Work at Adobe? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
HackerOne’s own figures for this program, read from its public page, not reported by researchers and not part of the BugRater grade. Captured 14 Sep 2026.
What it pays, by severity
$2,650,000 paid to researchers in total, $260,000 of it in the last 90 days. Lifetime figure as HackerOne prints it: evidence this program has paid, not a promise about any one report.
Intake & responsiveness · last 90 days
Response targets it sets itself
A target the program declared, not a measurement of it being met.
Getting in the door
Over 25 days (14 snapshots): intake down 178 reports; response efficiency down 1 points; 90-day payout down $35,000.
Reviews
0 publishedNo reviews yet.
Who this program credits
2,185 creditedResearchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.
| # | Researcher | Reputation | Recognised / submitted |
|---|---|---|---|
| 1 | zdi | 6,197 | 867 / 886 98% |
| 2 | blaklis | 5,268 | 93 / 218 43% |
| 2 | ba4fe4ca95021d367f8a574 | 601 | 87 / 134 65% |
| 3 | todayisnew | 3,538 | 506 / 586 86% |
| 4 | eboda | 2,587 | 57 / 105 54% |
| 5 | anonymous_blackzero | 2,489 | 388 / 429 90% |
| 6 | bau1u | 1,695 | 65 / 127 51% |
| 7 | wohlie | 1,506 | 40 / 48 83% |
| 8 | fdeleite | 1,477 | 208 / 222 94% |
| 9 | thaivu | 1,432 | 218 / 245 89% |
| 10 | nbxiglk | 1,164 | 27 / 41 66% |
| 11 | akashhamal0x01 | 1,107 | 37 / 97 38% |
| 12 | mpchadwick | 1,039 | 43 / 47 91% |
| 13 | supermancyber | 1,023 | 56 / 89 63% |
| 14 | sheikhrishad0 | 945 | 104 / 136 76% |
| 15 | arielrachamim | 909 | 119 / 134 89% |
| 16 | reillyb | 800 | 34 / 41 83% |
| 17 | yjdfy | 707 | 103 / 133 77% |
| 18 | khalidamin | 679 | 97 / 117 83% |
| 19 | n0ob_hunter | 677 | 139 / 251 55% |
| 20 | 0x0doteth | 663 | 10 / 39 26% |
| 20 | linkks | 310 | 45 / 84 54% |
| 21 | d0xing | 648 | 59 / 60 98% |
| 22 | hazemhussien99 | 584 | 22 / 27 81% |
| 23 | sameerphad72 | 546 | 83 / 89 93% |
Showing the top 25 of 2,185 credited on HackerOne.
Facts published by HackerOne on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 30 Sep 2026.
Scope
178 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| *.acrobat.adobe.com | WILDCARD | ✓ bounty | Critical |
| *.lightroom.adobe.com | OTHER | ✓ bounty | Critical |
| account.adobe.com | URL | ✓ bounty | Critical |
| account.magento.com | URL | ✓ bounty | Critical |
| accounts.magento.cloud | URL | ✓ bounty | Critical |
Show all 178 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Acrobat AI Assistant | OTHER | ✓ bounty | Critical |
| Acrobat Create Podcast | OTHER | ✓ bounty | Critical |
| Acrobat Create Presentations | OTHER | ✓ bounty | Critical |
| Acrobat PDF Spaces | OTHER | ✓ bounty | Critical |
| acrobat.adobe.com | URL | ✓ bounty | Critical |
| adminconsole.adobe.com | URL | ✓ bounty | Critical |
| Adobe Commerce, Commerce B2B and Commerce Open Source | OTHER | ✓ bounty | Critical |
| adobe.fresco.ios | APPLE STORE APP ID | ✓ bounty | Critical |
| adobeid-na1.services.adobe.com | URL | ✓ bounty | Critical |
| auth.services.adobe.com | URL | ✓ bounty | Critical |
| Behance Freelance Job creation | OTHER | ✓ bounty | Critical |
| C2PA Tool | OTHER | ✓ bounty | Critical |
| ColdFusion | DOWNLOADABLE EXECUTABLES | ✓ bounty | Critical |
| com.adobe.Adobe-Reader | APPLE STORE APP ID | ✓ bounty | Critical |
| com.adobe.lrmobile | APPLE STORE APP ID | ✓ bounty | Critical |
| com.adobe.PSMobile | APPLE STORE APP ID | ✓ bounty | Critical |
| com.adobe.reader | GOOGLE PLAY APP ID | ✓ bounty | Critical |
| com.adobe.scan.android | GOOGLE PLAY APP ID | ✓ bounty | Critical |
| com.adobe.scan.ios | APPLE STORE APP ID | ✓ bounty | Critical |
| com.adobe.workfront | GOOGLE PLAY APP ID | ✓ bounty | Critical |
| com.iphone.workfront | APPLE STORE APP ID | ✓ bounty | Critical |
| commercemarketplace.adobe.com | URL | ✓ bounty | Critical |
| contributor.stock.adobe.com | URL | ✓ bounty | Critical |
| Express AI Assistant | OTHER | ✓ bounty | Critical |
| Firefly Image Models | OTHER | ✓ bounty | Critical |
| Firefly Video Model | OTHER | ✓ bounty | Critical |
| firefly.adobe.com | URL | ✓ bounty | Critical |
| fonts.adobe.com | URL | ✓ bounty | Critical |
| http://federatedid-na1.services.adobe.com | URL | ✓ bounty | Critical |
| http://ims-na1.adobelogin.com | URL | ✓ bounty | Critical |
| https://github.com/contentauth/c2pa-js | SOURCE CODE | ✓ bounty | Critical |
| https://github.com/contentauth/c2pa-rs | SOURCE CODE | ✓ bounty | Critical |
| imagine.magento.com | URL | ✓ bounty | Critical |
| learningmanager.adobe.com | URL | ✓ bounty | Critical |
| learningmanagerstage4.adobe.com | URL | ✓ bounty | Critical |
| Lightroom "Edit suggestions" Tech Preview | OTHER | ✓ bounty | Critical |
| Lightroom AI Edits | OTHER | ✓ bounty | Critical |
| Magento 2 Commerce, Commerce B2B and Open Source | OTHER | ✓ bounty | Critical |
| magento.com | URL | ✓ bounty | Critical |
| magentocommerce.com | URL | ✓ bounty | Critical |
| magentolive.com | URL | ✓ bounty | Critical |
| marketplace.magento.com | URL | ✓ bounty | Critical |
| net.s2stagehance.com | URL | ✓ bounty | Critical |
| new.express.adobe.com | URL | ✓ bounty | Critical |
| photos.adobe.io | URL | ✓ bounty | Critical |
| Photoshop AI Assistant | OTHER | ✓ bounty | Critical |
| photoshop.adobe.com | URL | ✓ bounty | Critical |
| portfolio.ccpsx.com | URL | ✓ bounty | Critical |
| repo.magento.com | URL | ✓ bounty | Critical |
| Stock AI Studio | OTHER | ✓ bounty | Critical |
| u.magento.com | URL | ✓ bounty | Critical |
| *.acrobat.com | URL | submit only | Critical |
| *.adobe.com | URL | submit only | Critical |
| *.adobe.io | URL | submit only | Critical |
| *.adobeaemcloud.com | URL | submit only | Critical |
| *.adobeconnect.com | URL | submit only | Critical |
| *.adobecqms.net | URL | submit only | Critical |
| *.bizible.com | URL | submit only | Critical |
| *.marketo.com | URL | submit only | Critical |
| *.mixamo.com | URL | submit only | Critical |
| *.omniture.com | URL | submit only | Critical |
| *.phonegap.com | URL | submit only | Critical |
| *.proofhq.com | URL | submit only | Critical |
| *.scene7.com | URL | submit only | Critical |
| *.testdrive.workfront.com | URL | submit only | Critical |
| *.tt.omtrdc.net | URL | submit only | Critical |
| *.tubemogul.com | URL | submit only | Critical |
| *.typekit.com | URL | submit only | Critical |
| accounts.adobe.com | URL | submit only | Critical |
| accounts.frame.io | URL | submit only | Critical |
| Acrobat Reader | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| acrobatoauth.adobe.com | URL | submit only | Critical |
| Adobe Acrobat Reader DC | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Adobe AIR | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Adobe Analytics | OTHER | submit only | Critical |
| Adobe Campaign | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Adobe Experience Manager (AEM) | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| adobeid.services.adobe.com | URL | submit only | Critical |
| adobelogin.com | URL | submit only | Critical |
| adobestock.com | URL | submit only | Critical |
| After Effects | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Animate | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| api-v2.frame.io | URL | submit only | Critical |
| api.frame.io | URL | submit only | Critical |
| app.frame.io | URL | submit only | Critical |
| applications.frame.io | URL | submit only | Critical |
| assets.adobe.com | URL | submit only | Critical |
| Audition | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| behance.net | URL | out | None |
| Bridge | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| campaign.adobe.com | URL | submit only | Critical |
| captivateprime.adobe.com | URL | submit only | Critical |
| cbconnection.adobe.com | URL | submit only | Critical |
| Character Animator | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| cloud.acrobat.com | URL | submit only | Critical |
| coldfusion.adobe.com | URL | submit only | Critical |
| com.adobe.echosign | GOOGLE PLAY APP ID | submit only | Critical |
| com.adobe.fas | GOOGLE PLAY APP ID | submit only | Critical |
| com.adobe.lrmobilephone | APPLE STORE APP ID | submit only | Critical |
| com.frame.FrameIO | APPLE STORE APP ID | submit only | Critical |
| com.workfront.android.aware | GOOGLE PLAY APP ID | submit only | Critical |
| commerce.adobe.com | URL | submit only | Critical |
| community.adobe.com | URL | submit only | Critical |
| components.frame.io | URL | submit only | Critical |
| ContentCal | OTHER | submit only | Critical |
| contributors.stock.adobe.com | URL | submit only | Critical |
| create.adobe.com | URL | submit only | Critical |
| Creative Cloud Desktop Application | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| creative.adobe.com | URL | submit only | Critical |
| creativecloud.adobe.com | URL | submit only | Critical |
| developer.frame.io | URL | submit only | Critical |
| Digital Editions | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Dimension | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Distiller | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| documentcloud.adobe.com | URL | submit only | Critical |
| documents.adobe.com | URL | submit only | Critical |
| Dreamweaver | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| edex.adobe.com | URL | submit only | Critical |
| exchange.adobe.com | URL | submit only | Critical |
| experience.adobe.com | URL | submit only | Critical |
| experiencecloud.adobe.com | URL | submit only | Critical |
| Flash Player | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Fonts | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Framemaker | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| gps.echosign.com | URL | submit only | Critical |
| helpx.adobe.com | URL | submit only | Critical |
| https://contentcredentials.org/ | URL | out | None |
| https://contentcredentials.org/verify | URL | submit only | Critical |
| https://github.com/adobe/* | SOURCE CODE | submit only | Critical |
| Illustrator | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| InCopy | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| InDesign | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| licenses.adobe.com | URL | submit only | Critical |
| licensing.adobe.com | URL | submit only | Critical |
| Lightroom | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Lightroom Classic | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| lightroom.adobe.com | URL | submit only | Critical |
| Magento 1 Enterprise (Commerce) and Community (Open Source) Editions | OTHER | out | None |
| marketing-assets.adobe.com | URL | submit only | Critical |
| marketing.adobe.com | URL | submit only | Critical |
| marketo.com | URL | submit only | Critical |
| Media Encoder | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| mobilemarketing.adobe.com | URL | submit only | Critical |
| nicetryapril.na1.echosignsandbox.com | URL | submit only | Critical |
| Other | OTHER | submit only | Critical |
| partners.adobe.com | URL | submit only | Critical |
| Photoshop | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| photoshop.com | URL | submit only | Critical |
| platform.adobe.com | URL | submit only | Critical |
| portfolio.adobe.com | URL | submit only | Critical |
| Prelude | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Premiere Elements | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Premiere Pro | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| Premiere Rush | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| secure.echosign.com | URL | submit only | Critical |
| shop.adobe.com | URL | submit only | Critical |
| socket.frame.io | URL | submit only | Critical |
| spark.adobe.com | URL | submit only | Critical |
| status.adobe.com | URL | submit only | Critical |
| stock.adobe.com | URL | submit only | Critical |
| stream.frame.io | URL | submit only | Critical |
| Substance 3D | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| substance3d.com | URL | submit only | Critical |
| theblog.adobe.com | URL | submit only | Critical |
| Tier 1 | OTHER | submit only | None |
| Tier 2 | OTHER | submit only | None |
| Tier 3 (AI Bonus Tier) | OTHER | out | None |
| updates.frame.io | URL | submit only | Critical |
| workflow.frame.io | URL | submit only | Critical |
| Workfront Outlook Plugin | OTHER | submit only | Critical |
| XD | DOWNLOADABLE EXECUTABLES | submit only | Critical |
| xd.adobe.com | URL | submit only | Critical |
| XMP Toolkit | DOWNLOADABLE EXECUTABLES | submit only | Critical |