Skip to content

Bug bounty program

Platform
Bugcrowd
Bounties
Pays
Assets in scope
4
Disclosed reports
0
Subdomains
77

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains77

Subdomains of Kaleido
NameScopeFirst seen
61e9b-www.remove.bgNot in the scope2026-11-14
7d735-www.remove.bgNot in the scope2026-11-14
api.remove.bgapiNot in the scope2026-11-14
api-beta.remove.bgapi, stagingNot in the scope2026-11-14
api-internal.remove.bgapi, internalNot in the scope2026-11-14
staging.api.remove.bgapi, stagingNot in the scope2026-11-14
www.api.remove.bgapiNot in the scope2026-11-14
beta.remove.bgstagingNot in the scope2026-11-14
d8344-www.remove.bgNot in the scope2026-11-14
developer.remove.bgNot in the scope2026-11-14
hello.remove.bgNot in the scope2026-11-14
e.hello.remove.bgNot in the scope2026-11-14
o4074.e.hello.remove.bgNot in the scope2026-11-14
l.hello.remove.bgNot in the scope2026-11-14
help.remove.bgNot in the scope2026-11-14
o.remove.bgNot in the scope2026-11-14
www.o.remove.bgNot in the scope2026-11-14
r.remove.bgNot in the scope2026-11-14
rd.remove.bgNot in the scope2026-11-14
signatures.remove.bgNot in the scope2026-11-14
static.remove.bgNot in the scope2026-11-14
u003ewww.remove.bgNot in the scope2026-11-14
www.remove.bgIn scope2026-11-14

4 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.