Programs Scope lookupScope New

/to search

☰menu

// sync across devices

Watchlist
Compare

Platform

Asset type

Min reward

Program

Sort

The bug bounty market, live-indexed. Every public program across five platforms, filterable in one view.

☕buy me a coffee

Product

Programs
Compare
Watchlist
Scope lookup
New programs
RSS feed

Platforms

HackerOne
Bugcrowd
Intigriti
YesWeHack
federacyFederacy

Resources

How it works
Data source
Hacktivity
Writeups
disclose.io

© 2026 bounty.index·not affiliated with any platform·built byVarun·X·GitHub

data · arkadiyt/bounty-targets-data·MIT licensed·updated daily

Superhuman (formerly Grammarly) Bug Bounty Program on Hackerone

programs/HackerOne/superhuman

Superhuman (formerly Grammarly)

HackerOne·28 in-scope · 2 out·updated 2d ago

bountymanagedopen

In scope

028

wildcards05

+*.coda.io· critical
+*.grammarly.com· critical
+*.grammarly.io· critical

History

1 event

2026-08-06
first indexed
2d ago · 28 in-scope assets

// only one snapshot on record — changes appear from the next ingest onward

+*.grammarlyaws.com· critical

+*.superhuman.com· critical

urls10

+id.superhuman.com· critical
+mail.superhuman.com· critical
+settings.superhuman.com· critical
+superhuman.com· critical
+app.grammarly.com· critical
+coda.grammarly.com· critical
+coda.io· critical
+codacontent.io· critical
+codahosted.io· critical
+gateway.superhuman.com· critical

ios02

+io.coda· critical
+com.grammarly.keyboard· critical

other11

+io.coda.codaapp· critical
+Capture the Flag· critical
+Coda Chrome Extension· high
+Grammarly Browser Extensions· critical
+Grammarly Desktop for Windows· critical
+Grammarly Desktop for macOS· critical
+Superhuman Go· critical
+Superhuman Mail· none
+Superhuman Mail Chrome Extension· critical
+Superhuman Mail Desktop App· critical
+com.grammarly.android.keyboard· critical

Out of scope

002

urls01

−status.coda.io

other01

−Third party external services