Vercel
HackerOne live webgit_repoBug bounty program on HackerOne. Official listing: https://hackerone.com/vercel. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$10K
Starts
2022-09-30
In-scope assets
22
Last updated
2026-09-22
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| repo | nitrojs/nitro | |
| repo | nuxt/nuxt | |
| repo | sveltejs/svelte | |
| repo | vercel-labs/agent-skills | |
| repo | vercel-labs/skills | |
| repo | vercel/ai | |
| repo | vercel/async-sema | |
| repo | vercel/chat | |
| repo | vercel/eve | |
| repo | vercel/flags | |
| repo | vercel/ms | |
| repo | vercel/next.js | |
| repo | vercel/swr | |
| repo | vercel/turborepo | |
| repo | vercel/vercel | |
| repo | vercel/workflow | |
| web | *.vercel.com | |
| web | *.vercel.live | |
| web | v0.app | |
| web | v0.dev | |
| web | vercel.app | |
| web | vercel.com |
Watching Vercel? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program