wildhunter.
← Back to programs

Spotify

Spotify · HackerOne · added May 30, 2017

High competitionWebApi

We're big believers in protecting your privacy and security. As a company, we not only have a vested interest, but also a deep desire to see the Internet remain…

Metrics

Bounty range
Paid this month$0
Reports0/mo
Hunters0

Beginner fit

54/100

Estimated: this program accepts low-severity findings worth reporting.

Time to triage3d
Time to first bounty21d

Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.

Engage

Open on HackerOne

Always read the full policy on the platform before submitting. Scope below is a summary only.

Scope assets45
Bounty floor$0

In-scope assets

  • assets.spotify.com
  • com.spotify.client
  • com.spotify.s4a
  • com.spotify.tv.android
  • com.spotify.s4a
  • Spotify SDKs
  • Other Spotify websites
  • com.spotify.music
  • Spotify desktop application (Windows and Mac)
  • Anchor
  • com.spotify.kids
  • iOS SDK
  • Android SDK
  • Web Playback SDK
  • backstage.io

Fetched live from the HackerOne API.

Wanted categories

General