Scope Updates

Recent changes to bug bounty program scopes.

Asset / ChangeScope TypeProgram URLPlatformTimestamp
Asset Added: WILDCARD: *.pci.shopifyinc.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: OTHER: Shopify Developed Apps
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: WILDCARD: *.shopifykloud.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: admin.shopify.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: partners.shopify.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: accounts.shopify.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: OTHER: Shopify Mobile Applications
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: WILDCARD: *.shopifycloud.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: linkpop.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: shopify.plus
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: WILDCARD: *.shopify.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: shopifyinbox.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: shop.app
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: SOURCE_CODE: https://github.com/Shopify/*
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: your-store.myshopify.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: WILDCARD: *.shopify.io
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: URL: arrive-server.shopifycloud.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: WILDCARD: *.shopifycs.com
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Removed: N/A: NO_IN_SCOPE_TABLE
In Scopehttps://hackerone.com/shopifyhackerone2025-06-13 00:03
Asset Added: OTHER: Other subdomains of *.azuredatabricks.net and other ‘o’ parameters
Out of Scopehttps://hackerone.com/databrickshackerone2025-06-13 00:03
Asset Added: WILDCARD: https://databricks-prod-cloudfront.cloud.databricks.com/public/*
Out of Scopehttps://hackerone.com/databrickshackerone2025-06-13 00:03
Asset Added: URL: forums.databricks.com
Out of Scopehttps://hackerone.com/databrickshackerone2025-06-13 00:03
Asset Added: URL: feedback.databricks.com
Out of Scopehttps://hackerone.com/databrickshackerone2025-06-13 00:03
Asset Added: URL: go.databricks.com
Out of Scopehttps://hackerone.com/databrickshackerone2025-06-13 00:03
Asset Added: WILDCARD: *.cloud.databricks.com
Out of Scopehttps://hackerone.com/databrickshackerone2025-06-13 00:03