Tesla
Bounty RecognitionPartial Safe Harbor
Up to USD $100,000
Program Details
- Managed
- Yes
- Launch Date
- 2013-11-26
- Allows Disclosure
- No
Scope (11 targets)
web: 7 mobile: 2 other: 2 In Scope
- *.tesla.cn web bounty-eligible
- *.tesla.services web bounty-eligible
- Official Tesla iOS apps mobile bounty-eligible
- *.tesla.com web bounty-eligible
- *.teslamotors.com web bounty-eligible
- Any host verified to be owned by Tesla Motors Inc. (domains/IP space/etc.) web bounty-eligible
- *.solarcity.com web bounty-eligible
- *.teslainsuranceservices.com web bounty-eligible
- Official Tesla Android apps mobile bounty-eligible
- Tesla Energy hardware you own other bounty-eligible
- Tesla vehicle hardware that you own other bounty-eligible
Out of Scope
employeefeedback.tesla.com, energysupport.tesla.com (you can report vulnerabilities to bugbounty.zoho.com), engage.tesla.com, *.engage.tesla.com, feedback.tesla.com, feedback.teslamotors.com, ir.tesla.com, ir.teslamotors.com, mkto.teslamotors.com, shop.eu.teslamotors.com, service.tesla.com/docs/*, service.tesla.cn/docs/*, Any domains from acquisitions, such as maxwell.com, Any other third-party websites hosted by non-Tesla entities
Additional Info
- Sources
- bugcrowd