Skip to content

Bug bounty program

Platform
Bugcrowd
Bounties
Pays
Assets in scope
13
Disclosed reports
0
Subdomains
681
Vendor on CyberSIXT
Ibotta (1 CVE, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains681

Subdomains of Ibotta
NameScopeFirst seen
api.ibops.netapiIn scope2026-11-14
api.int.ibops.netapiIn scope2026-11-14
api.pay.ibops.netapiNot in the scope2026-11-14
grpc.int.ibops.netapiNot in the scope2026-11-14
grpc.pay.ibops.netapiNot in the scope2026-11-14
api.barrel.ibops.netapiNot in the scope2026-11-14
instok-api.ibops.netapiNot in the scope2026-11-14
api.staging.ibops.netapi, stagingNot in the scope2026-11-14
migrate.api.ibops.netapiNot in the scope2026-11-14
grpc.int.pay.ibops.netapiNot in the scope2026-11-14
octoshop-api.ibops.netapiNot in the scope2026-11-14
purchase-api.ibops.netapiNot in the scope2026-11-14
api.epoxi.pay.ibops.netapiNot in the scope2026-11-14
api.jiffy.ops.ibops.netapiNot in the scope2026-11-14
api-canary.int.ibops.netapi, stagingNot in the scope2026-11-14
api-canary.pay.ibops.netapi, stagingNot in the scope2026-11-14
api.barrel.int.ibops.netapiNot in the scope2026-11-14
grpc.epoxi.pay.ibops.netapiNot in the scope2026-11-14
api.c10.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
api.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.pay.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc-canary.int.ibops.netapi, stagingNot in the scope2026-11-14
grpc-canary.pay.ibops.netapi, stagingNot in the scope2026-11-14
grpc.barrel.int.ibops.netapiNot in the scope2026-11-14
ipn-api.staging.ibops.netapi, stagingNot in the scope2026-11-14
migrate.api.int.ibops.netapiNot in the scope2026-11-14
migrate.api.pay.ibops.netapiNot in the scope2026-11-14
poc-api.sandbox.ibops.netapi, testNot in the scope2026-11-14
grpc.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc.pay.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.apollo.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.k8s-sandbox-v2.ibops.netapi, test, toolsNot in the scope2026-11-14
instok-api.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.c10.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
api.c10.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
eng-sec-api.staging.ibops.netapi, stagingNot in the scope2026-11-14
migrate.api.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.cats.pay.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc.c10.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc.c10.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
octoshop-api.staging.ibops.netapi, stagingNot in the scope2026-11-14
purchase-api.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc.cats.pay.staging.ibops.netapi, stagingNot in the scope2026-11-14
api-canary.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
api-canary.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
api-canary.pay.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.apollo.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
api-alb.c10.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
api-alb.c10.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc-canary.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc-canary.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc-canary.pay.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc.apollo.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
migrate.api.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
migrate.api.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
migrate.api.pay.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.internal.k8s-sandbox.ibops.netapi, internal, test, toolsNot in the scope2026-11-14
api.jiffy.ops.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc-kgateway.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
jiffy-api.gateway.ops.int.ibops.netapiNot in the scope2026-11-14
saver-privacy-api.staging.ibops.netapi, stagingNot in the scope2026-11-14
api-canary.c10.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
api-canary.c10.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc-canary.c10.int-staging.ibops.netapi, stagingNot in the scope2026-11-14
grpc-canary.c10.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
monolith-api-gateway.staging.ibops.netapi, stagingNot in the scope2026-11-14
ibotta-datalake-api.gateway.int.ibops.netapiNot in the scope2026-11-14
monolith-api-gateway.gateway.int.ibops.netapiNot in the scope2026-11-14
synchronous-matching-api.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.ibsandbox.dreamteam01.sandbox.ibops.netapi, testNot in the scope2026-11-14
jiffy-api.gateway.ops.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
ibotta-datalake-api.gateway.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
monolith-api-gateway.gateway.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
timeline-automation-api-gateway.gateway.int.ibops.netapiNot in the scope2026-11-14
timeline-automation-api-gateway.gateway.int.staging.ibops.netapi, stagingNot in the scope2026-11-14
api.ibotta.comapiIn scope2026-11-14
grpc.ibotta.comapiNot in the scope2026-11-14
api-cf.ibotta.comapiNot in the scope2026-11-14
api-geo.ibotta.comapiNot in the scope2026-11-14
api.dev.ibotta.comapi, devListed out of scope2026-11-14
api-test.ibotta.comapi, testNot in the scope2026-11-14
api.gary.ibotta.comapiNot in the scope2026-11-14
grpc.gary.ibotta.comapiNot in the scope2026-11-14
api-cf.dev.ibotta.comapi, devListed out of scope2026-11-14
api-origin.ibotta.comapiNot in the scope2026-11-14
api-k8s.dev.ibotta.comapi, dev, toolsListed out of scope2026-11-14
grpc-canary.ibotta.comapi, stagingNot in the scope2026-11-14
ipn-api.dev.ibotta.comapi, devListed out of scope2026-11-14
api-internal.ibotta.comapi, internalNot in the scope2026-11-14
api-jhart.dev.ibotta.comapi, devListed out of scope2026-11-14
api-cjhart.dev.ibotta.comapi, devListed out of scope2026-11-14
api-gjhart.dev.ibotta.comapi, devListed out of scope2026-11-14
api-cfjhart.dev.ibotta.comapi, devListed out of scope2026-11-14
api-tfjhart.dev.ibotta.comapi, devListed out of scope2026-11-14
api-geojhart.dev.ibotta.comapi, devListed out of scope2026-11-14
api-k8s-test.dev.ibotta.comapi, dev, test, toolsListed out of scope2026-11-14
api-stg-origin.dev.ibotta.comapi, dev, stagingListed out of scope2026-11-14

5 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.