Skip to content
Sign in

Bug bounty program

CR

Crowdstrike

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
20
Disclosed reports
0
Subdomains
775
Vendor on CyberSIXT
CrowdStrike (6 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains775

Root
Scope
Name suggests
First seen
Text file775 names
Subdomains of Crowdstrike
NameScopeFirst seen
xdr-ingest.us-1.crowdstrike.comIn scope2026-11-14
wildcard.xdr-ingest.us-1.crowdstrike.comIn scope2026-11-14
access.us-2.crowdstrike.comvpnIn scope2026-11-14
aigateway.us-2.crowdstrike.comIn scope2026-11-14
api.us-2.crowdstrike.comapiIn scope2026-11-14
api-enforcement-idp.us-2.crowdstrike.comapi, authIn scope2026-11-14
api-mtls.us-2.crowdstrike.comapiIn scope2026-11-14
apilite.us-2.crowdstrike.comIn scope2026-11-14
ingestion.aspm.us-2.crowdstrike.comIn scope2026-11-14
relay.ingestion.aspm.us-2.crowdstrike.comIn scope2026-11-14
az.us-2.crowdstrike.comIn scope2026-11-14
container-upload.us-2.crowdstrike.comdataIn scope2026-11-14
www.container-upload.us-2.crowdstrike.comdataIn scope2026-11-14
falcon.us-2.crowdstrike.comIn scope2026-11-14
assets.falcon.us-2.crowdstrike.comIn scope2026-11-14
assets-public.falcon.us-2.crowdstrike.comIn scope2026-11-14
www.assets.falcon.us-2.crowdstrike.comIn scope2026-11-14
assets.fsa.falcon.us-2.crowdstrike.comIn scope2026-11-14
www.assets.fsa.falcon.us-2.crowdstrike.comIn scope2026-11-14
auth.fsa.falcon.us-2.crowdstrike.comauthIn scope2026-11-14
onboarding.fsa.falcon.us-2.crowdstrike.comIn scope2026-11-14
reactor.fsa.falcon.us-2.crowdstrike.comIn scope2026-11-14
saas-security.falcon.us-2.crowdstrike.comIn scope2026-11-14
saas-security-api.falcon.us-2.crowdstrike.comapiIn scope2026-11-14
www.saas-security-api.falcon.us-2.crowdstrike.comapiIn scope2026-11-14
wildcard.falcon.us-2.crowdstrike.comIn scope2026-11-14
www.falcon.us-2.crowdstrike.comIn scope2026-11-14
falconapi.us-2.crowdstrike.comIn scope2026-11-14
ffc.us-2.crowdstrike.comIn scope2026-11-14
ffc-nlb.us-2.crowdstrike.comIn scope2026-11-14
ffcng.us-2.crowdstrike.comIn scope2026-11-14
ffcps.us-2.crowdstrike.comIn scope2026-11-14
www.ffcps.us-2.crowdstrike.comIn scope2026-11-14
firehose.us-2.crowdstrike.comIn scope2026-11-14
www.firehose.us-2.crowdstrike.comIn scope2026-11-14
flc-api.us-2.crowdstrike.comapiIn scope2026-11-14
ingest.us-2.crowdstrike.comIn scope2026-11-14
wildcard.ingest.us-2.crowdstrike.comIn scope2026-11-14
logscale.us-2.crowdstrike.comIn scope2026-11-14
ingest.logscale.us-2.crowdstrike.comIn scope2026-11-14
wildcard.ingest.logscale.us-2.crowdstrike.comIn scope2026-11-14
oem-2-1.logscale.us-2.crowdstrike.comIn scope2026-11-14
ingest.oem-2-1.logscale.us-2.crowdstrike.comIn scope2026-11-14
wildcard.ingest.oem-2-1.logscale.us-2.crowdstrike.comIn scope2026-11-14
wildcard.oem-2-1.logscale.us-2.crowdstrike.comIn scope2026-11-14
oem-2-2.logscale.us-2.crowdstrike.comIn scope2026-11-14
ingest.oem-2-2.logscale.us-2.crowdstrike.comIn scope2026-11-14
wildcard.ingest.oem-2-2.logscale.us-2.crowdstrike.comIn scope2026-11-14
wildcard.oem-2-2.logscale.us-2.crowdstrike.comIn scope2026-11-14
ingest.oem-2-3.logscale.us-2.crowdstrike.comIn scope2026-11-14
oem-2-preprod.logscale.us-2.crowdstrike.comstagingIn scope2026-11-14
ingest.oem-2-preprod.logscale.us-2.crowdstrike.comstagingIn scope2026-11-14
wildcard.ingest.oem-2-preprod.logscale.us-2.crowdstrike.comstagingIn scope2026-11-14
wildcard.oem-2-preprod.logscale.us-2.crowdstrike.comstagingIn scope2026-11-14
oem-telemetry.logscale.us-2.crowdstrike.comIn scope2026-11-14
ingest.oem-telemetry.logscale.us-2.crowdstrike.comIn scope2026-11-14
wildcard.ingest.oem-telemetry.logscale.us-2.crowdstrike.comIn scope2026-11-14
wildcard.oem-telemetry.logscale.us-2.crowdstrike.comIn scope2026-11-14
services.logscale.us-2.crowdstrike.comIn scope2026-11-14
wildcard.logscale.us-2.crowdstrike.comIn scope2026-11-14
mcp.us-2.crowdstrike.comIn scope2026-11-14
www.mcp.us-2.crowdstrike.comIn scope2026-11-14
in.onum.us-2.crowdstrike.comIn scope2026-11-14
universal.us-2.crowdstrike.comIn scope2026-11-14
xdr-ingest.us-2.crowdstrike.comIn scope2026-11-14
wildcard.xdr-ingest.us-2.crowdstrike.comIn scope2026-11-14
access.us-3.crowdstrike.comvpnIn scope2026-11-14
api.us-3.crowdstrike.comapiIn scope2026-11-14
api-enforcement-idp.us-3.crowdstrike.comapi, authIn scope2026-11-14
api-mtls.us-3.crowdstrike.comapiIn scope2026-11-14
apilite.us-3.crowdstrike.comIn scope2026-11-14
container-upload.us-3.crowdstrike.comdataIn scope2026-11-14
external-analytics.us-3.crowdstrike.comIn scope2026-11-14
falcon.us-3.crowdstrike.comIn scope2026-11-14
saas-security.falcon.us-3.crowdstrike.comIn scope2026-11-14
ffcng.us-3.crowdstrike.comIn scope2026-11-14
firehose.us-3.crowdstrike.comIn scope2026-11-14
www.firehose.us-3.crowdstrike.comIn scope2026-11-14
flc-api.us-3.crowdstrike.comapiIn scope2026-11-14
www.flc-api.us-3.crowdstrike.comapiIn scope2026-11-14
ingest.us-3.crowdstrike.comIn scope2026-11-14
jit-ui.us-3.crowdstrike.comIn scope2026-11-14
universal.us-3.crowdstrike.comIn scope2026-11-14
access.us-4.crowdstrike.comvpnIn scope2026-11-14
api.us-4.crowdstrike.comapiIn scope2026-11-14
api-enforcement-idp.us-4.crowdstrike.comapi, authIn scope2026-11-14
api-mtls.us-4.crowdstrike.comapiIn scope2026-11-14
apilite.us-4.crowdstrike.comIn scope2026-11-14
container-upload.us-4.crowdstrike.comdataIn scope2026-11-14
falcon.us-4.crowdstrike.comIn scope2026-11-14
universal.us-4.crowdstrike.comIn scope2026-11-14
ingest.us-gov-1.crowdstrike.comIn scope2026-11-14
api.us-gov-2.crowdstrike.comapiIn scope2026-11-14
az.us-gov-2.crowdstrike.comIn scope2026-11-14
container-upload.us-gov-2.crowdstrike.comdataIn scope2026-11-14
falcon.us-gov-2.crowdstrike.comIn scope2026-11-14
falconapi.us-gov-2.crowdstrike.comIn scope2026-11-14
ffc.us-gov-2.crowdstrike.comIn scope2026-11-14
ffcng.us-gov-2.crowdstrike.comIn scope2026-11-14
firehose.us-gov-2.crowdstrike.comIn scope2026-11-14

622 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in