
Added*.netlifycms.orgWILDCARDOut of Scope00:41
Addedwww.netlify.comURLOut of Scope00:41
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removed*.services.netlify.comWILDCARDIn Scope21:38
Removed*.services-prod.nsvcs.netWILDCARDIn Scope21:38
Removedinternal.netlify.comURLIn Scope21:38
Removed*.infra-prod.nsvcs.netWILDCARDIn Scope21:38
Removed*.ops.netlify.comWILDCARDIn Scope21:38
Removednetlify-cdp-loader.netlify.appURLIn Scope21:38
Removedscreenshot-proxy.netlify.appURLIn Scope21:38
Removednetlify-rum.netlify.appURLIn Scope21:38
Removedlist-v2--netlify-plugins.netlify.appURLIn Scope21:38
Removedinternal-docs.netlify.comURLIn Scope21:38
Removedsupportal.netlify.appURLIn Scope21:38
Removedapp.netlify.comURLIn Scope21:38
Removedapi.netlify.comURLIn Scope21:38
Removed*.onegraph.comWILDCARDIn Scope21:38