Skip to content
Connect AISign inSign up free

Bug bounty program

GS

Goldman Sachs

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
39
Disclosed reports
0
Subdomains
4,659

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains4,659

Root:nextcapital.com
Scope
Name suggests
First seen
Text fileClear filters92 names
Subdomains of Goldman Sachs
NameScopeFirst seen
accounts.nextcapital.comIn scope2026-11-14
admin.nextcapital.comadminIn scope2026-11-14
albatross.nextcapital.comIn scope2026-11-14
bat-idp.nextcapital.comauthIn scope2026-11-14
blaze-prod.nextcapital.comIn scope2026-11-14
bowling-api.nextcapital.comapiIn scope2026-11-14
codeclimate.nextcapital.comIn scope2026-11-14
deb.nextcapital.comListed out of scope2026-11-14
docusign.nextcapital.comIn scope2026-11-14
email.nextcapital.comListed out of scope2026-11-14
fidelity-stub-recordkeeper.nextcapital.comIn scope2026-11-14
fidelity-uat.nextcapital.comtestIn scope2026-11-14
gems.nextcapital.comIn scope2026-11-14
hue-am-i.nextcapital.comIn scope2026-11-14
internal.nextcapital.cominternalIn scope2026-11-14
bitwarden.internal.nextcapital.cominternalIn scope2026-11-14
confluence.internal.nextcapital.cominternal, toolsIn scope2026-11-14
dev-bitwarden.internal.nextcapital.comdev, internalIn scope2026-11-14
dev-confluence.internal.nextcapital.comdev, internal, toolsIn scope2026-11-14
dev-jira.internal.nextcapital.comdev, internal, toolsIn scope2026-11-14
jira.internal.nextcapital.cominternal, toolsIn scope2026-11-14
pdjamf.internal.nextcapital.cominternalIn scope2026-11-14
pdjamfdmz1.internal.nextcapital.cominternalIn scope2026-11-14
z1.internal.nextcapital.cominternalIn scope2026-11-14
jira.nextcapital.comtoolsIn scope2026-11-14
john-hancock-fed.nextcapital.comIn scope2026-11-14
john-hancock-fed-temp.nextcapital.comIn scope2026-11-14
john-hancock-nextgen.nextcapital.comIn scope2026-11-14
john-hancock-prod-mtls.nextcapital.comIn scope2026-11-14
www.john-hancock-prod-mtls.nextcapital.comIn scope2026-11-14
john-hancock-prod-saml.nextcapital.comauthIn scope2026-11-14
www.john-hancock-prod-saml.nextcapital.comauthIn scope2026-11-14
john-hancock-uat-mtls.nextcapital.comtestIn scope2026-11-14
www.john-hancock-uat-mtls.nextcapital.comtestIn scope2026-11-14
clamav.mirror.nextcapital.comIn scope2026-11-14
nonprod-api.nextcapital.comapiIn scope2026-11-14
www.nonprod-api.nextcapital.comapiIn scope2026-11-14
nonprod-trp-fis.nextcapital.comIn scope2026-11-14
npm.nextcapital.comListed out of scope2026-11-14
nullmx.nextcapital.comIn scope2026-11-14
perf-fed.nextcapital.comtestIn scope2026-11-14
perf-idp.nextcapital.comauth, testIn scope2026-11-14
spinnaker.poc.nextcapital.comciIn scope2026-11-14
pr.nextcapital.comIn scope2026-11-14
prod-api.nextcapital.comapiIn scope2026-11-14
www.prod-api.nextcapital.comapiIn scope2026-11-14
prod-fed.nextcapital.comIn scope2026-11-14
www.prod-fed.nextcapital.comIn scope2026-11-14
prod-fed072025.nextcapital.comIn scope2026-11-14
prod-idp.nextcapital.comauthIn scope2026-11-14
prod-idp-temp.nextcapital.comauthIn scope2026-11-14
prod-saml.nextcapital.comauthIn scope2026-11-14
www.prod-saml.nextcapital.comauthIn scope2026-11-14
prototype-fed.nextcapital.comIn scope2026-11-14
prototype-idp.nextcapital.comauthIn scope2026-11-14
prototype-new-idp.nextcapital.comauthIn scope2026-11-14
prototype-web.nextcapital.comIn scope2026-11-14
prudential-prod-mtls.nextcapital.comIn scope2026-11-14
www.prudential-prod-mtls.nextcapital.comIn scope2026-11-14
prudential-uat-mtls.nextcapital.comtestIn scope2026-11-14
www.prudential-uat-mtls.nextcapital.comtestIn scope2026-11-14
recruiting-api.nextcapital.comapiIn scope2026-11-14
repo.nextcapital.comgitListed out of scope2026-11-14
www.repo.nextcapital.comgitIn scope2026-11-14
rubygems.nextcapital.comListed out of scope2026-11-14
russell-uat.nextcapital.comtestIn scope2026-11-14
sandbox-sb-spinnakerpoc.nextcapital.comtestIn scope2026-11-14
security.nextcapital.comIn scope2026-11-14
sit-fed.nextcapital.comtestIn scope2026-11-14
sit-idp.nextcapital.comauth, testIn scope2026-11-14
sso-saml-simulator.nextcapital.comauthIn scope2026-11-14
staging.nextcapital.comstagingIn scope2026-11-14
staging-pr.nextcapital.comstagingIn scope2026-11-14
static.nextcapital.comIn scope2026-11-14
stg-fed.nextcapital.comstagingIn scope2026-11-14
stub-idp.nextcapital.comauthIn scope2026-11-14
svcisamapimo-nextcap.nextcapital.comIn scope2026-11-14
www.svcisamapimo-nextcap.nextcapital.comIn scope2026-11-14
svcisamapiprod-nextcap.nextcapital.comIn scope2026-11-14
www.svcisamapiprod-nextcap.nextcapital.comIn scope2026-11-14
ta-dr-idp.nextcapital.comauthIn scope2026-11-14
transamerica.nextcapital.comIn scope2026-11-14
transamerica-fed.nextcapital.comIn scope2026-11-14
transamerica-fed-dr.nextcapital.comIn scope2026-11-14
transamerica-fed-temp.nextcapital.comIn scope2026-11-14
uat.nextcapital.comtestIn scope2026-11-14
uat-fed.nextcapital.comtestIn scope2026-11-14
uat-idp.nextcapital.comauth, testIn scope2026-11-14
uat-saml.nextcapital.comauth, testIn scope2026-11-14
www.uat-saml.nextcapital.comauth, testIn scope2026-11-14
woody.nextcapital.comIn scope2026-11-14
www.nextcapital.comIn scope2026-11-14

4,394 names are covered by the program's own scope; 8 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated