Shopify

In Scope

• *.pci.shopifyinc.com web bounty-eligible
• *.shopify.com web bounty-eligible
• *.shopify.io web bounty-eligible
• *.shopifycloud.com web bounty-eligible
• *.shopifycs.com web bounty-eligible
• *.shopifykloud.com web bounty-eligible
• Shopify Developed Apps other bounty-eligible
• Shopify Mobile Applications other bounty-eligible
• Shopify Third Party Apps other recognition only
• Shopify Third Party Store other recognition only
• accounts.shopify.com web bounty-eligible
• admin.shopify.com web bounty-eligible
• arrive-server.shopifycloud.com web bounty-eligible
• https://github.com/Shopify/* other bounty-eligible
• linkpop.com web bounty-eligible
• partners.shopify.com web bounty-eligible
• shop.app web bounty-eligible
• shopify.plus web bounty-eligible
• shopifyinbox.com web bounty-eligible
• your-store.myshopify.com web bounty-eligible

Out of Scope

*.email.shopify.com, Other, academy.shopify.com, cdn.shopify.com, community.shopify.com, community.shopify.dev, investors.shopify.com, livechat.shopify.com, supplier-portal.shopifycloud.com