Stripe bug bounty programs
stripe.com Updated
Stripe runs three public programs: a HackerOne bug bounty paying up to $15,000, a Sorona bug bounty paying up to $8,500 and a self-hosted bug bounty.
- Top reward
- $15,000
- HackerOne
- Programs
- 3
- 3 pay cash
- Targets in scope
- 63
- 6 types, deduplicated
- Last change
- 5 Nov 2026
- 1 week ago
Where to report
3 programs, side by side. Report where the affected target is in scope; when two programs cover it, pick the one that pays more.
Start here
Stripe
HackerOne · Pays the most of the 3 programs: up to $15,000.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
Stripe
HackerOne · Bug bounty |
$15k (highest) | $7,500 | $2,500 | $500 | $15,000 | – | Required | 1 hour average | Open |
|
Stripe Agent Toolkit
Sorona · Bug bounty |
– | $8,500 (highest) | $3,125 (highest) | $625 (highest) | $8,500 | Partial | – | – | Open |
|
Stripe
Self-hosted · Bug bounty |
– | – | – | – | Not published | None | – | – | Open |
-
- Critical
- $15k (highest)
- High
- $7,500
- Medium
- $2,500
- Low
- $500
- KYC
- Required
- First response
- 1 hour average
-
- Critical
- –
- High
- $8,500 (highest)
- Medium
- $3,125 (highest)
- Low
- $625 (highest)
- Safe harbor
- Partial
-
- Safe harbor
- None
Amounts are the top reward per severity in the currency each program pays. Green marks the highest per severity. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
63 targets across all 3 programs, each listed once with the programs that cover it. 10 excluded.
-
Every other non-archived, non-sample repository Stripe authors or maintains under github.com/stripe, at the same critical maximum severity
Products and areas
Covered by Sorona
-
mcp.stripe.com, Stripe's hosted remote MCP server, a separate URL asset on the same default row and the service form of the toolkit's threat model
Products and areas
Covered by Sorona
-
stripe/ai in full: the tool definitions and parameter schemas, the authorisation surface that decides which Stripe operations a model may call, credential handling, and the Node and Python packages published from the repository
Products and areas
Covered by Sorona
-
The adapters it ships for LangChain, CrewAI, the Vercel AI SDK, the OpenAI Agents SDK and MCP
Products and areas
Covered by Sorona
-
The Stripe language SDKs generally, covered by the same Stripe SDKs asset and the place the toolkit's calls ultimately land
Products and areas
Covered by Sorona
-
Two structured scopes carry this. The Stripe SDKs asset names the Agent Toolkit outright and gives github.com/stripe/ai as its source, and the separate Stripe Open Source asset covers the open source projects Stripe authors or maintains under github.com/stripe, restricted to non-archived, non-demo and non-sample projects. Both are bounty-eligible at maximum severity critical and both sit on the program's default row
Products and areas
Covered by Sorona
No target matches. Try part of a host name, such as the company name.
Out of scope 10
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
*.getbouncer.com
HackerOne
-
Anyone Stripe's sanctions and jurisdiction screening excludes, which is applied before a bounty can be paid
Sorona
-
Archived repositories, which the Stripe Open Source scope excludes explicitly
Sorona
-
Connector state-desync reports that presuppose the attacker already holds a secret key: "Reports that require a secret key as a prerequisite to desynchronize state between a cart/payment and the connector will be closed as Informative"
Sorona
-
Demo and sample repositories, including the stripe-samples org content that the product scopes link out to
Sorona
-
Forks of upstream projects, unless the reported functionality is one Stripe itself uses
Sorona
-
Infrastructure projects such as smokescreen and munkisrv, whose threat model Stripe assesses against its own internal usage rather than against yours
Sorona
-
Onboarding Verification Link Crawling
HackerOne
-
Privy findings, which route to a separate program rather than this one
Sorona
-
Stripe Third Party Apps and Integrations
HackerOne
Recent changes
Reward and scope changes across every Stripe program, newest first.
-
Cut HackerOne
Top reward $25,000 to $15,000.
-
Scope + HackerOne
Added to scope: stripe.com
-
Scope + HackerOne
Added to scope: files.stripe.com
-
Scope + HackerOne
Added to scope: stripe.dev
Recent CVEs
Published vulnerabilities in Stripe products, from the NVD.
-
CVE-2024-45401 High
stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --archive-path flags can overwrite arbitrary files. The update in version 1.21.3 addresses the path traversal vulnerability
-
CVE-2024-45401 High
stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --archive-path flags can overwrite arbitrary files. The update in version 1.21.3 addresses the path traversal vulnerability
-
CVE-2024-45401 High
stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --archive-path flags can overwrite arbitrary files. The update in version 1.21.3 addresses the path traversal vulnerability
-
CVE-2023-23315 Critical
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
-
CVE-2023-23315 Critical
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
-
CVE-2023-23315 Critical
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The method `stripejsValidationModuleFrontController::initContent()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
-
CVE-2022-29188 Medium
Smokescreen is an HTTP proxy. The primary use case for Smokescreen is to prevent server-side request forgery (SSRF) attacks in which external attackers leverage the behavior of applications to connect to or scan internal infrastructure. Smokescreen also offers an option to deny access to additional (e.g., external) URLs by way of a deny list. There was an issue in Smokescreen that made it possible
-
CVE-2022-29188 Medium
Smokescreen is an HTTP proxy. The primary use case for Smokescreen is to prevent server-side request forgery (SSRF) attacks in which external attackers leverage the behavior of applications to connect to or scan internal infrastructure. Smokescreen also offers an option to deny access to additional (e.g., external) URLs by way of a deny list. There was an issue in Smokescreen that made it possible
About this page
This page gathers every public program listed under stripe.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.