Vercel Open Source
HackerOne live git_repoBug bounty program on HackerOne. Official listing: https://hackerone.com/vercel-open-source. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$10K
Starts
2025-08-15
In-scope assets
16
Last updated
2026-08-03
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| repo | nitrojs/nitro | |
| repo | nuxt/nuxt | |
| repo | sveltejs/svelte | |
| repo | vercel-labs/agent-skills | |
| repo | vercel-labs/skills | |
| repo | vercel/ai | |
| repo | vercel/async-sema | |
| repo | vercel/flags | |
| repo | vercel/ms | |
| repo | vercel/next.js | |
| repo | vercel/swr | |
| repo | vercel/turborepo | |
| repo | vercel/vercel | |
| repo | vercel/workflow | |
| repo | vercel/chat | |
| repo | vercel/eve |
Watching Vercel Open Source? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program