PentestingHere
Log in Join

Kong

Kong on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: No
  • Managed by the platform: Yes
  • Average first response: 0.8 days
  • Average time to resolution: 73.3 days

In scope

  • GitHub Actions in our Public Repositories
  • Insomnia CLI (inso)
  • Insomnia Desktop Client
  • Kong Gateway Enterprise
  • Kong Gateway OSS
  • Kong Gateway Plugins (Kong-Supported Only)
  • Kong Mesh
  • Subdomain Takeover - konghq.com
  • developer.konghq.com
  • http://cloud.konghq.com
  • https://*.api.konghq.com
  • https://app.insomnia.rest/
  • https://us.identity.konghq.com/*
  • konghq.com

Out of scope

  • *.*.edge.gateways.konghq.com
  • *.gateways.konghq.com
  • Kong Enterprise Gateway - Sandbox Functionality
  • Non-Kong GitHub Repositories
  • Non-Kong Plugins
  • https://*.konghq.tech
  • https://docs.konghq.com
  • https://httpbin.konghq.com/
  • https://insomnia.rest/
  • https://kuma.io/

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback