23andMe Bug Bounty
HackerOne live webBug bounty program on HackerOne. Official listing: https://hackerone.com/23andme_bbp. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$5.5K
Starts
2023-12-11
In-scope assets
18
Last updated
2026-07-09
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| web | 23andmeresearchinstitute.org | |
| web | api.23andme.com | |
| web | auth.23andme.com | |
| web | fulfillment.23andme.com | 23andMe Fulfillment API |
| web | merch.23andme.com | E-commerce storefront for 23andMe merchandise. |
| web | portal.23andme.com | |
| web | refer.23andme.com | |
| web | trust.23andme.com | |
| web | you.23andme.com | |
| web | 23andme.org/blog | |
| web | 23andme.org/clinicians | |
| web | 23andme.org/education | |
| web | 23andme.org/media-center | |
| web | 23andme.org/research | |
| web | store.23andme.org | |
| web | 23andme.org/ancestry/last-names | |
| web | style.23andme.org | |
| web | www.23andme.org |
Watching 23andMe Bug Bounty? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program