Skip to content

HERE Technologies bug bounty programs

here.com Updated

HERE Technologies runs one public program: an Intigriti bug bounty paying up to €2,000 (paused).

Top reward
Not published
Programs
1
1 pays cash
Targets in scope
23
5 types
Last change
12 Nov 2026
1 hour ago

Where to report

The one public program HERE Technologies runs.

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

23 targets.

  • *.data.api.platform.here.com

    Wildcards

  • *.here.com

    Wildcards

  • *.hereapi.com

    Wildcards

  • *.metrics.platform.here.com

    Wildcards

  • *.platform.here.com

    Wildcards

  • *.router.hereapi.com

    Wildcards

  • *.scbe.api.here.com

    Wildcards

  • *.subp-router.hereapi.com

    Wildcards

  • account.api.here.com

    Web

  • account.here.com

    Web

  • listing.here.com

    Web

  • mapcreator.here.com

    Web

  • mobilitygraph.hereapi.com

    Web

  • registry.service.api.platform.here.com

    Web

  • search.hereapi.com

    Web

  • transit.hereapi.com

    Web

  • vector.hereapi.com

    Web

  • xyz.api.here.com

    Web

  • HERE WeGo Android

    Android

  • HERE WeGo iOS

    iOS

  • All other related services owned by HERE

    Products and areas

  • Leaked Service Credentials

    Products and areas

  • Leaked/Compromised Employee Credentials

    Products and areas

No target matches. Try part of a host name, such as the company name.

Recent changes

Reward and scope changes across every HERE Technologies program, newest first.

All changes · RSS feed

About this page

This page gathers every public program listed under here.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.