PP
HackerOneOffers Rewards
Palantir Public
Palantir Public appears to run a bug bounty or vulnerability disclosure program on HackerOne. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (2)
Any public (Internet-facing) infrastructure owned and operated by Palantir. ( This is an expansive scope to help you identify security issues in any Internet-facing infrastructure we run. All domains and subdomains owned and operated by Palantir are included within the scope. These may include, but are not limited to: * palantir.com
* palantir.tech
* palantir.build
* palantircloud.com
* palantircloud.co.uk
* palantirfoundry.com
* palantirfoundry.co.uk
* palantirfoundry.de
* palantirfoundry.fr
* palantirfoundry.com.au * palantirgov.com
* foundrygov.com All assets and services on these, and other Palantir-owned domains (unless otherwise noted as out-of-scope) may be eligible for awards. This may include cloud resources, firewalls, network devices, servers, and other assets or applications. )
Any public cloud (e.g. Amazon AWS, Microsoft Azure) resource or infrastructure operated and managed by Palantir. ( - Public cloud storage accounts. (e.g. AWS S3 buckets, Azure data blobs)
- Public cloud compute servers. (e.g. AWS EC2 instances, Azure Virtual Machines) )
Out of Scope (15)
Any infrastructure or assets related to Silk, FancyThat, or other Palantir acquisitions.
blog.palantir.com
certification.palantir.com
community.palantir.com
explore.palantir.com
gear.palantir.com
go.palantir.com
info.palantir.com
investors.palantir.com
learn.palantir.com ( 3rd-party certification website/service. )
palantirfedstart.com ( Any domain related to FedStart or Palantir FedStart. )
palantirpacusa.com ( Any domain related to the Palantir PAC. )
sandbox.training.palantir.com
store.palantir.com
training.palantir.com