Legacy program discovery index¶
HTML page metadata is not proof of an active public program. This legacy discovery index no longer publishes candidates. Use the current public scope directory, which independently verifies HackerOne's anonymous program state and complete scope.
- Revalidated: 2026-10-06
- Remaining independently verified legacy entries: 0
Passive OSINT Notes (Non-invasive)¶
- Do not log in or use private scope information.
- For each program, consider checking publicly available artifacts such as:
- the program landing page for policy summaries
- organization security contact pages (e.g.,
/.well-known/security.txtwhen the primary domain is known) - public write-ups / advisories (careful: may contain outdated scope)
Program List¶
| Program | Handle | Type | Lastmod (sitemap) | URL |
|---|---|---|---|---|
The old HTML-only publication command is disabled. Removed entries remain recoverable in Git history; they are not part of the deployed public wiki.