Bug bounty program
GS
Goldman Sachs
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 39
- Disclosed reports
- 0
- Subdomains
- 4,659
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains4,659
| Name | Scope | First seen |
|---|---|---|
| api.ayco.comapi | In scope | 2026-11-14 |
| android-api.claritymoney.comapi | In scope | 2026-11-14 |
| api.claritymoney.comapi | In scope | 2026-11-14 |
| android-api.dev.claritymoney.comapi, dev | In scope | 2026-11-14 |
| api.dev.claritymoney.comapi, dev | In scope | 2026-11-14 |
| api-test.dev.claritymoney.comapi, dev, test | In scope | 2026-11-14 |
| api-test-2.dev.claritymoney.comapi, dev, test | In scope | 2026-11-14 |
| ios-api.dev.claritymoney.comapi, dev | In scope | 2026-11-14 |
| ios-api.claritymoney.comapi | In scope | 2026-11-14 |
| prod-api.claritymoney.comapi | In scope | 2026-11-14 |
| prod-api2.claritymoney.comapi | In scope | 2026-11-14 |
| api.finlife.comapi | Not in the scope | 2026-11-14 |
| dev-api.genesiscapital.comapi, dev | Not in the scope | 2026-11-14 |
| gc-bde-borrower-api-qa.genesiscapital.comapi, test | Not in the scope | 2026-11-14 |
| api.goldman.comapi | In scope | 2026-11-14 |
| pilot.api.goldman.comapi | In scope | 2026-11-14 |
| qa.api.goldman.comapi, test | In scope | 2026-11-14 |
| qa2.api.goldman.comapi | In scope | 2026-11-14 |
| api.ayco.goldman.comapi | In scope | 2026-11-14 |
| api.aycouat.goldman.comapi | In scope | 2026-11-14 |
| qa1-api.sky.goldman.comapi | In scope | 2026-11-14 |
| qa2-api.sky.goldman.comapi | In scope | 2026-11-14 |
| qa3-api.sky.goldman.comapi | In scope | 2026-11-14 |
| api.xs2a.goldman.comapi | In scope | 2026-11-14 |
| api.gs.comapi | In scope | 2026-11-14 |
| api-concord-gir.gs.comapi | In scope | 2026-11-14 |
| api-etfaccelerator.gs.comapi | In scope | 2026-11-14 |
| api-higher.gs.comapi | In scope | 2026-11-14 |
| prod.api.ccm.gs.comapi | In scope | 2026-11-14 |
| uat.api.ccm.gs.comapi, test | In scope | 2026-11-14 |
| api.uat-mosaic.cft.gs.comapi, test | In scope | 2026-11-14 |
| beta.api.clearfactr.gs.comapi, staging | In scope | 2026-11-14 |
| beta.blue.api.clearfactr.gs.comapi, staging | In scope | 2026-11-14 |
| projx.blue.api.clearfactr.gs.comapi | In scope | 2026-11-14 |
| beta.green.api.clearfactr.gs.comapi, staging | In scope | 2026-11-14 |
| projx.green.api.clearfactr.gs.comapi | In scope | 2026-11-14 |
| projx.api.clearfactr.gs.comapi | In scope | 2026-11-14 |
| dev-api-concord-gir.gs.comapi, dev | In scope | 2026-11-14 |
| dev-api-higher.gs.comapi, dev | In scope | 2026-11-14 |
| api.gs-mosaic.gs.comapi | In scope | 2026-11-14 |
| api.gsmosaic.gs.comapi | In scope | 2026-11-14 |
| dev-api.higher.gs.comapi, dev | In scope | 2026-11-14 |
| qa-api.higher.gs.comapi, test | In scope | 2026-11-14 |
| mfa-api.imd.gs.comapi, auth | In scope | 2026-11-14 |
| mfa-api-qa.ny.imd.gs.comapi, auth, test | In scope | 2026-11-14 |
| webservices.zh.imd.gs.comapi | In scope | 2026-11-14 |
| prod.rest-api.insurancetechnologies.gs.comapi | In scope | 2026-11-14 |
| api.marquee-a-qa.gs.comapi, test | In scope | 2026-11-14 |
| api.marquee-a.gs.comapi | In scope | 2026-11-14 |
| api.marquee-b.gs.comapi | In scope | 2026-11-14 |
| api.marquee-qa.gs.comapi, test | In scope | 2026-11-14 |
| api-1.marquee-qa.gs.comapi, test | In scope | 2026-11-14 |
| api-hk.marquee-qa.gs.comapi, test | In scope | 2026-11-14 |
| api-ln.marquee-qa.gs.comapi, test | In scope | 2026-11-14 |
| api-ny.marquee-qa.gs.comapi, test | In scope | 2026-11-14 |
| beta-api.marquee-qa.gs.comapi, staging, test | In scope | 2026-11-14 |
| delta-api.marquee-qa.gs.comapi, test | In scope | 2026-11-14 |
| api.marquee.gs.comapi | In scope | 2026-11-14 |
| api-global.marquee.gs.comapi | In scope | 2026-11-14 |
| api-hk.marquee.gs.comapi | In scope | 2026-11-14 |
| api-ln.marquee.gs.comapi | In scope | 2026-11-14 |
| api-ln-iac.marquee.gs.comapi | In scope | 2026-11-14 |
| api-ny.marquee.gs.comapi | In scope | 2026-11-14 |
| api.mosaicorigin.gs.comapi | In scope | 2026-11-14 |
| prod-apigw.mulesoft-external.gs.comapi | In scope | 2026-11-14 |
| perf.api.cc-pod1.marcusinfra.nimbus.gs.comapi, test | In scope | 2026-11-14 |
| perf.api.cc-pod2.marcusinfra.nimbus.gs.comapi, test | In scope | 2026-11-14 |
| psd-api.pwm-digital-prod.nimbus.gs.comapi | In scope | 2026-11-14 |
| quicken-api.pwm-digital-prod.nimbus.gs.comapi | In scope | 2026-11-14 |
| ttax-api.pwm-digital-prod.nimbus.gs.comapi | In scope | 2026-11-14 |
| psd-api.pwm-digital-qa.nimbus.gs.comapi, test | In scope | 2026-11-14 |
| quicken-api.pwm-digital-qa.nimbus.gs.comapi, test | In scope | 2026-11-14 |
| ttax-api.pwm-digital-qa.nimbus.gs.comapi, test | In scope | 2026-11-14 |
| dev6-apigw-hcm.goldmanapps.oci.gs.comapi, dev | In scope | 2026-11-14 |
| dev6-apigw-hcm.goldmanlab.oci.gs.comapi, dev | In scope | 2026-11-14 |
| otcx.api.pwmmsg.gs.comapi | In scope | 2026-11-14 |
| qa-api-concord-gir.gs.comapi, test | In scope | 2026-11-14 |
| qa-api-etfaccelerator.gs.comapi, test | In scope | 2026-11-14 |
| qa-api-higher.gs.comapi, test | In scope | 2026-11-14 |
| api.gs-mosaic.qa.gs.comapi, test | In scope | 2026-11-14 |
| api.gsmosaic.qa.gs.comapi, test | In scope | 2026-11-14 |
| api.advisorsolutions.site.gs.comapi | In scope | 2026-11-14 |
| dev.api.advisorsolutions.site.gs.comapi, dev | In scope | 2026-11-14 |
| qa.api.advisorsolutions.site.gs.comapi, test | In scope | 2026-11-14 |
| cmg-workspace-api-dev.gir.site.gs.comapi, dev | In scope | 2026-11-14 |
| prod-api.powerplatform.site.gs.comapi | In scope | 2026-11-14 |
| qa-api.powerplatform.site.gs.comapi, test | In scope | 2026-11-14 |
| api.txb.gs.comapi | In scope | 2026-11-14 |
| api2.txb.gs.comapi | In scope | 2026-11-14 |
| api3.txb.gs.comapi | In scope | 2026-11-14 |
| apis.txb.gs.comapi | In scope | 2026-11-14 |
| api.stage.cit.txb.gs.comapi, staging | In scope | 2026-11-14 |
| api.dev.txb.gs.comapi, dev | In scope | 2026-11-14 |
| api3.dev.txb.gs.comapi, dev | In scope | 2026-11-14 |
| api.stage.dev.txb.gs.comapi, dev, staging | In scope | 2026-11-14 |
| api.pdev.txb.gs.comapi | In scope | 2026-11-14 |
| api4.pdev.txb.gs.comapi | In scope | 2026-11-14 |
| api.platform-dev.txb.gs.comapi, dev | In scope | 2026-11-14 |
| api.qa.txb.gs.comapi, test | In scope | 2026-11-14 |
| api2.qa.txb.gs.comapi, test | In scope | 2026-11-14 |
4,394 names are covered by the program's own scope; 8 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.