What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory row 61; Active program checkbox checked; Bounties minimum displayed $50. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
https://*.api.konghq.com | WILDCARD | Bounty eligible: Yes |
https://us.identity.konghq.com/* | WILDCARD | Bounty eligible: Yes |
https://app.insomnia.rest/ | URL | Bounty eligible: Yes |
http://cloud.konghq.com | URL | Bounty eligible: Yes |
developer.konghq.com | URL | Bounty eligible: Yes |
konghq.com | URL | Bounty eligible: Yes |
Subdomain Takeover - konghq.com | OTHER | Bounty eligible: Yes |
GitHub Actions in our Public Repositories | OTHER | Bounty eligible: Yes |
Insomnia CLI (inso) | DOWNLOADABLE_EXECUTABLES | Bounty eligible: Yes |
Insomnia Desktop Client | DOWNLOADABLE_EXECUTABLES | Bounty eligible: Yes |
Kong Mesh | DOWNLOADABLE_EXECUTABLES | Bounty eligible: Yes |
Kong Gateway Plugins (Kong-Supported Only) | DOWNLOADABLE_EXECUTABLES | Bounty eligible: Yes |
Kong Gateway Enterprise | DOWNLOADABLE_EXECUTABLES | Bounty eligible: Yes |
Kong Gateway OSS | DOWNLOADABLE_EXECUTABLES | Bounty eligible: No |
| Asset | Type | Group / eligibility |
|---|---|---|
https://*.konghq.tech | WILDCARD | Bounty eligible: No |
*.gateways.konghq.com | WILDCARD | Bounty eligible: No |
*.*.edge.gateways.konghq.com | WILDCARD | Bounty eligible: No |
https://kuma.io/ | URL | Bounty eligible: No |
https://insomnia.rest/ | URL | Bounty eligible: No |
https://docs.konghq.com | URL | Bounty eligible: No |
https://httpbin.konghq.com/ | URL | Bounty eligible: No |
Non-Kong GitHub Repositories | OTHER | Bounty eligible: No |
Kong Enterprise Gateway - Sandbox Functionality | OTHER | Bounty eligible: No |
Non-Kong Plugins | DOWNLOADABLE_EXECUTABLES | Bounty eligible: No |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.