PentestingHere
Log in Join

GitLab

GitLab on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: No
  • Managed by the platform: Yes
  • Average first response: 0.1 days
  • Average time to resolution: 58.4 days

In scope

  • *.gitlab.net
  • *.gitlab.org
  • *.gitlap.com
  • GitLab for Jira Cloud
  • Other non-production infrastructure
  • Your Own GitLab Instance
  • about.gitlab.com
  • advisories.gitlab.com
  • customers.gitlab.com
  • design.gitlab.com
  • docs.gitlab.com
  • gitlab.com
  • https://gitlab.com/gitlab-org/gitaly
  • https://gitlab.com/gitlab-org/gitlab
  • https://gitlab.com/gitlab-org/gitlab-pages
  • https://gitlab.com/gitlab-org/gitlab-runner
  • https://gitlab.com/gitlab-org/gitlab-shell
  • https://gitlab.com/gitlab-org/gitlab-vscode-extension
  • registry.gitlab.com

Out of scope

  • *.gitlab-private.org
  • *.gitlab.cn
  • *.runway.gitlab.net
  • *.service-now.com
  • alerts.gitlab.com
  • aptly.gitlab.com
  • dashboards.gitlab.com
  • federal-support.gitlab.com
  • forum.gitlab.com
  • gitlab.biterg.io
  • gitlabdemo.cloud
  • gitlabsandbox.net
  • gitlabtraining.cloud
  • https://gitlab.com/gitlab-org/cli/
  • https://gitlab.com/gitlab-org/opstrace/opstrace
  • https://gitlab.com/gitlab-org/opstrace/opstrace-ui
  • ir.gitlab.com
  • levelup.gitlab.com
  • packages.gitlab.com
  • partners.gitlab.com
  • shop.gitlab.com
  • status.gitlab.com
  • support.gitlab.com
  • translate.gitlab.com
  • us-federal-gitlab.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback