vulns.co
/
GKData.io MCP

HackerOne · 2 min read

Mozilla Web Bug Bounty

Paid Bounty

Open current program Reviewed policy

What this record establishes

Reviewed policy

An individually reviewed public policy is linked to this program page.

Read the reviewed policy profile →

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 24 published rows
AssetTypeGroup / eligibility
addons.allizom.orgURLBounty eligible: Yes
developer.mozilla.orgURLBounty eligible: Yes
accounts.firefox.comURLBounty eligible: Yes
vpn.mozilla.orgURLBounty eligible: Yes
relay.firefox.comURLBounty eligible: Yes
www.mozilla.orgURLBounty eligible: Yes
support.mozilla.orgURLBounty eligible: Yes
hg.mozilla.orgURLBounty eligible: Yes
monitor.mozilla.orgURLBounty eligible: Yes
aus5.mozilla.orgURLBounty eligible: Yes
bugzilla.mozilla.orgURLBounty eligible: Yes
crash-reports.allizom.orgURLBounty eligible: Yes
crash-stats.allizom.orgURLBounty eligible: Yes
firefox-ci-tc.services.mozilla.comURLBounty eligible: Yes
firefox.settings.services.mozilla.comURLBounty eligible: Yes
lando.services.mozilla.comURLBounty eligible: Yes
merino.services.mozilla.comURLBounty eligible: Yes
phabricator.allizom.orgURLBounty eligible: Yes
sync.services.mozilla.comURLBounty eligible: Yes
www.firefox.comURLBounty eligible: Yes
pontoon.allizom.orgURLBounty eligible: Yes
Product DeliveryOTHERBounty eligible: Yes
Mozilla Ad Routing ServiceOTHERBounty eligible: Yes
Firefox Homepage NewtabOTHERBounty eligible: Yes
Out of scope · 0 published rows
AssetTypeGroup / eligibility
No rows captured. This does not establish that the program has no assets or restrictions.

Capture limits

  • Policy and September 11, 2026 notice were directly reviewed in the browser.
  • Displayed rewards during the web-program pause do not imply general submission availability.
  • Only dollar signs appear; ISO currency and normalized bounds remain null. Reopening is an expectation, not a confirmed future event.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03

Appears in Profile. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

d5550c789111 · JSON exports & schemas · CC BY 4.0 content / MIT software