Skip to content
BackEsc
Sign in

Epic Games · in scope

Web applications

66 assets in scope

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is an asset the program lists in scope. The first 20 are named here; the program's own page has the full scope.

Open Epic Games on HackerOne

Every one of the 66 is a mark on the map. Named now: 1 to 20, as listed first.

  1. *.3lateral.comWeb applications
  2. *.amplitude-game.comWeb applications
  3. *.artstation.comWeb applications
  4. *.audicagame.comWeb applications
  5. *.cubicmotion.comWeb applications
  6. *.dancecentral.comWeb applications
  7. *.dropmix.comWeb applications
  8. *.easy.acWeb applications
  9. *.epicgames.comWeb applications
  10. *.epicgames.devWeb applications
  11. *.fallguys.comWeb applications
  12. *.fortnite.comWeb applications
  13. *.harmonixmusic.comWeb applications
  14. *.hmxservices.comWeb applications
  15. *.hmxwebservices.comWeb applications
  16. *.mediatonic.co.ukWeb applications
  17. *.oncatapult.comWeb applications
  18. *.psynet.ggWeb applications
  19. *.psyonix.comWeb applications
  20. *.quixel.comWeb applications

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in