Bug Bounties
HubSpot

HubSpot

Top 1M site
bugcrowd.com → Contact
Bounty RecognitionPartial Safe Harbor

Program Details

Handle
hubspot
Managed
Yes

Response Metrics

Response Time
1 day
Bounty Time
128 days
Resolution Time
1030 days
Response Efficiency
72%

Scope (15 targets)

web: 9 mobile: 2 other: 4

Bounty splitting: Yes

In Scope

  • *.hs-sites(-eu1)?.com web bounty-eligible
  • *.hubspotemail.net web bounty-eligible
  • *.hubspotpagebuilder.com web bounty-eligible
  • *.hubspotpagebuilder.eu web bounty-eligible
  • Customer Connected Domain other bounty-eligible
  • Customer Portal other bounty-eligible
  • HubSpot Android Mobile App mobile bounty-eligible
  • HubSpot Sales Office 365 add-in other bounty-eligible
  • HubSpot iOS Mobile App mobile bounty-eligible
  • Other HubSpot-owned (sub)domains not listed as Out of Scope other bounty-eligible
  • api*.hubapi.com web bounty-eligible
  • api*.hubspot.com web bounty-eligible
  • app*.hubspot.com web bounty-eligible
  • chatspot.ai web bounty-eligible
  • hubspot.net web bounty-eligible

Out of Scope

connect.com, events.hubspot.com, ir.hubspot.com, shop.hubspot.com, thespot.hubspot.com, trust.hubspot.com

Additional Info

Sources
bugcrowd