bug bounty directory
Weblate bug bounty program
HackerOne 6 in-scope assets first seen Sep 7, 2026 verified Sep 7, 2026
Weblate runs a public vulnerability disclosure program hosted on HackerOne. The program currently lists 6 in-scope assets that authorised security researchers may test under the program's rules. It accepts vulnerability reports for recognition rather than advertising cash bounties.
// example in-scope assets
hosted.weblate.orghttps://github.com/WeblateOrg/dockerhttps://github.com/WeblateOrg/translation-finderhttps://github.com/WeblateOrg/weblateAlways read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.
// more HackerOne programs
// data aggregated from public HackerOne listings · refreshed 9/7/2026 · the official program page is authoritative