TikTok
HackerOne live webBug bounty program on HackerOne. Official listing: https://hackerone.com/tiktok. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$25K
Starts
2020-07-28
In-scope assets
24
Last updated
2026-08-07
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| web | *.pipopay.com | |
| web | *.soundon.global | |
| web | *.tiktok.com | |
| web | *.tiktokcdn.com | |
| web | *.tiktokpublishers.com | |
| web | *.tiktokv.com | |
| web | academy-outbound-ads.tiktok.com | |
| web | ads.tiktok.com | |
| web | affiliate-id.tokopedia.com | |
| web | business.tiktok.com | |
| web | careers.tiktok.com | |
| web | creatormarketplace.tiktok.com | |
| web | developers.tiktok.com | |
| web | effecthouse.tiktok.com | |
| web | fp-sg.tiktokv.com | |
| web | live-backstage.tiktok.com | |
| web | partner.tiktokshop.com | |
| web | pay.tokopediax.com | |
| web | seller-id.tokopedia.com | |
| web | shop-id.tokopedia.com | |
| web | shop.tiktok.com | TikTok Shop |
| web | tiktok.com | |
| web | www.pangleglobal.com | |
| web | www.soundon.global |
Watching TikTok? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program