What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Directory row 109; Active program checkbox checked; Bounties minimum displayed $50. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
http://--your-own-1password-account--.1password.com | URL | Bounty eligible: Yes |
<Your own 1Password account> —> Latest stable, beta, or nightly Command Line Interface (CLI) | OTHER | Bounty eligible: Yes |
<Your own 1Password account> —> Latest stable, beta, or nightly Browser Extension (Chrome, Brave, Firefox, Edge, and Safari) | OTHER | Bounty eligible: Yes |
https://events.1password.com/api/ | API | Bounty eligible: Yes |
| Asset | Type | Group / eligibility |
|---|---|---|
*.agilebits.com | WILDCARD | Bounty eligible: No |
https://support.1password.com | URL | Bounty eligible: No |
https://www.1password.com/ | URL | Bounty eligible: No |
All other domains, subdomains, and 1Password Accounts that are not owned by you, including accounts where you are a user but not the owner, are out of scope. | OTHER | Bounty eligible: No |
Capture limits
- Current policy and restrictions were read in the browser; static retrieval returned a JavaScript shell.
- The normalized maximum is the exceptional challenge ceiling, not the ordinary reward cap. Normalized minimum is null to avoid conflating schedules.
- The scope page has stricter ownership language than general permission wording; this summary preserves the stricter restriction.
- Policy displayed September 25, 2026 update. Older separate-program challenge descriptions are superseded by current policy.
- Published structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty, Profile. No identity match is inferred from a shared company name.