Exness

Exness

Top 100K site
Bounty Swag

Program Details

Handle
exness
Managed
No

Response Metrics

Response Time
22 days
Bounty Time
121 days
Resolution Time
1337 days
Response Efficiency
99%

Scope (14 targets)

web: 8 mobile: 3 other: 3

Bounty splitting: Yes

In Scope

  • Any subdomain application issue other recognition only
  • Any subdomain infrastructure issue other recognition only
  • Exness Investor mobile bounty-eligible
  • Exness Trade: Online Trading mobile bounty-eligible
  • External service data leakage other recognition only
  • api.excalls.mobi web bounty-eligible
  • com.exness.android.pa mobile bounty-eligible
  • exness.com web bounty-eligible
  • exnessaffiliates.com web bounty-eligible
  • https://my.exness.com/pa/pim/manager web bounty-eligible
  • https://my.exness.com/webtrading/ web bounty-eligible
  • my.exness.com web bounty-eligible
  • pay.ibex.exchange web bounty-eligible
  • pwapi.ex2b.com web bounty-eligible

Out of Scope

stat.* (e.g. stat.exnessaffiliates.com)

security.txt expired

Contact
mailto:[email protected]
Encryption
https://www.exness.com/sec-pgp-pubkey.txt
Policy
https://hackerone.com/exness
Hiring
https://www.exness-careers.com/jobs/
Acknowledgments
https://hackerone.com/exness/thanks
Languages
en, ru
Expires
Oct 31, 2025
View raw security.txt →