In brief. Allegion is a vulnerability disclosure program on HackerOne. It does not pay bounties. It received 26 reports in the 90 days to November 9, 2026, about 0.2 per in-scope asset.
NR
Unrated
Allegion
3 more reviews needed for a grade
Write a review
Claim this company profile
Work at Allegion? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.
Ask BugRater to submit itReports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.
Program metrics
HackerOne, published
These are HackerOne’s own figures for this program, taken from its public page. Researchers did not report them, and they don't count toward the BugRater grade. Captured 9 Nov 2026.
What it pays, by severity
Critical
amount not published
17 reports
High
amount not published
42 reports
Medium
amount not published
106 reports
Low
amount not published
37 reports
Intake & responsiveness, last 90 days
Reports received
26
in 90 days
Resolved
208
all time, last one 3 days ago
Participants
183
hunters engaged
Response efficiency
81%
meeting its targets, HackerOne’s figure
SLA misses
0
targets missed
Reports received, day by day, last 29 days
25–29
11 Oct
26 reports
9 Nov
Response targets it sets itself
First response
5 days
Triage
10 days
Bounty
30 days
Resolution
60 days
These are targets the program set. They don't show whether it meets them.
Barriers to submitting
Open to submit. HackerOne lists no requirements for submitting a report here.
Over 79 days (55 snapshots): intake up 1 reports; response efficiency down 11 points.
See how this program’s report load compares to others
Reviews
0 publishedNo reviews yet.
Who this program credits
194 creditedResearchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.
| # | Researcher | Reputation | Recognised / submitted |
|---|---|---|---|
| 1 | arielrachamim | 72 | 11 / 19 58% |
| 2 | 0xnafaa | 49 | 7 / 15 47% |
| 2 | cyberantani | 49 | 7 / 7 100% |
| 4 | god_like | 46 | 7 / 11 64% |
| 5 | f50c1e7y | 39 | 9 / 18 50% |
| 6 | cametome006 | 37 | 6 / 6 100% |
| 7 | 0xa1w | 35 | 8 / 17 47% |
| 8 | thehunt3r0x1 | 32 | 6 / 17 35% |
| 9 | luciann | 30 | 5 / 5 100% |
| 9 | snifyak | 30 | 5 / 5 100% |
| 11 | coldfish | 28 | 3 / 3 100% |
| 11 | jurassicbug | 28 | 4 / 5 80% |
| 11 | khaledsel1m | 28 | 3 / 3 100% |
| 14 | mustache | 23 | 4 / 5 80% |
| 15 | cyber_world_01 | 21 | 3 / 4 75% |
| 15 | green-jam | 21 | 3 / 3 100% |
| 15 | kiraadx | 21 | 3 / 14 21% |
| 15 | thebeskarmandalorian | 21 | 3 / 3 100% |
| 19 | ferreiraklet_ | 18 | 4 / 4 100% |
| 19 | j3rry4unt | 18 | 4 / 4 100% |
| 20 | fahimium | 14 | 2 / 2 100% |
| 21 | ahmed_xyz | 16 | 3 / 3 100% |
| 21 | thpless | 16 | 3 / 4 75% |
| 21 | vulnera | 16 | 3 / 7 43% |
| 23 | robertdameti | 14 | 2 / 2 100% |
Showing the top 25 of 194 credited on HackerOne.
Program profile
HackerOne, imported
HackerOne published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 6 Nov 2026.
Responsiveness
80% HackerOne’s figure
Swag
No
Currency
USD
Submissions
Open
Launched
Oct 2022
Scope entries
143 HackerOne’s count
Scope
138 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| *.allegion.com | WILDCARD | submit only | Critical |
| *.allegionengage.com | WILDCARD | submit only | Critical |
| *.isonaspureaccesscloud.com | WILDCARD | submit only | Critical |
| *.my-mobilekey.com | WILDCARD | submit only | Critical |
| *.yonomi.co | WILDCARD | submit only | Critical |
Show all 138 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| 9500IQ / 2800IQ Senior Swing Series Operators | OTHER | submit only | Critical |
| Aero USB RFID Reader | HARDWARE | submit only | Critical |
| allegion.ca | URL | submit only | Critical |
| Axa Remote 2.0 | HARDWARE | submit only | Critical |
| BLEGateway (IF-4041) | HARDWARE | submit only | Critical |
| brio.com.au | URL | submit only | Critical |
| brionz.com | URL | submit only | Critical |
| briouk.com | URL | submit only | Critical |
| briousa.com | URL | submit only | Critical |
| CISA Aero PMS Service (Windows) | OTHER | submit only | Critical |
| CISA Reader App (iMac) | OTHER | submit only | Critical |
| CISA Reader App (Windows) | OTHER | submit only | Critical |
| com.allegion.access.store | APPLE STORE APP ID | submit only | Critical |
| com.allegion.cisa.openx | APPLE STORE APP ID | submit only | Critical |
| com.allegion.cisa.openx_key | GOOGLE PLAY APP ID | submit only | Critical |
| com.allegion.cisa.openxkey | APPLE STORE APP ID | submit only | Critical |
| com.allegion.cisa.smartaccess | APPLE STORE APP ID | submit only | Critical |
| com.allegion.freestyle | APPLE STORE APP ID | submit only | Critical |
| com.allegion.IFkey | APPLE STORE APP ID | submit only | Critical |
| com.allegion.leopard | GOOGLE PLAY APP ID | submit only | Critical |
| com.allegion.schlagemobileaccess | GOOGLE PLAY APP ID | submit only | Critical |
| com.allegion.sense.store | APPLE STORE APP ID | submit only | Critical |
| com.allegion.stingray | GOOGLE PLAY APP ID | submit only | Critical |
| com.allegion.teachin | GOOGLE PLAY APP ID | submit only | Critical |
| com.allegion.tigershark | GOOGLE PLAY APP ID | submit only | Critical |
| com.interflex.key | GOOGLE PLAY APP ID | submit only | Critical |
| com.my-mobilekey.key4friends | APPLE STORE APP ID | submit only | Critical |
| com.schlage.engage | APPLE STORE APP ID | submit only | Critical |
| com.schlage.overtur | APPLE STORE APP ID | submit only | Critical |
| com.simonsvoss.mobilekey.adminapp | APPLE STORE APP ID | submit only | Critical |
| com.simonsvoss.mobilekey.key4android | GOOGLE PLAY APP ID | submit only | Critical |
| Domo Connexa Button | HARDWARE | submit only | Critical |
| Encoder 2 | HARDWARE | submit only | Critical |
| eServer | HARDWARE | submit only | Critical |
| eSigno Lock 2 | HARDWARE | submit only | Critical |
| https://apps.apple.com/au/app/schlage-breeze-guest/id1533768823 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/au/app/schlage-breeze-hotel/id1533768772 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/au/app/schlage-breeze/id1510864627 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/in/app/gainsborough-freestyle/id1522406111 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/la/app/isel/id1220364077 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/la/app/schlage-base/id1634746027 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/key/id1150331435 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/key4friends/id1141846653 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/kryptonite-locks-lights-app/id1534328893 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/mobilekey/id1231074427 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/pure-mobile/id1194728322 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/schlage-home/id1038212933 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/schlage-mobile-access/id1505710549 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/yonomi/id991840741 | APPLE STORE APP ID | submit only | Critical |
| https://apps.apple.com/us/app/zentra-access/id1593437290 | APPLE STORE APP ID | submit only | Critical |
| https://cisasmartaccess.allegion.com/login | OTHER | submit only | Critical |
| https://itunes.apple.com/app/id1038212933 | APPLE STORE APP ID | submit only | Critical |
| https://itunes.apple.com/app/id1462089647 | APPLE STORE APP ID | submit only | Critical |
| https://itunes.apple.com/app/id920140172 | APPLE STORE APP ID | submit only | Critical |
| https://keycontrol.allegion.com/it | OTHER | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.allegion.cisa.smartaccess | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.allegion.freestyle | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.allegion.leopard | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.allegion.schlagemobileaccess | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.allegion.stingray | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.allegion.teachin | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.allegion.tigershark | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.breeze.hotel | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.breeze.lock&hl=en_AU | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.breezehotel.staff&hl=en_US | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.isonas.puremobile&hl=en_US&gl=US | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.schlage.overtur | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.schlage.smart | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.schlageabode.lock&hl=en_NZ | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.simonsvoss.mobilekey.adminapp | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.simonsvoss.mobilekey.key4android | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.sp_expert_connect.app | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.yonomi | GOOGLE PLAY APP ID | submit only | Critical |
| https://play.google.com/store/apps/details?id=com.yudu.kryptonite.na&hl=en_US&gl=US | GOOGLE PLAY APP ID | submit only | Critical |
| Interflex controllers | HARDWARE | submit only | Critical |
| Interflex desktop readers and encoders | HARDWARE | submit only | Critical |
| Interflex Managed Services (cloud) | OTHER | submit only | Critical |
| Interflex Software IF-6020 | OTHER | submit only | Critical |
| Interflex Software IF-6040 | OTHER | submit only | Critical |
| Interflex Software SP-EXPERT | OTHER | submit only | Critical |
| Interflex Terminals access control | HARDWARE | submit only | Critical |
| Interflex Terminals time recording | HARDWARE | submit only | Critical |
| kr.co.imgate.home2.milre | GOOGLE PLAY APP ID | out | None |
| kr.co.imgate.home2.milre-access | APPLE STORE APP ID | out | None |
| kriegerproducts.com | URL | submit only | Critical |
| MyEVO Lock Controller | HARDWARE | submit only | Critical |
| MyEVO RFID Transponder | HARDWARE | submit only | Critical |
| OpenX eCylinder | HARDWARE | submit only | Critical |
| OpenX eHandle | HARDWARE | submit only | Critical |
| OpenX Wall Reader | HARDWARE | submit only | Critical |
| Overtur | OTHER | submit only | Critical |
| Schlage Control | HARDWARE | submit only | Critical |
| Schlage CTE Single Door Controller | HARDWARE | submit only | Critical |
| Schlage Encode | HARDWARE | submit only | Critical |
| Schlage GWE Gateway | HARDWARE | submit only | Critical |
| Schlage LE/LEB | HARDWARE | submit only | Critical |
| Schlage NDE/NDEB | HARDWARE | submit only | Critical |
| Smart Software 4 | OTHER | submit only | Critical |
| staebapp01.allegion.com | URL | out | None |
| stanleyaccess.com | URL | submit only | Critical |
| stczpisupplier.allegion.com | URL | out | None |
| stisupplier.allegion.com | URL | out | None |
| unicelarchitectural.com | URL | submit only | Critical |
| Von Duprin RU/RM | HARDWARE | submit only | Critical |
| Wall Reader 2 | HARDWARE | submit only | Critical |
| www.allegion.ca | URL | submit only | Critical |
| www.allegion.co.uk | URL | submit only | Critical |
| www.ausloc.com | URL | submit only | Critical |
| www.axasecurity.com | URL | submit only | Critical |
| www.boss-idc.com | URL | submit only | Critical |
| www.bossdoorcontrols.com | URL | submit only | Critical |
| www.bricard.com | URL | submit only | Critical |
| www.cisa.com | URL | submit only | Critical |
| www.fireglass.com | URL | submit only | Critical |
| www.fshlocking.com.au | URL | submit only | Critical |
| www.gainsboroughhardware.com.au | URL | submit only | Critical |
| www.interflex.com | URL | submit only | Critical |
| www.interflex.de | URL | submit only | Critical |
| www.isonas.com | URL | submit only | Critical |
| www.krytonitelock.com | URL | submit only | Critical |
| www.milre.com | URL | out | None |
| www.normbau.de | URL | submit only | High |
| www.planopunkt.com | URL | submit only | Critical |
| www.republicdoor.com | URL | submit only | Critical |
| www.schlage.com | URL | submit only | Critical |
| www.simons-voss.com | URL | submit only | Critical |
| www.specadsystems.com | URL | submit only | Critical |
| www.trelock.com | URL | submit only | Critical |
| www.yonomi.com | URL | submit only | Critical |
| XE360 | HARDWARE | submit only | Critical |
| XE360 with RealSync | HARDWARE | submit only | Critical |
| zentra.co | URL | submit only | Critical |
| zeroplus.co.uk | URL | submit only | Critical |
HackerOne lists 143 scope entries. Its public listing groups many assets under one label, so we show identical entries once.