Skip to content
Connect AISign inSign up free

Bug bounty program

GS

Goldman Sachs

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
39
Disclosed reports
0
Subdomains
4,659

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains4,659

Root:rocaton.com
Scope
Name suggests
First seen
Text fileClear filters29 names
Subdomains of Goldman Sachs
NameScopeFirst seen
autodiscover.rocaton.commailListed out of scope2026-11-14
azure-web.rocaton.comListed out of scope2026-11-14
clients.rocaton.comListed out of scope2026-11-14
ftp.rocaton.comdataListed out of scope2026-11-14
go.rocaton.comListed out of scope2026-11-14
go2.rocaton.comListed out of scope2026-11-14
inside.rocaton.comListed out of scope2026-11-14
mail.rocaton.commailListed out of scope2026-11-14
mail1.rocaton.commailListed out of scope2026-11-14
p-ranchernode1.rocaton.comListed out of scope2026-11-14
portal.rocaton.comListed out of scope2026-11-14
qa.rocaton.comtestListed out of scope2026-11-14
www.qa.rocaton.comtestListed out of scope2026-11-14
remote1.rocaton.comvpnListed out of scope2026-11-14
ria1pnm02.rocaton.comListed out of scope2026-11-14
www.ria1pnm02.rocaton.comListed out of scope2026-11-14
riagw.rocaton.comListed out of scope2026-11-14
riagw1.rocaton.comListed out of scope2026-11-14
secure.rocaton.comListed out of scope2026-11-14
secure-uat.rocaton.comtestListed out of scope2026-11-14
sip.rocaton.comListed out of scope2026-11-14
smtp.rocaton.commailListed out of scope2026-11-14
smtp2.rocaton.commailListed out of scope2026-11-14
smtp3.rocaton.commailListed out of scope2026-11-14
fallline.sso.rocaton.comauthListed out of scope2026-11-14
staging1.rocaton.comstagingListed out of scope2026-11-14
w3-dev.rocaton.comdevListed out of scope2026-11-14
webmail.rocaton.commailListed out of scope2026-11-14
www.rocaton.comListed out of scope2026-11-14

4,394 names are covered by the program's own scope; 8 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated