Mozilla
HackerOne live webBug bounty program on HackerOne. Official listing: https://hackerone.com/mozilla. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$15K
Starts
2023-02-14
In-scope assets
21
Last updated
2026-08-26
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| web | accounts.firefox.com | |
| web | addons.allizom.org | |
| web | aus5.mozilla.org | |
| web | bugzilla.mozilla.org | |
| web | crash-reports.allizom.org | |
| web | crash-stats.allizom.org | |
| web | developer.mozilla.org | |
| web | firefox-ci-tc.services.mozilla.com | |
| web | firefox.settings.services.mozilla.com | |
| web | hg.mozilla.org | |
| web | lando.services.mozilla.com | |
| web | merino.services.mozilla.com | |
| web | monitor.mozilla.org | |
| web | phabricator.allizom.org | |
| web | pontoon.allizom.org | |
| web | relay.firefox.com | |
| web | support.mozilla.org | |
| web | sync.services.mozilla.com | |
| web | vpn.mozilla.org | The backend server behind Mozilla VPN. |
| web | www.firefox.com | |
| web | www.mozilla.org |
Watching Mozilla? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program