bug bounty directory
Vercel bug bounty program
HackerOne pays bounties 24 in-scope assets managed first seen Sep 22, 2026 verified Oct 15, 2026
Vercel runs a public bug bounty program hosted on HackerOne. The program currently lists 24 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are eligible for monetary rewards.
// example in-scope assets
*.vercel.com*.vercel.liveVercel sandboxhttps://github.com/nitrojs/nitroAlways read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.
// more HackerOne programs
// data aggregated from public HackerOne listings · refreshed 10/15/2026 · the official program page is authoritative