Basecamp bug bounty programs

Basecamp programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
BA Basecamp HackerOne · Bug bounty	$10k	$4,999	$999	$249	$10,000	–	–	15 hours average	Open

• BA

  Basecamp

  HackerOne · Bug bounty

  Open

  Top reward

  $10k

  Critical

  $10k

  High

  $4,999

  Medium

  $999

  Low

  $249

  First response

  15 hours average

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• *.hey.com

  Wildcards Critical

• app.basecamp.com

  Web Critical

• app.fizzy.do

  Web Critical No bounty

• launchpad.37signals.com

  Web Critical

• world.hey.com

  Web Critical

• com.basecamp.bc3

  Android Critical

• com.basecamp.hey

  Android Critical

• com.basecamp.bc3-ios

  iOS Critical

• com.hey.app.ios

  iOS Critical

• https://github.com/basecamp/once-campfire

  Source code High No bounty

• https://github.com/basecamp/trix

  Source code Critical No bounty

• https://github.com/basecamp/writebook

  Source code High No bounty

• basecamp-setup.exe

  Desktop and binaries Critical

• Basecamp.app

  Desktop and binaries Critical

• hey-mail

  Desktop and binaries Critical

• HEY.app

  Desktop and binaries Critical

• HEY.exe

  Desktop and binaries Critical

No target matches. Try part of a host name, such as the company name.