Bug bounty program
Comcast Xfinity Vulnerability Disclosure Program
- Platform
- Bugcrowd
- Bounties
- None
- Assets in scope
- 6
- Disclosed reports
- 0
- Subdomains
- 78,374
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains78,374
| Name | Scope | First seen |
|---|---|---|
| acadeals.xfinity.com | Not in the scope | 2026-11-14 |
| m4.account.xfinity.com | Not in the scope | 2026-11-14 |
| m5.account.xfinity.com | Not in the scope | 2026-11-14 |
| res4.account.xfinity.com | Not in the scope | 2026-11-14 |
| res5.account.xfinity.com | Not in the scope | 2026-11-14 |
| t4.account.xfinity.com | Not in the scope | 2026-11-14 |
| t5.account.xfinity.com | Not in the scope | 2026-11-14 |
| activate.xfinity.com | Not in the scope | 2026-11-14 |
| activatecablecard.xfinity.com | Not in the scope | 2026-11-14 |
| www.activatecablecard.xfinity.com | Not in the scope | 2026-11-14 |
| activiti.xfinity.com | Not in the scope | 2026-11-14 |
| demo.activiti.xfinity.comtest | Not in the scope | 2026-11-14 |
| demo-api.activiti.xfinity.comapi, test | Not in the scope | 2026-11-14 |
| www.demo.activiti.xfinity.comtest | Not in the scope | 2026-11-14 |
| int.activiti.xfinity.com | Not in the scope | 2026-11-14 |
| int-api.activiti.xfinity.comapi | Not in the scope | 2026-11-14 |
| np.activiti.xfinity.com | Not in the scope | 2026-11-14 |
| preprod.activiti.xfinity.comstaging | Not in the scope | 2026-11-14 |
| preprod-api.activiti.xfinity.comapi, staging | Not in the scope | 2026-11-14 |
| prod.activiti.xfinity.com | Not in the scope | 2026-11-14 |
| prod-api.activiti.xfinity.comapi | Not in the scope | 2026-11-14 |
| qa.activiti.xfinity.comtest | Not in the scope | 2026-11-14 |
| qa-api.activiti.xfinity.comapi, test | Not in the scope | 2026-11-14 |
| staging.activiti.xfinity.comstaging | Not in the scope | 2026-11-14 |
| staging-api.activiti.xfinity.comapi, staging | Not in the scope | 2026-11-14 |
| visibility.activiti.xfinity.com | Not in the scope | 2026-11-14 |
| admin.xfinity.comadmin | Not in the scope | 2026-11-14 |
| business.admin.xfinity.comadmin | Not in the scope | 2026-11-14 |
| www.admin.xfinity.comadmin | Not in the scope | 2026-11-14 |
| agentcoach.xfinity.com | Not in the scope | 2026-11-14 |
| gitlab.agentcoach.xfinity.comgit | Not in the scope | 2026-11-14 |
| recommend-convoy-as.agentcoach.xfinity.com | Not in the scope | 2026-11-14 |
| recommend-convoy-ho.agentcoach.xfinity.com | Not in the scope | 2026-11-14 |
| wildcard.agentcoach.xfinity.com | Not in the scope | 2026-11-14 |
| cdn.alert.xfinity.com | Not in the scope | 2026-11-14 |
| data.alert.xfinity.com | Not in the scope | 2026-11-14 |
| alerts.xfinity.com | Not in the scope | 2026-11-14 |
| alorica.xfinity.com | Not in the scope | 2026-11-14 |
| alorica-qa.xfinity.comtest | Not in the scope | 2026-11-14 |
| amdocs-oca-qaci1.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-oca-qaci2.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-oca-vasit1.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-oca-vasit2.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-omni-preprod-xm-hop.xfinity.comstaging | Not in the scope | 2026-11-14 |
| amdocs-omni-prod-xm-hop.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-omni-stg-xm-hop.xfinity.comstaging | Not in the scope | 2026-11-14 |
| amdocs-omni-xhop.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-omniprod-xm-hop.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-sql-datamig1.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-sql-datamig3.xfinity.com | Not in the scope | 2026-11-14 |
| amdocs-trn2.xfinity.com | Not in the scope | 2026-11-14 |
| api.xfinity.comapi | Not in the scope | 2026-11-14 |
| api-support.xfinity.comapi | Not in the scope | 2026-11-14 |
| api-support-dev.xfinity.comapi, dev | Not in the scope | 2026-11-14 |
| api-support-preprod.xfinity.comapi, staging | Not in the scope | 2026-11-14 |
| api-support-prodtest.xfinity.comapi | Not in the scope | 2026-11-14 |
| api-support-test.xfinity.comapi, test | Not in the scope | 2026-11-14 |
| www.api-support.xfinity.comapi | Not in the scope | 2026-11-14 |
| preview.api.xfinity.comapi, staging | Not in the scope | 2026-11-14 |
| secure.api.xfinity.comapi | Not in the scope | 2026-11-14 |
| app-gateway-azure.xfinity.com | Not in the scope | 2026-11-14 |
| app-gateway-azure-alt.xfinity.com | Not in the scope | 2026-11-14 |
| app-gateway-azure-alt-stg.xfinity.comstaging | Not in the scope | 2026-11-14 |
| app-gateway-azure-dev.xfinity.comdev | Not in the scope | 2026-11-14 |
| app-gateway-azure-stg.xfinity.comstaging | Not in the scope | 2026-11-14 |
| approval.xfinity.com | Not in the scope | 2026-11-14 |
| api.approval.xfinity.comapi | Not in the scope | 2026-11-14 |
| int.approval.xfinity.com | Not in the scope | 2026-11-14 |
| qa.approval.xfinity.comtest | Not in the scope | 2026-11-14 |
| staging.approval.xfinity.comstaging | Not in the scope | 2026-11-14 |
| www.approval.xfinity.com | Not in the scope | 2026-11-14 |
| assets.xfinity.com | Not in the scope | 2026-11-14 |
| assets-dev.xfinity.comdev | Not in the scope | 2026-11-14 |
| assets-int.xfinity.com | Not in the scope | 2026-11-14 |
| assets-np.xfinity.com | Not in the scope | 2026-11-14 |
| assets-preview.xfinity.comstaging | Not in the scope | 2026-11-14 |
| assets-preview-dev.xfinity.comdev, staging | Not in the scope | 2026-11-14 |
| assets-preview-int.xfinity.comstaging | Not in the scope | 2026-11-14 |
| assets-preview-sbox.xfinity.comstaging | Not in the scope | 2026-11-14 |
| assets-preview-stg.xfinity.comstaging | Not in the scope | 2026-11-14 |
| assets-sbox.xfinity.com | Not in the scope | 2026-11-14 |
| assets-stg.xfinity.comstaging | Not in the scope | 2026-11-14 |
| auth.xfinity.comauth | Not in the scope | 2026-11-14 |
| load.auth.xfinity.comauth | Not in the scope | 2026-11-14 |
| register-perf.auth.xfinity.comauth, test | Not in the scope | 2026-11-14 |
| rest.auth.xfinity.comauth | Not in the scope | 2026-11-14 |
| rest-dev.auth.xfinity.comauth, dev | Not in the scope | 2026-11-14 |
| rest-perf.auth.xfinity.comauth, test | Not in the scope | 2026-11-14 |
| rest-qa.auth.xfinity.comauth, test | Not in the scope | 2026-11-14 |
| rest-st.auth.xfinity.comauth | Not in the scope | 2026-11-14 |
| tve.auth.xfinity.comauth | Not in the scope | 2026-11-14 |
| tve-dev.auth.xfinity.comauth, dev | Not in the scope | 2026-11-14 |
| tve-perf.auth.xfinity.comauth, test | Not in the scope | 2026-11-14 |
| tve-qa.auth.xfinity.comauth, test | Not in the scope | 2026-11-14 |
| tve-st.auth.xfinity.comauth | Not in the scope | 2026-11-14 |
| wifi.auth.xfinity.comauth | Not in the scope | 2026-11-14 |
| wifi-dev.auth.xfinity.comauth, dev | Not in the scope | 2026-11-14 |
| wifi-perf.auth.xfinity.comauth, test | Not in the scope | 2026-11-14 |
| wifi-qa.auth.xfinity.comauth, test | Not in the scope | 2026-11-14 |
| wifi-st.auth.xfinity.comauth | Not in the scope | 2026-11-14 |
2 names are covered by the program's own scope; 7 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.