Bug bounty program
Epic Games VDP
- Platform
- HackerOne
- Bounties
- None
- Assets in scope
- 91
- Disclosed reports
- 0
- Subdomains
- 34,455
- Vendor on CyberSIXT
- Epic Games (22 CVEs, 0 exploited)
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains34,455
| Name | Scope | First seen |
|---|---|---|
| ftp.3lateral.comdata | In scope | 2026-11-14 |
| bridgerton-s3-all-episodes-full.artstation.comdata | In scope | 2026-11-14 |
| elastic.artstation.comdata | In scope | 2026-11-14 |
| ftp.artstation.comdata | In scope | 2026-11-14 |
| heres-how-to-watch-haikyuu-battle-of-the-garbage-dump.artstation.comdata | In scope | 2026-11-14 |
| mongo.artstation.comdata | In scope | 2026-11-14 |
| mongodb.artstation.comdata | In scope | 2026-11-14 |
| mysql.artstation.comdata | In scope | 2026-11-14 |
| upload.artstation.comdata | In scope | 2026-11-14 |
| watch-haikyuu-battle-of-the-garbage-dump-mp4-123movie.artstation.comdata | In scope | 2026-11-14 |
| ftp.epicgames.comdata | In scope | 2026-11-14 |
| www.ftp.epicgames.comdata | In scope | 2026-11-14 |
| keyfactor-mongodb.it-entapps-dev.epicgames.comdata, dev | In scope | 2026-11-14 |
| test-site-ap-s3.art-pipeline-dev-us-east-1.it.epicgames.comdata, dev, test | In scope | 2026-11-14 |
| art-pipeline-s3.it.epicgames.comdata | In scope | 2026-11-14 |
| ccs-files.afbb.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| redis-client-benchmark.affc.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| redis-ui.team-epicenter.bbbd.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| upload.fab-admin.ci.cceb.dev.use1a.on.epicgames.comadmin, ci, data, dev | In scope | 2026-11-14 |
| upload.fab-public.ci.cceb.dev.use1a.on.epicgames.comci, data, dev | In scope | 2026-11-14 |
| upload.fab.ci.cceb.dev.use1a.on.epicgames.comci, data, dev | In scope | 2026-11-14 |
| upload.fab-admin.cceb.dev.use1a.on.epicgames.comadmin, data, dev | In scope | 2026-11-14 |
| upload.fab-public.cceb.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| upload.fab.cceb.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| upload.sketchfab-admin.gamedev.cceb.dev.use1a.on.epicgames.comadmin, data, dev | In scope | 2026-11-14 |
| upload.sketchfab-public.gamedev.cceb.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| upload.sketchfab.gamedev.cceb.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| fh-data-dump.ceee.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| redis-ui.team-player-exp.dcef.dev.use1a.on.epicgames.comdata, dev | In scope | 2026-11-14 |
| redis-ui.afbf.live.use1a.on.epicgames.comdata | In scope | 2026-11-14 |
| netapp-backup.bbba.live.use1a.on.epicgames.comdata | In scope | 2026-11-14 |
| pk01-s3-signing.bbba.live.use1a.on.epicgames.comdata | In scope | 2026-11-14 |
| redis-ui.team-player-exp.cbfb.live.use1a.on.epicgames.comdata | In scope | 2026-11-14 |
| upload.fab-admin.daec.live.use1a.on.epicgames.comadmin, data | In scope | 2026-11-14 |
| upload.fab.daec.live.use1a.on.epicgames.comdata | In scope | 2026-11-14 |
| upload.sketchfab-admin.prod.daec.live.use1a.on.epicgames.comadmin, data | In scope | 2026-11-14 |
| upload.sketchfab.prod.daec.live.use1a.on.epicgames.comdata | In scope | 2026-11-14 |
| redis-ui.team-epicenter.ebed.live.use1a.on.epicgames.comdata | In scope | 2026-11-14 |
| backup.fallguys.comdata | In scope | 2026-11-14 |
| ftp.fortnite.comdata | In scope | 2026-11-14 |
34,455 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.