Skip to content
Connect AISign inSign up free

Bug bounty program

SO

SoundCloud

Open on BugcrowdAtlas
Platform
Bugcrowd
Bounties
Pays
Assets in scope
10
Disclosed reports
0
Subdomains
714
Vendor on CyberSIXT
SoundCloud Inc. (2 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains714

Root:soundcloud.org
Scope
Name suggests
First seen
Text fileClear filters71 names
Subdomains of SoundCloud
NameScopeFirst seen
airflow.soundcloud.orgtoolsIn scope2026-11-14
alertmanager.soundcloud.orgmonitoringIn scope2026-11-14
apt.soundcloud.orgIn scope2026-11-14
backstage.soundcloud.orgIn scope2026-11-14
backstage-staging.soundcloud.orgstagingIn scope2026-11-14
build.soundcloud.orgciIn scope2026-11-14
build-artifacts.soundcloud.orgciIn scope2026-11-14
build-test.soundcloud.orgci, testIn scope2026-11-14
actions-metrics.build-test.soundcloud.orgci, monitoring, testIn scope2026-11-14
actions-webhook.build-test.soundcloud.orgci, testIn scope2026-11-14
actions-webhook.build.soundcloud.orgciIn scope2026-11-14
ci.soundcloud.orgciIn scope2026-11-14
ci-test.soundcloud.orgci, testIn scope2026-11-14
client-productivity-service.soundcloud.orgIn scope2026-11-14
codesearch.soundcloud.orgIn scope2026-11-14
codesearch-test.soundcloud.orgtestIn scope2026-11-14
collins.soundcloud.orgIn scope2026-11-14
community-staging.soundcloud.orgstagingIn scope2026-11-14
content-card-tool.soundcloud.orgIn scope2026-11-14
ctf.soundcloud.orgIn scope2026-11-14
devsupport.soundcloud.orgIn scope2026-11-14
docker.soundcloud.orgtoolsIn scope2026-11-14
echo.soundcloud.orgIn scope2026-11-14
echo-test.soundcloud.orgtestIn scope2026-11-14
festivities.soundcloud.orgIn scope2026-11-14
gists.soundcloud.orgIn scope2026-11-14
go.soundcloud.orgIn scope2026-11-14
grafana.soundcloud.orgmonitoringIn scope2026-11-14
grafana-staging.soundcloud.orgmonitoring, stagingIn scope2026-11-14
insights-ui-staging.soundcloud.orgstagingIn scope2026-11-14
jira.soundcloud.orgtoolsIn scope2026-11-14
jira-staging.soundcloud.orgstaging, toolsIn scope2026-11-14
k8s-api-db.soundcloud.orgapi, data, toolsIn scope2026-11-14
mermaid.soundcloud.orgIn scope2026-11-14
npm.soundcloud.orgIn scope2026-11-14
opus.soundcloud.orgIn scope2026-11-14
opus-staging.soundcloud.orgstagingIn scope2026-11-14
periskop-db.soundcloud.orgdataIn scope2026-11-14
periskop-staging.soundcloud.orgstagingIn scope2026-11-14
proxy.soundcloud.orgIn scope2026-11-14
retool.soundcloud.orgIn scope2026-11-14
retool-staging.soundcloud.orgstagingIn scope2026-11-14
rocket.soundcloud.orgIn scope2026-11-14
rocket-new.soundcloud.orgIn scope2026-11-14
rocket-tiarly.soundcloud.orgIn scope2026-11-14
sc-sean.soundcloud.orgIn scope2026-11-14
actions-pub.sc-sean.soundcloud.orgIn scope2026-11-14
api.sc-sean.soundcloud.orgapiIn scope2026-11-14
codescene.sc-sean.soundcloud.orgIn scope2026-11-14
on.sc-sean.soundcloud.orgIn scope2026-11-14
scr.sc-sean.soundcloud.orgIn scope2026-11-14
sctest-access-token.sc-sean.soundcloud.orgvpnIn scope2026-11-14
scim-1password.soundcloud.orgIn scope2026-11-14
scim-1pw.soundcloud.orgIn scope2026-11-14
servicesdirectory.soundcloud.orgIn scope2026-11-14
sflow.soundcloud.orgIn scope2026-11-14
slog.soundcloud.orgIn scope2026-11-14
sonar.soundcloud.orgtoolsIn scope2026-11-14
sonar-staging.soundcloud.orgstaging, toolsIn scope2026-11-14
staging-scim-1pass.soundcloud.orgstagingIn scope2026-11-14
style.soundcloud.orgIn scope2026-11-14
support.soundcloud.orgListed out of scope2026-11-14
customer.support.soundcloud.orgIn scope2026-11-14
thanos.soundcloud.orgIn scope2026-11-14
traefik.soundcloud.orgIn scope2026-11-14
tv.soundcloud.orgIn scope2026-11-14
users-cs.soundcloud.orgIn scope2026-11-14
users-cs-staging.soundcloud.orgstagingIn scope2026-11-14
vault.soundcloud.orgtoolsIn scope2026-11-14
yopass.soundcloud.orgIn scope2026-11-14
zipkin.soundcloud.orgIn scope2026-11-14

343 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated