Skip to content

Bug bounty program

Platform
Bugcrowd
Bounties
Pays
Assets in scope
4
Disclosed reports
0
Subdomains
77

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains77

Subdomains of Kaleido
NameScopeFirst seen
api.designify.comapiNot in the scope2026-11-14
staging.api.designify.comapi, stagingNot in the scope2026-11-14
api.beta.designify.comapi, stagingNot in the scope2026-11-14
news.designify.comNot in the scope2026-11-14
e.news.designify.comNot in the scope2026-11-14
o3944.e.news.designify.comNot in the scope2026-11-14
staging.designify.comstagingNot in the scope2026-11-14
test.designify.comtestNot in the scope2026-11-14
www.designify.comIn scope2026-11-14
account.kaleido.aiNot in the scope2026-11-14
www.account.kaleido.aiNot in the scope2026-11-14
accounts.kaleido.aiNot in the scope2026-11-14
www.accounts.kaleido.aiNot in the scope2026-11-14
api.kaleido.aiapiNot in the scope2026-11-14
api-new.kaleido.aiapiNot in the scope2026-11-14
app.kaleido.aiNot in the scope2026-11-14
candoku.cr1.kaleido.aiNot in the scope2026-11-14
captain.cr1.kaleido.aiNot in the scope2026-11-14
labs.cr1.kaleido.aiNot in the scope2026-11-14
lorempicsum.cr1.kaleido.aiNot in the scope2026-11-14
mongodb.cr1.kaleido.aidataNot in the scope2026-11-14
nimp.cr1.kaleido.aiNot in the scope2026-11-14
nimp-talk.cr1.kaleido.aiNot in the scope2026-11-14
nimp-test.cr1.kaleido.aitestNot in the scope2026-11-14
danni.kaleido.aiNot in the scope2026-11-14
danni-new.kaleido.aiNot in the scope2026-11-14
staging.danni.kaleido.aistagingNot in the scope2026-11-14
deps.kaleido.aiNot in the scope2026-11-14
docs.kaleido.aiNot in the scope2026-11-14
kaleido-core-lib.docs.kaleido.aiNot in the scope2026-11-14
kld1.host.kaleido.aiNot in the scope2026-11-14
kld2.host.kaleido.aiNot in the scope2026-11-14
kld3.host.kaleido.aiNot in the scope2026-11-14
kld4.host.kaleido.aiNot in the scope2026-11-14
kld5.host.kaleido.aiNot in the scope2026-11-14
kld6.host.kaleido.aiNot in the scope2026-11-14
kld7.host.kaleido.aiNot in the scope2026-11-14
internal.kaleido.aiinternalNot in the scope2026-11-14
labs.kaleido.aiNot in the scope2026-11-14
staging.labs.kaleido.aistagingNot in the scope2026-11-14
www.staging.labs.kaleido.aistagingNot in the scope2026-11-14
www.labs.kaleido.aiNot in the scope2026-11-14
staging.kaleido.aistagingNot in the scope2026-11-14
status.kaleido.aimonitoringNot in the scope2026-11-14
test.kaleido.aitestNot in the scope2026-11-14
tools.kaleido.aiNot in the scope2026-11-14
cd.tools.kaleido.aiNot in the scope2026-11-14
www.kaleido.aiIn scope2026-11-14
61e9b-www.remove.bgNot in the scope2026-11-14
7d735-www.remove.bgNot in the scope2026-11-14
api.remove.bgapiNot in the scope2026-11-14
api-beta.remove.bgapi, stagingNot in the scope2026-11-14
api-internal.remove.bgapi, internalNot in the scope2026-11-14
staging.api.remove.bgapi, stagingNot in the scope2026-11-14
www.api.remove.bgapiNot in the scope2026-11-14
beta.remove.bgstagingNot in the scope2026-11-14
d8344-www.remove.bgNot in the scope2026-11-14
developer.remove.bgNot in the scope2026-11-14
hello.remove.bgNot in the scope2026-11-14
e.hello.remove.bgNot in the scope2026-11-14
o4074.e.hello.remove.bgNot in the scope2026-11-14
l.hello.remove.bgNot in the scope2026-11-14
help.remove.bgNot in the scope2026-11-14
o.remove.bgNot in the scope2026-11-14
www.o.remove.bgNot in the scope2026-11-14
r.remove.bgNot in the scope2026-11-14
rd.remove.bgNot in the scope2026-11-14
signatures.remove.bgNot in the scope2026-11-14
static.remove.bgNot in the scope2026-11-14
u003ewww.remove.bgNot in the scope2026-11-14
www.remove.bgIn scope2026-11-14
api.unscreen.comapiNot in the scope2026-11-14
staging.api.unscreen.comapi, stagingNot in the scope2026-11-14
hello.unscreen.comNot in the scope2026-11-14
e.hello.unscreen.comNot in the scope2026-11-14
o4075.e.hello.unscreen.comNot in the scope2026-11-14
www.unscreen.comIn scope2026-11-14

4 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in