Bug bounty program
GS
Goldman Sachs
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 39
- Disclosed reports
- 0
- Subdomains
- 4,659
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains4,659
| Name | Scope | First seen |
|---|---|---|
| qa.accounts.ayco.comtest | In scope | 2026-11-14 |
| uat.accounts.ayco.comtest | In scope | 2026-11-14 |
| beta-qa-wellness.ayco.comstaging, test | In scope | 2026-11-14 |
| login-qa.ayco.comauth, test | In scope | 2026-11-14 |
| origin-qa.ayco.comtest | In scope | 2026-11-14 |
| pilot-qa-portal.ayco.comtest | In scope | 2026-11-14 |
| pilot-qa-wellness.ayco.comtest | In scope | 2026-11-14 |
| qa.portal.ayco.comtest | In scope | 2026-11-14 |
| orgn191708.qa.portal.ayco.comtest | In scope | 2026-11-14 |
| qa.protect.ayco.comtest | In scope | 2026-11-14 |
| uat.protect.ayco.comtest | In scope | 2026-11-14 |
| qa.ayco.comtest | In scope | 2026-11-14 |
| qa-engage.ayco.comtest | In scope | 2026-11-14 |
| qa-pilot-accounts.ayco.comtest | In scope | 2026-11-14 |
| qa-pilot-portal.ayco.comtest | In scope | 2026-11-14 |
| saml-qa.ayco.comauth, test | In scope | 2026-11-14 |
| test.ayco.comtest | In scope | 2026-11-14 |
| uat.ayco.comtest | In scope | 2026-11-14 |
| beta.uat.ayco.comstaging, test | In scope | 2026-11-14 |
| pilot.uat.ayco.comtest | In scope | 2026-11-14 |
| qa.wellness.ayco.comtest | In scope | 2026-11-14 |
| api-test.dev.claritymoney.comapi, dev, test | In scope | 2026-11-14 |
| api-test-2.dev.claritymoney.comapi, dev, test | In scope | 2026-11-14 |
| test1dev.finlife.comdev, test | Not in the scope | 2026-11-14 |
| gc-bde-borrower-api-qa.genesiscapital.comapi, test | Not in the scope | 2026-11-14 |
| gc-bde-borrower-webapp-qa.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| los-test.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| www.los-test.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| los-uat.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| mot-test.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| uat-lenderapi.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| uat-lenderweb.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| uat-portalapi.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| uat-portalweb.genesiscapital.comtest | Not in the scope | 2026-11-14 |
| akamai-qa-test.goldman.comtest | In scope | 2026-11-14 |
| akamai-test.goldman.comtest | In scope | 2026-11-14 |
| qa.api.goldman.comapi, test | In scope | 2026-11-14 |
| checkfree-qa.goldman.comtest | In scope | 2026-11-14 |
| checking-qa.goldman.comtest | In scope | 2026-11-14 |
| checking-zelle-uat.goldman.comtest | In scope | 2026-11-14 |
| chi-qa-billpay.goldman.comtest | In scope | 2026-11-14 |
| consent-qa.goldman.comtest | In scope | 2026-11-14 |
| content-qa.goldman.comtest | In scope | 2026-11-14 |
| cwm-qa.goldman.comtest | In scope | 2026-11-14 |
| dal-qa-billpay.goldman.comtest | In scope | 2026-11-14 |
| ext-qa.goldman.comtest | In scope | 2026-11-14 |
| qa.finologee.goldman.comtest | In scope | 2026-11-14 |
| uat.gs.invest.goldman.comtest | In scope | 2026-11-14 |
| pilot.uat.gs.invest.goldman.comtest | In scope | 2026-11-14 |
| uat.invest.goldman.comtest | In scope | 2026-11-14 |
| beta.uat.invest.goldman.comstaging, test | In scope | 2026-11-14 |
| kpmg.beta.uat.invest.goldman.comstaging, test | In scope | 2026-11-14 |
| www.kpmg.beta.uat.invest.goldman.comstaging, test | In scope | 2026-11-14 |
| www.beta.uat.invest.goldman.comstaging, test | In scope | 2026-11-14 |
| help.uat.invest.goldman.comtest | In scope | 2026-11-14 |
| kpmg.uat.invest.goldman.comtest | In scope | 2026-11-14 |
| www.kpmg.uat.invest.goldman.comtest | In scope | 2026-11-14 |
| pilot.uat.invest.goldman.comtest | In scope | 2026-11-14 |
| kpmg.pilot.uat.invest.goldman.comtest | In scope | 2026-11-14 |
| www.kpmg.pilot.uat.invest.goldman.comtest | In scope | 2026-11-14 |
| www.pilot.uat.invest.goldman.comtest | In scope | 2026-11-14 |
| www.uat.invest.goldman.comtest | In scope | 2026-11-14 |
| login-qa.goldman.comauth, test | In scope | 2026-11-14 |
| mfa-qa.goldman.comauth, test | In scope | 2026-11-14 |
| mfa-qa-srp.goldman.comauth, test | In scope | 2026-11-14 |
| mfa-qamfa-qamfa-qamfa-qa.goldman.comauth, test | In scope | 2026-11-14 |
| origin-qa.goldman.comtest | In scope | 2026-11-14 |
| mobile.origin-qa.goldman.comtest | In scope | 2026-11-14 |
| qa.privatebank.goldman.comtest | In scope | 2026-11-14 |
| uat.privatebank.goldman.comtest | In scope | 2026-11-14 |
| login-qa.psd.goldman.comauth, test | In scope | 2026-11-14 |
| qa.login.psd.goldman.comauth, test | In scope | 2026-11-14 |
| pwm-qa-launchdarkly.goldman.comtest | In scope | 2026-11-14 |
| qa.goldman.comtest | In scope | 2026-11-14 |
| qa-appointments.goldman.comtest | In scope | 2026-11-14 |
| qa-billpay.goldman.comtest | Listed out of scope | 2026-11-14 |
| qa-consent-login.goldman.comauth, test | In scope | 2026-11-14 |
| qa-invoices.goldman.comtest | In scope | 2026-11-14 |
| qa-ofx-partner.goldman.comtest | In scope | 2026-11-14 |
| m.qa.goldman.comtest | In scope | 2026-11-14 |
| mfa.qa.goldman.comauth, test | In scope | 2026-11-14 |
| mobile.qa.goldman.comtest | In scope | 2026-11-14 |
| ofx.qa.goldman.comtest | In scope | 2026-11-14 |
| origin-mfa.qa.goldman.comauth, test | In scope | 2026-11-14 |
| preview-mobile.qa.goldman.comstaging, test | In scope | 2026-11-14 |
| psd.qa.goldman.comtest | In scope | 2026-11-14 |
| resources-qa.goldman.comtest | In scope | 2026-11-14 |
| uat.sports.goldman.comtest | In scope | 2026-11-14 |
| sandbox.xs2a.goldman.comtest | In scope | 2026-11-14 |
| uat.origin.goldmanpfm.comtest | In scope | 2026-11-14 |
| uat.goldmanpfm.comtest | In scope | 2026-11-14 |
4,394 names are covered by the program's own scope; 8 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.