GOJEK - Public Bounty Program bug bounty program
GOJEK - Public Bounty Program runs a public bug bounty program hosted on YesWeHack. The program currently lists 16 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are rewarded, with payouts reaching up to $4k depending on severity.
// example in-scope assets
*.gojekapi.comapi.gojek.co.idhttps://play.google.com/store/apps/details?id=com.gojek.apphttps://apps.apple.com/id/app/gojek/id944875099Always read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.
// more YesWeHack programs
// data aggregated from public YesWeHack listings · refreshed 8/24/2026 · the official program page is authoritative