Bug Bounties
Supabase

Supabase

Top 10K site
supabase.com → Contact

Program Details

Handle
supabase
Managed
No

Response Metrics

Response Time
49 days
Resolution Time
482 days
Response Efficiency
81%

Scope (10 targets)

web: 9 other: 1

Bounty splitting: No

In Scope

  • api.supabase.com web recognition only
  • https://*.database.dev/ web recognition only
  • https://github.com/supabase other recognition only
  • https://github.com/supabase-community/supabase-mcp web recognition only
  • https://mcp.supabase.com/mcp web recognition only
  • https://multiplayer.dev web recognition only
  • https://supabase.help web recognition only
  • https://supabase.link web recognition only
  • https://supabase.store web recognition only
  • supabase.com web recognition only

Out of Scope

db.*.supabase.co, https://*.supabase.co, https://api.supabase.com/platform/pg-meta/project_id/query, https://ctf.supabase.com, https://github.com/supabase-community/, https://supabase.dev/, https://supabase.productions/, supabase.sh

Security

security.txt
https://supabase.com/.well-known/security.txt