wildhunter.
← Back to programs

GitLab

GitLab · HackerOne · added Jun 27, 2014

High competitionWeb

Rewards We have different rewards depending on the business impact of each asset. A more complete description of each asset will be in the scope section, but in…

Metrics

Bounty range—
Paid this month$0
Reports0/mo
Hunters0

Beginner fit

54/100

Estimated: this program accepts low-severity findings worth reporting.

Time to triage3d
Time to first bounty21d

Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.

Engage

Open on HackerOne →

Always read the full policy on the platform before submitting. Scope below is a summary only.

Scope assets19
Bounty floor$0

In-scope assets

  • customers.gitlab.com
  • registry.gitlab.com
  • gitlab.com
  • Your Own GitLab Instance
  • https://gitlab.com/gitlab-org/gitlab
  • https://gitlab.com/gitlab-org/gitlab-runner
  • https://gitlab.com/gitlab-org/gitaly
  • https://gitlab.com/gitlab-org/gitlab-pages
  • https://gitlab.com/gitlab-org/gitlab-shell
  • https://gitlab.com/gitlab-org/gitlab-vscode-extension
  • Other non-production infrastructure
  • *.gitlab.net
  • *.gitlab.org
  • *.gitlap.com
  • about.gitlab.com

Fetched live from the HackerOne API.

Wanted categories

General