Skip to content

Bug bounty program

GS

Goldman Sachs

Platform
HackerOne
Bounties
Pays
Assets in scope
39
Disclosed reports
0
Subdomains
4,659

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains4,659

Subdomains of Goldman Sachs
NameScopeFirst seen
i4132n.1d9m.gs.deIn scope2026-11-14
autodiscover.aaworldwide.gs.demailIn scope2026-11-14
1.106.198.35.bc.gs.deIn scope2026-11-14
blumex.gs.deIn scope2026-11-14
clan.gs.deIn scope2026-11-14
classic.gs.delegacyIn scope2026-11-14
email.gs.deIn scope2026-11-14
link.email.gs.deIn scope2026-11-14
etig.gs.deIn scope2026-11-14
www.etig.gs.deIn scope2026-11-14
fairroot.gs.deIn scope2026-11-14
frigidaire-refrigerators-center-maintenance.gs.deIn scope2026-11-14
gsha-mailsrv.gs.deIn scope2026-11-14
hostmaster.gs.deIn scope2026-11-14
hostmaster.hostmaster.hostmaster.hostmaster.hostmaster.hostmaster.gs.deIn scope2026-11-14
link.info.gs.deIn scope2026-11-14
lastminute.gs.deIn scope2026-11-14
mail.gs.demailIn scope2026-11-14
platzer.gs.deIn scope2026-11-14
www.platzer.gs.deIn scope2026-11-14
schmuck.gs.deIn scope2026-11-14
shortgameperformance.gs.deIn scope2026-11-14
webmail.gs.demailIn scope2026-11-14
www.gs.deIn scope2026-11-14

4,394 names are covered by the program's own scope; 8 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.