Bug Bounties

Tor

Powered by: 

Allows bounty splitting: 

Average time to first program response: 101

Average time to bounty awarded null: 84

Average time to report resolved: 84

Handle torproject

Managed program: false

Name: Tor

Offers bounties: true

Offers swag: true

Response efficiency percentage: 75

Submission state: open

Url: https://hackerone.com/torproject

Website: https://www.torproject.org/

In scope:

  • Asset identifier: Orbot
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Services (like the website, bug tracker, and server infrastructure)
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Tor
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://gitlab.torproject.org/tpo/core/tor Supported versions for Tor can be found at https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTorReleases.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Tor Browser
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://gitlab.torproject.org/tpo/applications/tor-browser It's a good start to look at the latest stable, alpha, and nightly builds. The former can be found at https://www.torproject.org/download/ and nightlies can be obtained via http://f4amtbsowhix7rrf.onion/tor-browser-builds/.
  • Integrity requirements: 
  • Max severity: critical