Skip to content

Bug bounty program

Platform
Bugcrowd
Bounties
Pays
Assets in scope
14
Disclosed reports
0
Subdomains
1,081

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains1,081

Subdomains of LastPass
NameScopeFirst seen
dev.lastpass.comdevNot in the scope2026-11-14
dev-cd.lastpass.comdevNot in the scope2026-11-14
dev-cm.lastpass.comdevNot in the scope2026-11-14
adc-dev.lastpass.comdevNot in the scope2026-11-14
cim-dev.lastpass.comdevNot in the scope2026-11-14
gws-dev.lastpass.comdevNot in the scope2026-11-14
dev-proxy.lastpass.comdevNot in the scope2026-11-14
idaas.dev.lastpass.comdevNot in the scope2026-11-14
localhost.lastpass.comdevNot in the scope2026-11-14
nodejs-dev.lastpass.comdevNot in the scope2026-11-14
auth-rc.dev.lastpass.comauth, devNot in the scope2026-11-14
cim-geo-dev.lastpass.comdevNot in the scope2026-11-14
dogfood-dev.lastpass.comdevNot in the scope2026-11-14
commerce-dev.lastpass.comdevNot in the scope2026-11-14
dev-auth.dev.lastpass.comauth, devNot in the scope2026-11-14
download.dev.lastpass.comdevNot in the scope2026-11-14
vpnmf-rc.dev.lastpass.comdevNot in the scope2026-11-14
signup-rc.dev.lastpass.comdevNot in the scope2026-11-14
vpnmf-dev.dev.lastpass.comdevNot in the scope2026-11-14
signup-dev.dev.lastpass.comdevNot in the scope2026-11-14
template-rc.dev.lastpass.comdevNot in the scope2026-11-14
basic-nodejs-dev.lastpass.comdevNot in the scope2026-11-14
searchportal-dev.lastpass.comdevNot in the scope2026-11-14
template-dev.dev.lastpass.comdevNot in the scope2026-11-14
wildcard.adc-dev.lastpass.comdevNot in the scope2026-11-14
identity-dev.cloud.lastpass.comauth, devNot in the scope2026-11-14
ondemand-idaas.dev.lastpass.comdevNot in the scope2026-11-14
store.commerce-dev.lastpass.comdevNot in the scope2026-11-14
nats-cluster-rc.dev.lastpass.comdevNot in the scope2026-11-14
api-avs.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-ips.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
nats-cluster-dev.dev.lastpass.comdevNot in the scope2026-11-14
api-boss.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
gcom-product-find-dev.lastpass.comdevNot in the scope2026-11-14
store-rc.commerce-dev.lastpass.comdevNot in the scope2026-11-14
api-copas.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-store.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
nats-cluster-rc-01.dev.lastpass.comdevNot in the scope2026-11-14
nats-cluster-rc-02.dev.lastpass.comdevNot in the scope2026-11-14
nats-cluster-rc-03.dev.lastpass.comdevNot in the scope2026-11-14
api-avs-rc.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-ips-rc.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
backoffice.commerce-dev.lastpass.comadmin, devNot in the scope2026-11-14
nats-cluster-dev-01.dev.lastpass.comdevNot in the scope2026-11-14
nats-cluster-dev-02.dev.lastpass.comdevNot in the scope2026-11-14
nats-cluster-dev-03.dev.lastpass.comdevNot in the scope2026-11-14
api-boss-rc.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-copas-rc.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-store-rc.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
mf-import-password-rc.dev.lastpass.comdevNot in the scope2026-11-14
api-boss-test.commerce-dev.lastpass.comapi, dev, testNot in the scope2026-11-14
backoffice-rc.commerce-dev.lastpass.comadmin, devNot in the scope2026-11-14
mf-import-password-dev.dev.lastpass.comdevNot in the scope2026-11-14
mf-password-health-dev.dev.lastpass.comdevNot in the scope2026-11-14
api-avs-public.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-boss-test-rc.commerce-dev.lastpass.comapi, dev, testNot in the scope2026-11-14
api-eventhandler.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-avs-rc-public.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-boss-internal.commerce-dev.lastpass.comapi, dev, internalNot in the scope2026-11-14
mf-dark-web-monitoring-dev.dev.lastpass.comdev, monitoringNot in the scope2026-11-14
api-copas.commerce-dev-internal.lastpass.comapi, dev, internalNot in the scope2026-11-14
api-eventhandler-rc.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-boss-rc-internal.commerce-dev.lastpass.comapi, dev, internalNot in the scope2026-11-14
api-copas-pmgenerator.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14
api-copas-rc.commerce-dev-internal.lastpass.comapi, dev, internalNot in the scope2026-11-14
api-copas-pmgenerator-rc.commerce-dev.lastpass.comapi, devNot in the scope2026-11-14

6 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.