Bug bounty program
Goldman Sachs
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 39
- Disclosed reports
- 0
- Subdomains
- 4,651
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains4,651
| Name | Scope | First seen |
|---|---|---|
| billpay.goldman.com | Listed out of scope | 2026-11-14 |
| gsg.goldman.com | Listed out of scope | 2026-11-14 |
| gsg-uk.goldman.com | Listed out of scope | 2026-11-14 |
| gspf.goldman.com | Listed out of scope | 2026-11-14 |
| qa-billpay.goldman.comtest | Listed out of scope | 2026-11-14 |
| qa.events.gs.comtest | Listed out of scope | 2026-11-14 |
| www.events.gs.com | Listed out of scope | 2026-11-14 |
| deb.nextcapital.com | Listed out of scope | 2026-11-14 |
| email.nextcapital.com | Listed out of scope | 2026-11-14 |
| npm.nextcapital.com | Listed out of scope | 2026-11-14 |
| repo.nextcapital.comgit | Listed out of scope | 2026-11-14 |
| rubygems.nextcapital.com | Listed out of scope | 2026-11-14 |
| autodiscover.rocaton.commail | Listed out of scope | 2026-11-14 |
| azure-web.rocaton.com | Listed out of scope | 2026-11-14 |
| clients.rocaton.com | Listed out of scope | 2026-11-14 |
| ftp.rocaton.comdata | Listed out of scope | 2026-11-14 |
| go.rocaton.com | Listed out of scope | 2026-11-14 |
| go2.rocaton.com | Listed out of scope | 2026-11-14 |
| inside.rocaton.com | Listed out of scope | 2026-11-14 |
| mail.rocaton.commail | Listed out of scope | 2026-11-14 |
| mail1.rocaton.commail | Listed out of scope | 2026-11-14 |
| p-ranchernode1.rocaton.com | Listed out of scope | 2026-11-14 |
| portal.rocaton.com | Listed out of scope | 2026-11-14 |
| qa.rocaton.comtest | Listed out of scope | 2026-11-14 |
| www.qa.rocaton.comtest | Listed out of scope | 2026-11-14 |
| remote1.rocaton.comvpn | Listed out of scope | 2026-11-14 |
| ria1pnm02.rocaton.com | Listed out of scope | 2026-11-14 |
| www.ria1pnm02.rocaton.com | Listed out of scope | 2026-11-14 |
| riagw.rocaton.com | Listed out of scope | 2026-11-14 |
| riagw1.rocaton.com | Listed out of scope | 2026-11-14 |
| secure.rocaton.com | Listed out of scope | 2026-11-14 |
| secure-uat.rocaton.comtest | Listed out of scope | 2026-11-14 |
| sip.rocaton.com | Listed out of scope | 2026-11-14 |
| smtp.rocaton.commail | Listed out of scope | 2026-11-14 |
| smtp2.rocaton.commail | Listed out of scope | 2026-11-14 |
| smtp3.rocaton.commail | Listed out of scope | 2026-11-14 |
| fallline.sso.rocaton.comauth | Listed out of scope | 2026-11-14 |
| staging1.rocaton.comstaging | Listed out of scope | 2026-11-14 |
| w3-dev.rocaton.comdev | Listed out of scope | 2026-11-14 |
| webmail.rocaton.commail | Listed out of scope | 2026-11-14 |
| www.rocaton.com | Listed out of scope | 2026-11-14 |
4,386 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.