Airbnb

www.airbnb.com → Homepage Contact

Program Details

Handle: airbnb
Managed: No

Response Metrics

Response Time: 10 days
Bounty Time: 126 days
Resolution Time: 2885 days

100%

Scope (27 targets)

web: 23 mobile: 3 other: 1

Bounty splitting: Yes

In Scope

*.airbnb-aws.com web bounty-eligible
*.airbnb.com web bounty-eligible
*.airbnb.org web bounty-eligible
*.airbnbcitizen.com web bounty-eligible
*.airbnbpayments.com web bounty-eligible
*.atairbnb.com web bounty-eligible
*.byairbnb.com web bounty-eligible
*.hoteltonight-test.com web bounty-eligible
*.hoteltonight.com web bounty-eligible
*.luxuryretreats.com web bounty-eligible
*.muscache.com web bounty-eligible
*.musta.ch web bounty-eligible
*.withairbnb.com web bounty-eligible
Localized airbnb sites listed at the link below: other bounty-eligible
api.airbnb.com web bounty-eligible
assets.airbnb.com web bounty-eligible
callbacks.airbnb.com web bounty-eligible
com.airbnb.android mobile bounty-eligible
com.airbnb.app mobile bounty-eligible
com.luxuryretreats.ios mobile bounty-eligible
and 7 more targets

Out of Scope

admin.demo.urbandoor.com, demo.urbandoor.com, luckey.app, luckey.fr, luckey.in, luckey.partners, luckeyhomes.com, provider.demo.urbandoor.com

security.txt

Contact: https://hackerone.com/airbnb/
Policy: https://hackerone.com/airbnb#overview
Hiring: https://careers.airbnb.com/positions/?_search_input=security
Languages: en
Expires: Jun 1, 2027

View raw security.txt →