Tesla

Tesla

Bounty RecognitionPartial Safe Harbor Up to USD $100,000

Program Details

Managed
Yes
Launch Date
2013-11-26
Allows Disclosure
No

Scope (11 targets)

web: 7 mobile: 2 other: 2

In Scope

  • *.tesla.cn web bounty-eligible
  • *.tesla.services web bounty-eligible
  • Official Tesla iOS apps mobile bounty-eligible
  • *.tesla.com web bounty-eligible
  • *.teslamotors.com web bounty-eligible
  • Any host verified to be owned by Tesla Motors Inc. (domains/IP space/etc.) web bounty-eligible
  • *.solarcity.com web bounty-eligible
  • *.teslainsuranceservices.com web bounty-eligible
  • Official Tesla Android apps mobile bounty-eligible
  • Tesla Energy hardware you own other bounty-eligible
  • Tesla vehicle hardware that you own other bounty-eligible

Out of Scope

employeefeedback.tesla.com, energysupport.tesla.com (you can report vulnerabilities to bugbounty.zoho.com), engage.tesla.com, *.engage.tesla.com, feedback.tesla.com, feedback.teslamotors.com, ir.tesla.com, ir.teslamotors.com, mkto.teslamotors.com, shop.eu.teslamotors.com, service.tesla.com/docs/*, service.tesla.cn/docs/*, Any domains from acquisitions, such as maxwell.com, Any other third-party websites hosted by non-Tesla entities

Additional Info

Sources
bugcrowd