PentestingHere
Log in Join

Supabase

Supabase on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: No, this is a VDP
  • Swag: No
  • Managed by the platform: No
  • Average first response: 1.9 days
  • Average time to resolution: 50.9 days

In scope

  • api.supabase.com
  • https://*.database.dev/
  • https://github.com/supabase
  • https://github.com/supabase-community/supabase-mcp
  • https://mcp.supabase.com/mcp
  • https://multiplayer.dev
  • https://supabase.help
  • https://supabase.link
  • https://supabase.store
  • supabase.com

Out of scope

  • db.*.supabase.co
  • https://*.supabase.co
  • https://api.supabase.com/platform/pg-meta/project_id/query
  • https://ctf.supabase.com
  • https://github.com/supabase-community/
  • https://supabase.dev/
  • https://supabase.productions/
  • supabase.sh

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback