Bug Bounties

Deliveroo

Powered by: 

Allows bounty splitting: 

Average time to first program response: 3

Average time to bounty awarded null: 334

Average time to report resolved: 20

Handle deliveroo

Managed program: true

Name: Deliveroo

Offers bounties: true

Offers swag: false

Response efficiency percentage: 96

Submission state: open

Url: https://hackerone.com/deliveroo

Website: http://deliveroo.co.uk/

In scope:

  • Asset identifier: *.deliveroo-data-test.io
  • Asset type: OTHER
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Note: To be eligible for an award, please ensure your report relates to a deliveroo managed asset and not one run by a third party.
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: *.deliveroo-data.io
  • Asset type: OTHER
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Note: To be eligible for an award, please ensure your report relates to a deliveroo managed asset and not one run by a third party.
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: *.deliveroo-data.net
  • Asset type: OTHER
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Note: To be eligible for an award, please ensure your report relates to a deliveroo managed asset and not one run by a third party.
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: *.deliveroo-streams.net
  • Asset type: OTHER
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Note: To be eligible for an award, please ensure your report relates to a deliveroo managed asset and not one run by a third party.
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: *.deliveroo.*
  • Asset type: OTHER
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Note: To be eligible for an award, please ensure your report relates to a deliveroo managed asset and not one run by a third party.
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: com.deliveroo.driverapp
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: com.deliveroo.orderapp
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: com.deliveroo.orderapp
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: medium
  • Max severity: critical



  • Asset identifier: com.deliveroo.riderapp
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: medium
  • Confidentiality requirement: medium
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: medium
  • Max severity: critical