Bug bounty program

Opera Public Bug Bounty

Open on Bugcrowd Atlas

Platform: Bugcrowd
Bounties: Pays
Assets in scope: 89
Disclosed reports: 0
Subdomains: 4,997
Vendor on CyberSIXT: Opera (311 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

In scope

APIs54 assetshttps://accounts.opera.com · https://flow.opera.com · https://autoupdate.geo.opera.com · https://net.geo.opera.com · https://speeddials.opera.com · https://browser-notifications.opera.com · https://cryptowallet.opera-api.com · https://suggestions.opera-api.com
Web applications21 assetshttps://auth.opera.com · https://download.opera.com · https://www.opera.com/ · https://get.geo.opera.com · https://bugs.opera.com/ · https://gx.games · https://create.gx.games · https://gx.me
Mobile apps8 assetshttps://play.google.com/store/apps/details?id=com.opera.mini.native · https://play.google.com/store/apps/details?id=com.opera.app.sports · https://play.google.com/store/apps/details?id=com.opera.browser · https://play.google.com/store/apps/details?id=com.opera.app.news · https://play.google.com/store/apps/details?id=com.opera.gx · https://apps.apple.com/us/app/opera-ai-browser-with-vpn/id1411869974 · https://apps.apple.com/pl/app/opera-gx/id1559740799 · https://play.google.com/store/apps/details?id=com.opera.minipay
Other assets6 assetshttps://www.opera.com/computer/thanks?ni=stable&os=windows · https://www.opera.com/computer/thanks?ni=eapgx&os=windows · https://www.operaneon.com · https://www.opera.com/computer/thanks?ni=opera_air&os=windows · *.opera.software · GameMaker Studio 2

Subdomains4,997

Root

Scope

Name suggests:Development

First seen

Text fileClear filters21 names

Subdomains of Opera Public Bug Bounty
Name	Scope	First seen
dev.opera.comdev	In scope	2026-11-14
opx-dev.opera.comdev	In scope	2026-11-14
dev-beta.opera.comdev, staging	In scope	2026-11-14
hoardr-dev.opera.comdev	In scope	2026-11-14
dev.route53.opera.comdev	In scope	2026-11-14
api.dev.obux.opera.comapi, dev	In scope	2026-11-14
devel-prxy.se.opera.comdev	In scope	2026-11-14
qihoo-dev.discover.opera.comdev	In scope	2026-11-14
static-dev.tvstore.opera.comdev	In scope	2026-11-14
dev-front-1.tvstore.opera.comdev	In scope	2026-11-14
dev.osp.opera.softwaredev	In scope	2026-11-14
sso-dev.opera.softwareauth, dev	In scope	2026-11-14
bream-dev.opera.softwaredev	In scope	2026-11-14
buildbot-dev.opera.softwaredev	In scope	2026-11-14
procom.dev.osp.opera.softwaredev	In scope	2026-11-14
airflow-dev.osp.opera.softwaredev, tools	In scope	2026-11-14
www.buildbot-dev.opera.softwaredev	In scope	2026-11-14
cnos-ams-dev.opera.technologydev	In scope	2026-11-14
cnos-ams-dev2.opera.technologydev	In scope	2026-11-14
opos-dev2-ams.opera.technologydev	In scope	2026-11-14
localhost.sec-tunnel.comdev	In scope	2026-11-14

4,983 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.