Skip to content
Connect AISign inSign up free

Bug bounty program

CA

Canva

Open on BugcrowdAtlas
Platform
Bugcrowd
Bounties
Pays
Assets in scope
18
Disclosed reports
0
Subdomains
2,392
Vendor on CyberSIXT
Canva (36 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains2,392

Root:canva.com
Scope:In scope
Name suggests
First seen
Text fileClear filters316 names
Subdomains of Canva
NameScopeFirst seen
1p-sc.canva.comIn scope2026-11-14
1p-sc-test.canva.comtestIn scope2026-11-14
33584729ba3f.canva.comIn scope2026-11-14
93165-www.canva.comIn scope2026-11-14
about.canva.comIn scope2026-11-14
ar-eg.about.canva.comIn scope2026-11-14
da-dk.about.canva.comIn scope2026-11-14
de-de.about.canva.comIn scope2026-11-14
en-in.about.canva.comIn scope2026-11-14
es-ar.about.canva.comIn scope2026-11-14
es-co.about.canva.comIn scope2026-11-14
es-es.about.canva.comIn scope2026-11-14
es-mx.about.canva.commailIn scope2026-11-14
es-us.about.canva.comIn scope2026-11-14
fr-fr.about.canva.comIn scope2026-11-14
id-id.about.canva.comIn scope2026-11-14
it-it.about.canva.comIn scope2026-11-14
ja-jp.about.canva.comIn scope2026-11-14
ko-kr.about.canva.comIn scope2026-11-14
ms-my.about.canva.comIn scope2026-11-14
nb-no.about.canva.comIn scope2026-11-14
nl-nl.about.canva.comIn scope2026-11-14
pl-pl.about.canva.comIn scope2026-11-14
pt-br.about.canva.comIn scope2026-11-14
pt-pt.about.canva.comIn scope2026-11-14
ru-ru.about.canva.comIn scope2026-11-14
sv-se.about.canva.comIn scope2026-11-14
th-th.about.canva.comIn scope2026-11-14
tr-tr.about.canva.comIn scope2026-11-14
uk-ua.about.canva.comIn scope2026-11-14
vi-vn.about.canva.comIn scope2026-11-14
zh-cn.about.canva.comIn scope2026-11-14
zh-dotcn.about.canva.comIn scope2026-11-14
zh-hk.about.canva.comIn scope2026-11-14
zh-tw.about.canva.comIn scope2026-11-14
about2.canva.comIn scope2026-11-14
advocates.canva.comIn scope2026-11-14
afe.canva.comIn scope2026-11-14
affiliates.canva.comIn scope2026-11-14
album.canva.comIn scope2026-11-14
alpha.canva.comstagingIn scope2026-11-14
android.canva.comIn scope2026-11-14
animator.canva.comIn scope2026-11-14
api.canva.comapiIn scope2026-11-14
api-arm64-gw.canva.comapiIn scope2026-11-14
app-resources.canva.comIn scope2026-11-14
apps.canva.comIn scope2026-11-14
assets.canva.comIn scope2026-11-14
assistant-data-bucket.canva.comdataIn scope2026-11-14
attend.canva.comIn scope2026-11-14
audio-ftp.canva.comdataIn scope2026-11-14
audio-private.canva.cominternalIn scope2026-11-14
audio-public.canva.comIn scope2026-11-14
audio-upload.canva.comdataIn scope2026-11-14
avatar.canva.comIn scope2026-11-14
b2bevents.canva.comIn scope2026-11-14
banner-static.canva.comIn scope2026-11-14
blog.canva.comIn scope2026-11-14
build.canva.comciIn scope2026-11-14
button-demo.canva.comtestIn scope2026-11-14
buy-zippotton-demo.canva.comtestIn scope2026-11-14
calendar.canva.comIn scope2026-11-14
careers.canva.comIn scope2026-11-14
cast-player-updates.canva.comIn scope2026-11-14
category-public.canva.comIn scope2026-11-14
cfe.canva.comIn scope2026-11-14
chatgpt-plugin.canva.comIn scope2026-11-14
chunk-composing.canva.comIn scope2026-11-14
cl.canva.comIn scope2026-11-14
claude.canva.comIn scope2026-11-14
clb03-v110.canva.comIn scope2026-11-14
community.canva.comIn scope2026-11-14
redessociales.about.comwww.canva.comIn scope2026-11-14
content-library-generation.canva.comIn scope2026-11-14
content-management-files.canva.comadmin, dataIn scope2026-11-14
content-management-public-content.canva.comadminIn scope2026-11-14
content-partner-media.canva.comIn scope2026-11-14
contribute.canva.comIn scope2026-11-14
corp.canva.cominternalIn scope2026-11-14
cost-per-day.canva.comIn scope2026-11-14
create.canva.comIn scope2026-11-14
create-la-2024.canva.comIn scope2026-11-14
create-stg.canva.comstagingIn scope2026-11-14
l.create.canva.comIn scope2026-11-14
o683.create.canva.comIn scope2026-11-14
creator.canva.comIn scope2026-11-14
cse.canva.comIn scope2026-11-14
capi.cse.canva.comIn scope2026-11-14
file-uploads.cse.canva.comdataIn scope2026-11-14
proxy.cse.canva.comIn scope2026-11-14
public-file-uploads.cse.canva.comdataIn scope2026-11-14
renderer.cse.canva.comIn scope2026-11-14
static.cse.canva.comIn scope2026-11-14
test.cse.canva.comtestIn scope2026-11-14
unhcr-design-for-a-cause-uploads.cse.canva.comdataIn scope2026-11-14
csp.canva.comIn scope2026-11-14
ct.canva.comIn scope2026-11-14
ctt.canva.comIn scope2026-11-14
proxy.dd.canva.comIn scope2026-11-14
proxy-failover.dd.canva.comIn scope2026-11-14

2,392 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated