Skip to content

Bug bounty program

CO

City of Los Angeles

Platform
HackerOne
Bounties
None
Assets in scope
2
Disclosed reports
0
Subdomains
1,448

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains1,448

Subdomains of City of Los Angeles
NameScopeFirst seen
457.lacity.govIn scope
www.457.lacity.govIn scope
account.lacity.govIn scope
login.dev.account.lacity.govauth, devIn scope
inside.account.lacity.govIn scope
login.account.lacity.govauthIn scope
dev.login.account.lacity.govauth, devIn scope
sandbox.login.account.lacity.govauth, testIn scope
my.account.lacity.govIn scope
dev.my.account.lacity.govdevIn scope
sandbox.my.account.lacity.govtestIn scope
sandbox.account.lacity.govtestIn scope
login.sandbox.account.lacity.govauth, testIn scope
aco.lacity.govIn scope
sso.acquia.lacity.govauthIn scope
staging.sso.acquia.lacity.govauth, stagingIn scope
adobesign.lacity.govIn scope
adu.lacity.govIn scope
aging.lacity.govIn scope
ahlu.lacity.govIn scope
airquality.lacity.govIn scope
mta-sts.sandbox.angeleno.lacity.govtestIn scope
appointments.lacity.govIn scope
blumenfield-cd3.archive.lacity.govlegacyIn scope
attorney.lacity.govIn scope
barnsdallarts.lacity.govIn scope
www.barnsdallarts.lacity.govIn scope
bca.lacity.govIn scope
dev.inspection.bca.lacity.govdevIn scope
ocps.bca.lacity.govIn scope
dev.bcainspection.lacity.govdevIn scope
beta.lacity.govstagingIn scope
beta1.lacity.govstagingIn scope
beta2.lacity.govstagingIn scope
beta3.lacity.govstagingIn scope
bigleap.lacity.govIn scope
bpgateway.lacity.govIn scope
bsl.lacity.govIn scope
buildlacore.lacity.govIn scope
business.lacity.govIn scope
beta.business.lacity.govstagingIn scope
cablefranchise.lacity.govIn scope
cannabis.lacity.govIn scope
access.cannabis.lacity.govvpnIn scope
cao.lacity.govIn scope
cd1.lacity.govIn scope
cd10.lacity.govIn scope
cd11.lacity.govIn scope
cd12.lacity.govIn scope
cd13.lacity.govIn scope
www.cd13.lacity.govIn scope
cd14.lacity.govIn scope
cd15.lacity.govIn scope
cd2.lacity.govIn scope
cd3.lacity.govIn scope
cd4.lacity.govIn scope
www.cd4.lacity.govIn scope
cd6.lacity.govIn scope
cd7.lacity.govIn scope
cd8.lacity.govIn scope
cd9.lacity.govIn scope
www.cd9.lacity.govIn scope
census.lacity.govIn scope
cid.lacity.govIn scope
hsds.cifd.lacity.govIn scope
dev.hsds.cifd.lacity.govdevIn scope
cityattorney.lacity.govIn scope
sandbox.jn.cityattorney.lacity.govtestIn scope
cityfone.lacity.govIn scope
cityforms.lacity.govIn scope
civilandhumanrights.lacity.govIn scope
test.claims.lacity.govtestIn scope
clerk.lacity.govIn scope
climate.lacity.govIn scope
communityinvestment.lacity.govIn scope
commute.lacity.govIn scope
api.commute.lacity.govapiIn scope
test.api.commute.lacity.govapi, testIn scope
dev.commute.lacity.govdevIn scope
test-api.commute.lacity.govapi, testIn scope
connect2.lacity.govIn scope
controller.lacity.govIn scope
ccspending.controller.lacity.govIn scope
deptvacancies.controller.lacity.govIn scope
homelessness.controller.lacity.govIn scope
ncspending.controller.lacity.govIn scope
coronavirus.lacity.govIn scope
councilcommittee.lacity.govIn scope
councildistrict1.lacity.govIn scope
councildistrict10.lacity.govIn scope
councildistrict11.lacity.govIn scope
councildistrict12.lacity.govIn scope
councildistrict13.lacity.govIn scope
councildistrict14.lacity.govIn scope
www.councildistrict14.lacity.govIn scope
councildistrict15.lacity.govIn scope
councildistrict2.lacity.govIn scope
councildistrict3.lacity.govIn scope
councildistrict4.lacity.govIn scope
councildistrict5.lacity.govIn scope

1,448 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 15 Nov 2026.