Scope
We will only pay out bounties related to Slack when the following conditions apply:
- The exploit is due to HQ's mistake and/or negligence
- The exploit is not in a community ran bot
- The exploit is not related due features of the Slack platform (e.g. emails on Slack accounts being visible via the API)
Please note that if you find an issue in Slack itself, report that directly to Slack here: https://hackerone.com/slack?type=team