What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory row 434; Active program checkbox checked; Bounties minimum displayed $500. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
*.shopifycs.com | WILDCARD | Bounty eligible: Yes |
*.pci.shopifyinc.com | WILDCARD | Bounty eligible: Yes |
*.shopify.io | WILDCARD | Bounty eligible: Yes |
*.shopify.com | WILDCARD | Bounty eligible: Yes |
*.shopifykloud.com | WILDCARD | Bounty eligible: Yes |
*.shopifycloud.com | WILDCARD | Bounty eligible: Yes |
your-store.myshopify.com | URL | Bounty eligible: Yes |
partners.shopify.com | URL | Bounty eligible: Yes |
accounts.shopify.com | URL | Bounty eligible: Yes |
shop.app | URL | Bounty eligible: Yes |
shopify.plus | URL | Bounty eligible: Yes |
arrive-server.shopifycloud.com | URL | Bounty eligible: Yes |
admin.shopify.com | URL | Bounty eligible: Yes |
linkpop.com | URL | Bounty eligible: Yes |
shopifyinbox.com | URL | Bounty eligible: Yes |
https://github.com/Shopify/* | SOURCE_CODE | Bounty eligible: Yes |
Shopify Mobile Applications | OTHER | Bounty eligible: Yes |
Authentication & ATO | OTHER | Bounty eligible: Yes |
Shopify Developed Apps | OTHER | Bounty eligible: Yes |
Shopify Third Party Apps | OTHER | Bounty eligible: No |
Shopify Third Party Store | OTHER | Bounty eligible: No |
| Asset | Type | Group / eligibility |
|---|---|---|
*.email.shopify.com | WILDCARD | Bounty eligible: No |
cdn.shopify.com | URL | Bounty eligible: No |
livechat.shopify.com | URL | Bounty eligible: No |
community.shopify.com | URL | Bounty eligible: No |
community.shopify.dev | URL | Bounty eligible: No |
investors.shopify.com | URL | Bounty eligible: No |
academy.shopify.com | URL | Bounty eligible: No |
Other | OTHER | Bounty eligible: No |
supplier-portal.shopifycloud.com | OTHER | Bounty eligible: No |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.