Bug bounty program
Grindr
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 9
- Disclosed reports
- 0
- Subdomains
- 221
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains221
| Name | Scope | First seen |
|---|---|---|
| spf.grindr.com | In scope | 2026-11-14 |
| splunk.grindr.commonitoring | In scope | 2026-11-14 |
| splunk-1-us.grindr.commonitoring | In scope | 2026-11-14 |
| www.splunk-1-us.grindr.commonitoring | In scope | 2026-11-14 |
| splunk-2-us.grindr.commonitoring | In scope | 2026-11-14 |
| www.splunk-2-us.grindr.commonitoring | In scope | 2026-11-14 |
| staging.grindr.comstaging | In scope | 2026-11-14 |
| store.staging.grindr.comstaging | In scope | 2026-11-14 |
| status.grindr.commonitoring | Listed out of scope | 2026-11-14 |
| store.grindr.com | In scope | 2026-11-14 |
| taiwancareers.grindr.com | In scope | 2026-11-14 |
| trinity-cf.grindr.com | In scope | 2026-11-14 |
| trust.grindr.com | In scope | 2026-11-14 |
| uncoupled.grindr.com | In scope | 2026-11-14 |
| www.uncoupled.grindr.com | In scope | 2026-11-14 |
| unwrapped.grindr.com | In scope | 2026-11-14 |
| www.unwrapped.grindr.com | In scope | 2026-11-14 |
| vouch.grindr.com | In scope | 2026-11-14 |
| web.grindr.com | In scope | 2026-11-14 |
| web-stage.grindr.comstaging | In scope | 2026-11-14 |
| web-waf.grindr.com | In scope | 2026-11-14 |
| web-waf1.grindr.com | In scope | 2026-11-14 |
| web-waf2.grindr.com | In scope | 2026-11-14 |
| dev.web.grindr.comdev | In scope | 2026-11-14 |
| wildcard.grindr.com | In scope | 2026-11-14 |
| www.grindr.com | In scope | 2026-11-14 |
| www-assets-dev.grindr.comdev | In scope | 2026-11-14 |
| www-assets-prod.grindr.com | In scope | 2026-11-14 |
| www-stage.grindr.comstaging | In scope | 2026-11-14 |
| www-staging.grindr.comstaging | In scope | 2026-11-14 |
| www-tmp.grindr.com | In scope | 2026-11-14 |
| www3.grindr.com | In scope | 2026-11-14 |
| xtra.grindr.com | In scope | 2026-11-14 |
| xtra-staging.grindr.comstaging | In scope | 2026-11-14 |
| yass.grindr.com | In scope | 2026-11-14 |
| yass-admin.grindr.comadmin | In scope | 2026-11-14 |
| yass-test.grindr.comtest | In scope | 2026-11-14 |
| ai.grindr.io | In scope | 2026-11-14 |
| alpha.grindr.iostaging | In scope | 2026-11-14 |
| dev.grindr.iodev | In scope | 2026-11-14 |
| admin-vpn.dev.grindr.ioadmin, dev, vpn | In scope | 2026-11-14 |
| graph-service.api.dev.grindr.ioapi, dev | In scope | 2026-11-14 |
| astro.dev.grindr.iodev | In scope | 2026-11-14 |
| astrobf.dev.grindr.iodev | In scope | 2026-11-14 |
| astrodev.dev.grindr.iodev | In scope | 2026-11-14 |
| jenkins.dev.grindr.ioci, dev | In scope | 2026-11-14 |
| jenkins-client.dev.grindr.ioci, dev | In scope | 2026-11-14 |
| lite.dev.grindr.iodev | In scope | 2026-11-14 |
| lite-grpc.dev.grindr.ioapi, dev | In scope | 2026-11-14 |
| lite-qa.dev.grindr.iodev, test | In scope | 2026-11-14 |
| live-streaming.dev.grindr.iodev | In scope | 2026-11-14 |
| vpn.preprod.dev.grindr.iodev, staging, vpn | In scope | 2026-11-14 |
| techradar.dev.grindr.iodev | In scope | 2026-11-14 |
| dev1.grindr.iodev | In scope | 2026-11-14 |
| dev2.grindr.iodev | In scope | 2026-11-14 |
| apis.dev2.grindr.ioapi, dev | In scope | 2026-11-14 |
| astro.dev2.grindr.iodev | In scope | 2026-11-14 |
| cdc-connect.dev2.grindr.iodev | In scope | 2026-11-14 |
| consul.dev2.grindr.iodev, tools | In scope | 2026-11-14 |
| jenkins.dev2.grindr.ioci, dev | In scope | 2026-11-14 |
| jenkins-webhook.dev2.grindr.ioci, dev | In scope | 2026-11-14 |
| legal-agreements.dev2.grindr.iodev | In scope | 2026-11-14 |
| martech-assets.dev2.grindr.iodev | In scope | 2026-11-14 |
| sammies.dev2.grindr.iodev | In scope | 2026-11-14 |
| traefik-private.dev2.grindr.iodev, internal | In scope | 2026-11-14 |
| traefik-proxy-blue-private.dev2.grindr.iodev, internal | In scope | 2026-11-14 |
| traefik-proxy-private.dev2.grindr.iodev, internal | In scope | 2026-11-14 |
| www-assets.dev2.grindr.iodev | In scope | 2026-11-14 |
| dsci.grindr.io | In scope | 2026-11-14 |
| airflow-beta-master.dsci.grindr.iostaging, tools | In scope | 2026-11-14 |
| hue.dsci.grindr.io | In scope | 2026-11-14 |
| superset.dsci.grindr.iotools | In scope | 2026-11-14 |
| superset-new.dsci.grindr.iotools | In scope | 2026-11-14 |
| superset-newpresence-direct-cf.dsci.grindr.iotools | In scope | 2026-11-14 |
| vpn.dsci.grindr.iovpn | In scope | 2026-11-14 |
| health.grindr.io | In scope | 2026-11-14 |
| hub.grindr.io | In scope | 2026-11-14 |
| jenkins-master.hub.grindr.ioci | In scope | 2026-11-14 |
| kibana.hub.grindr.iomonitoring | In scope | 2026-11-14 |
| webrt.hub.grindr.io | In scope | 2026-11-14 |
| mlops-nonsensitive.grindr.io | In scope | 2026-11-14 |
| apis.mlops-nonsensitive.grindr.ioapi | In scope | 2026-11-14 |
| mlops-sensitive.grindr.io | In scope | 2026-11-14 |
| platform.grindr.io | In scope | 2026-11-14 |
| admin2vpn.platform.grindr.ioadmin, vpn | In scope | 2026-11-14 |
| helm.platform.grindr.io | In scope | 2026-11-14 |
| partnervpn.platform.grindr.io | In scope | 2026-11-14 |
| traefik-private.platform.grindr.iointernal | In scope | 2026-11-14 |
| vpn.platform.grindr.iovpn | In scope | 2026-11-14 |
| prod.grindr.io | In scope | 2026-11-14 |
| adbuilder.prod.grindr.io | In scope | 2026-11-14 |
| admin-k8s.prod.grindr.ioadmin, tools | In scope | 2026-11-14 |
| astro.prod.grindr.io | In scope | 2026-11-14 |
| k8s-jenkins-abc.prod.grindr.ioci, tools | In scope | 2026-11-14 |
| mumbai.prod.grindr.io | In scope | 2026-11-14 |
| presence-direct.prod.grindr.io | In scope | 2026-11-14 |
| proxy-abc.prod.grindr.io | In scope | 2026-11-14 |
| proxy-def.prod.grindr.io | In scope | 2026-11-14 |
| vpn.prod.grindr.iovpn | In scope | 2026-11-14 |
| prod2.grindr.io | In scope | 2026-11-14 |
212 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.