Bug bounty program
Canva
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains2,392
| Name | Scope | First seen |
|---|---|---|
| r0.ruletheearth-production-737oia-dot-gov.jobs-com-rctivicenginx-com-internal.server.sso.metrics.1.canva.cnauth, internal, monitoring | In scope | 2026-11-14 |
| bamboo-current-metrics-disable-us-east-4-us-east-6-rpc.webproxy.idc-download.bh-arppofind.comssets.glategoryfronicsadnswildcardproducts.wire.6.canva.cnapi, ci, monitoring | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.prometheus.cnabloyfr.s4devkhs.cseajtgmftpanva.cn.canva.cndata, monitoring | In scope | 2026-11-14 |
| wire.community-share-upload.k48kjihgfedcba987658europe.h21-updated.inst.aws.prometheus.cnprod.api.s4devkhs.ftpanva.cn.canva.cnapi, data, monitoring | In scope | 2026-11-14 |
| wire.community-share-upload-amobile80673.budget.h21-updated.inst.aws.prometheus.cnprod.s4devkhs.ftpanva.cn.canva.cndata, monitoring | In scope | 2026-11-14 |
| wire.community-share-upload.budget.h21-updated.inst.aws.prometheus.cnprod.s4devkhs.ftpanvalb.cn.canva.cndata, monitoring | In scope | 2026-11-14 |
| google.combucky.33733-lax.org-anissa-areariservata-machine.cmmedia-publicfedcban5889.org-anissa-arapp-metrics-csestores.canva.cnmonitoring | In scope | 2026-11-14 |
| status.canva.cnmonitoring | In scope | 2026-11-14 |
| status.canva.commonitoring | In scope | 2026-11-14 |
2,392 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.