Skip to content

Bug bounty program

Platform
Bugcrowd
Bounties
Pays
Assets in scope
13
Disclosed reports
0
Subdomains
681
Vendor on CyberSIXT
Ibotta (1 CVE, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains681

Subdomains of Ibotta
NameScopeFirst seen
sandbox.ibops.nettestNot in the scope2026-11-14
test.pay.ibops.nettestNot in the scope2026-11-14
foo.sandbox.ibops.nettestNot in the scope2026-11-14
int.sandbox.ibops.nettestNot in the scope2026-11-14
k8s-sandbox.ibops.nettest, toolsNot in the scope2026-11-14
mfe.sandbox.ibops.nettestNot in the scope2026-11-14
test.int.pay.ibops.nettestNot in the scope2026-11-14
test.ops.int.ibops.nettestNot in the scope2026-11-14
mfe-bw.sandbox.ibops.nettestNot in the scope2026-11-14
mktest.sandbox.ibops.nettestNot in the scope2026-11-14
foo.bar.sandbox.ibops.nettestNot in the scope2026-11-14
gateway.sandbox.ibops.nettestNot in the scope2026-11-14
int.k8s-sandbox.ibops.nettest, toolsNot in the scope2026-11-14
poc-api.sandbox.ibops.netapi, testNot in the scope2026-11-14
test.pay.staging.ibops.netstaging, testNot in the scope2026-11-14
mfe-final.sandbox.ibops.nettestNot in the scope2026-11-14
roboparts.sandbox.ibops.nettestNot in the scope2026-11-14
sigv4test.sandbox.ibops.nettestNot in the scope2026-11-14
api.k8s-sandbox-v2.ibops.netapi, test, toolsNot in the scope2026-11-14
mfe-latest.sandbox.ibops.nettestNot in the scope2026-11-14
mfe.latest.sandbox.ibops.nettestNot in the scope2026-11-14
int-sandbox.sandbox.ibops.nettestNot in the scope2026-11-14
test-domain.sandbox.ibops.nettestNot in the scope2026-11-14
travis-test.sandbox.ibops.netci, testNot in the scope2026-11-14
luis-service.sandbox.ibops.nettestNot in the scope2026-11-14
test-gateway.sandbox.ibops.nettestNot in the scope2026-11-14
lane-test-2.gateway.int.ibops.nettestNot in the scope2026-11-14
test-domain-two.sandbox.ibops.nettestNot in the scope2026-11-14
yuna-n-test.gateway.int.ibops.nettestNot in the scope2026-11-14
api.internal.k8s-sandbox.ibops.netapi, internal, test, toolsNot in the scope2026-11-14
shelbey-test.gateway.int.ibops.nettestNot in the scope2026-11-14
test-gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
int-sandbox-v2.sandbox-v2.ibops.nettestNot in the scope2026-11-14
luis-service-test.sandbox.ibops.nettestNot in the scope2026-11-14
test-domain-three.sandbox.ibops.nettestNot in the scope2026-11-14
test-gateway-edge.sandbox.ibops.nettestNot in the scope2026-11-14
moose-test-repo.gateway.int.ibops.netgit, testNot in the scope2026-11-14
amy-test-gateway.gateway.int.ibops.nettestNot in the scope2026-11-14
ellies-test-repo.gateway.int.ibops.netgit, testNot in the scope2026-11-14
ibsandbox.dreamteam01.sandbox.ibops.nettestNot in the scope2026-11-14
amys-cats-test-repo.gateway.int.ibops.netgit, testNot in the scope2026-11-14
lane-test-2.gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
product-knowledge-graph.sandbox.ibops.nettestNot in the scope2026-11-14
yuna-n-test.gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
nik-gavalas-iac-test.gateway.int.ibops.nettestNot in the scope2026-11-14
shelbey-test.gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
api.ibsandbox.dreamteam01.sandbox.ibops.netapi, testNot in the scope2026-11-14
auth.ibsandbox.dreamteam01.sandbox.ibops.netauth, testNot in the scope2026-11-14
admin.ibsandbox.dreamteam01.sandbox.ibops.netadmin, testNot in the scope2026-11-14
jh-lambda-tests.gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
moose-test-repo.gateway.int.staging.ibops.netgit, staging, testNot in the scope2026-11-14
slack.ibsandbox.dreamteam01.sandbox.ibops.nettestNot in the scope2026-11-14
amy-test-gateway.gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
ellies-test-repo.gateway.int.staging.ibops.netgit, staging, testNot in the scope2026-11-14
content.ibsandbox.dreamteam01.sandbox.ibops.nettestNot in the scope2026-11-14
dennis-test-domain.gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
amys-cats-test-repo.gateway.int.staging.ibops.netgit, staging, testNot in the scope2026-11-14
test-2.us-east-1.talley.sandbox.sandbox.ibops.nettestNot in the scope2026-11-14
test1.us-east-1.production.payments.pay.ibops.nettestNot in the scope2026-11-14
nik-gavalas-iac-test.gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
test-2.us-east-1.talley.sandbox.int.sandbox.ibops.nettestNot in the scope2026-11-14
dennis-test-private-gateway.gateway.int.staging.ibops.netinternal, staging, testNot in the scope2026-11-14
event-validation-testing-gateway.gateway.ops.int.ibops.nettestNot in the scope2026-11-14
event-validation-testing.gateway.ops.int.staging.ibops.netstaging, testNot in the scope2026-11-14
affiliate-integration-testing.gateway.int.staging.ibops.netstaging, testNot in the scope2026-11-14
dennis-test-private-gateway-two.gateway.int.staging.ibops.netinternal, staging, testNot in the scope2026-11-14
o-test.ibotta.comtestNot in the scope2026-11-14
s-test.ibotta.comtestNot in the scope2026-11-14
api-test.ibotta.comapi, testNot in the scope2026-11-14
email-test.ibotta.comtestNot in the scope2026-11-14
static-test.ibotta.comtestNot in the scope2026-11-14
ecs-tf-env-test.ibotta.comtestNot in the scope2026-11-14
api-k8s-test.dev.ibotta.comapi, dev, test, toolsListed out of scope2026-11-14
liferewarded-test.ibotta.comtestNot in the scope2026-11-14
test-redirect-partners.ibotta.comtestNot in the scope2026-11-14
test-redirect-gift-cards.ibotta.comtestNot in the scope2026-11-14

5 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.