KOHO
HackerOne live webBug bounty program on HackerOne. Official listing: https://hackerone.com/koho. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$5K
Starts
2021-11-12
In-scope assets
9
Last updated
2026-06-16
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| web | app.koho.ca | Our app API gateway. |
| web | http://api.koho.ca/1.0 | Our main API gateway |
| web | http://api.koho.ca/partner | Used for API calls to/for our partners |
| web | usercontent.koho.ca | |
| web | web.koho.ca | Customer-facing Web application |
| web | www.koho.ca | Marketing website |
| web | login.koho.ca | |
| web | assets.koho.ca | |
| web | clicks.koho.ca |
Watching KOHO? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program