Bug bounty program · HackerOne
Most upvoted reports14
- #998398ValidPrototype Pollution leads to XSS on https://blog.swiftype.com/#__proto__[asd]=alert(document.domain)Elastic · Cross-site Scripting · 2021–157votes
- #1356845ValidCVE-2021-40870 on [52.204.160.31]Elastic · Command and Code Injection · 2021–75votes
- #1266188ValidCritical || Unrestricted access to private Github repos and properties of Elastic through leaked token of Elastic employeeElastic · Cryptography · 2021–64votes
- #1300585Validblind Server-Side Request Forgery (SSRF) allows scanning internal portsElastic · Server-Side Request Forgery · 2023–54votes
- #1636382ValidSynthetics Recorder: Code injection when recording website with malicious contentElastic · Command and Code Injection · 2023–47votes
- #1477050ValidCSRF in AppSearch allows creation of "curations"Elastic · Cross-Site Request Forgery · 2022–35votes
- #1168765ValidRCE hazard in reporting (via Chromium)Elastic · Access Control · 2021$10,00025votes
- #1218680ValidImproper authorization on `/api/as/v1/credentials/` for Dev Role User with Limited Engine AccessElastic · Access Control · 2021–21votes
- #861744ValidRemote Code Execution in coming Kibana 7.7.0Elastic · Access Control · 2021$5,00014votes
- #1168528ValidImproper authorization on `/api/as/v1/credentials/` allows any App Search user to access all API keys and escalate privilegesElastic · Access Control · 2021–13votes
Subdomains19,856
17,367 covered by the program's own scope · 0 first seen this week
Roots:elstc.co 15,304 · 15,304 in scopeelastic-cloud.com 2,384found.io 1,115 · 1,115 in scopeelastic.co 761 · 757 in scopeelasticnet.co 181 · 181 in scopeswiftype.com 101eops.nl 10 · 10 in scope
Name suggestsAnything
19,856 names
| Name | Scope | First seen |
|---|---|---|
| 002.elastic-cloud.com | Not in the scope | 2026-11-14 |
| vpce.002.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| apm.ac2ada.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| app-search.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent-search.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| es.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| fleet.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| kb.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| proxy.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| vpce.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| apm.vpce.ac2ada.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| app-search.vpce.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent.vpce.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent-search.vpce.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| es.vpce.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| fleet.vpce.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| kb.vpce.ac2ada.elastic-cloud.com | Not in the scope | 2026-11-14 |
| aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ensemble-production.af-south-1-v1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| apm.af-south-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| wildcard.apm.af-south-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| app-search.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.app-search.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent-search.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.ent-search.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.ent.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| es.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.es.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| fleet.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.fleet.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ingest.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| kb.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.kb.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| profiling.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.profiling.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| symbols.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.symbols.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| vpce.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| apm.vpce.af-south-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| app-search.vpce.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent.vpce.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent-search.vpce.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| es.vpce.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| fleet.vpce.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| kb.vpce.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.af-south-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| apm.ap-east-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| wildcard.apm.ap-east-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| yodo1-apm.apm.ap-east-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| app-search.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.app-search.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent-search.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.ent-search.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| roche-owp-prod-publish.ent.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.ent.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| es.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.es.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| fleet.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.fleet.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ingest.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| kb.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.kb.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.profiling.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| proxy-production.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.symbols.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| vpce.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| apm.vpce.ap-east-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| app-search.vpce.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent.vpce.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent-search.vpce.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| es.vpce.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| fleet.vpce.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| kb.vpce.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.ap-east-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| apm.ap-northeast-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| wildcard.apm.ap-northeast-1.aws.elastic-cloud.commonitoring | Not in the scope | 2026-11-14 |
| app-search.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.app-search.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ent-search.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.ent-search.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.ent.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| es.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.es.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| fleet.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.fleet.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| ingest.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| kb.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.kb.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| profiling.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.profiling.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| symbols.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
| wildcard.symbols.ap-northeast-1.aws.elastic-cloud.com | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.