Shopify Open Source / HackerOne
Shopify admin, storefront, apps, Hydrogen, plus a well-known open-source bounty streak.
Tags: vendor, hackerone, ecommerce
- Program model
- Vendor on HackerOne
- Regions
- Global
- Payout
- USD via HackerOne
Specialties: web, apps, graphql, opensource
How to approach it
Partner apps and custom-app OAuth are where a lot of the modern bugs live. Read the merchant vs partner distinction.
- You need a Partner account and a development store. Do not test live merchants.
- Their disclosed reports are a masterclass in what they will pay.