Bug bounty program

Opera Public Bug Bounty

Open on Bugcrowd Atlas

Platform: Bugcrowd
Bounties: Pays
Assets in scope: 89
Disclosed reports: 0
Subdomains: 4,997
Vendor on CyberSIXT: Opera (311 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

In scope

APIs54 assetshttps://accounts.opera.com · https://flow.opera.com · https://autoupdate.geo.opera.com · https://net.geo.opera.com · https://speeddials.opera.com · https://browser-notifications.opera.com · https://cryptowallet.opera-api.com · https://suggestions.opera-api.com
Web applications21 assetshttps://auth.opera.com · https://download.opera.com · https://www.opera.com/ · https://get.geo.opera.com · https://bugs.opera.com/ · https://gx.games · https://create.gx.games · https://gx.me
Mobile apps8 assetshttps://play.google.com/store/apps/details?id=com.opera.mini.native · https://play.google.com/store/apps/details?id=com.opera.app.sports · https://play.google.com/store/apps/details?id=com.opera.browser · https://play.google.com/store/apps/details?id=com.opera.app.news · https://play.google.com/store/apps/details?id=com.opera.gx · https://apps.apple.com/us/app/opera-ai-browser-with-vpn/id1411869974 · https://apps.apple.com/pl/app/opera-gx/id1559740799 · https://play.google.com/store/apps/details?id=com.opera.minipay
Other assets6 assetshttps://www.opera.com/computer/thanks?ni=stable&os=windows · https://www.opera.com/computer/thanks?ni=eapgx&os=windows · https://www.operaneon.com · https://www.opera.com/computer/thanks?ni=opera_air&os=windows · *.opera.software · GameMaker Studio 2

Subdomains4,997

Root

Scope:Listed out of scope

Name suggests

First seen

Text fileClear filters14 names

Subdomains of Opera Public Bug Bounty
Name	Scope	First seen
admanager.opera.com	Listed out of scope	2026-11-14
catch.opera.com	Listed out of scope	2026-11-14
certs.opera.com	Listed out of scope	2026-11-14
checkout.opera.com	Listed out of scope	2026-11-14
concurso.opera.com	Listed out of scope	2026-11-14
contest.opera.com	Listed out of scope	2026-11-14
control.gx-servers.opera.com	Listed out of scope	2026-11-14
investor.opera.com	Listed out of scope	2026-11-14
jobs.opera.com	Listed out of scope	2026-11-14
tabfulness.opera.com	Listed out of scope	2026-11-14
wallpaper.opera.com	Listed out of scope	2026-11-14
accountsstage.yoyogames.com	Listed out of scope	2026-11-14
bugs.yoyogames.com	Listed out of scope	2026-11-14
help.yoyogames.com	Listed out of scope	2026-11-14

4,983 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.