Bug bounty program
DI
DigitalOcean
Most upvoted reports2
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Unauthorized access to https://shipit.analogpond.com/#822547 | Access Control | – | – | 86 |
| Blind XSS via Digital Ocean Partner account creation form.#880591 | Cross-site Scripting | – | – | 11 |
Subdomains61,391
| Name | Scope | First seen |
|---|---|---|
| ns.1.digitalocean.com | In scope | 2026-11-14 |
| 100wellness.digitalocean.com | In scope | 2026-11-14 |
| ns.2.digitalocean.com | In scope | 2026-11-14 |
| 220-atlasfelp.digitalocean.com | In scope | 2026-11-14 |
| 220-ct04.digitalocean.com | In scope | 2026-11-14 |
| 220-ctrlreply.digitalocean.com | In scope | 2026-11-14 |
| 220-dpc.digitalocean.com | In scope | 2026-11-14 |
| 220-godigital.digitalocean.com | In scope | 2026-11-14 |
| 220-insanbsi.digitalocean.com | In scope | 2026-11-14 |
| 220-masarsolution.digitalocean.com | In scope | 2026-11-14 |
| 220-nls.digitalocean.com | In scope | 2026-11-14 |
| 220-ns1.digitalocean.com | In scope | 2026-11-14 |
| 220-pctuneuphh.digitalocean.com | In scope | 2026-11-14 |
| 220-redbook.digitalocean.com | In scope | 2026-11-14 |
| 220-sally.digitalocean.com | In scope | 2026-11-14 |
| 220-snaproll.digitalocean.com | In scope | 2026-11-14 |
| 220-thewispy.digitalocean.com | In scope | 2026-11-14 |
| 220-tlc.digitalocean.com | In scope | 2026-11-14 |
| 220-uberclonescript.digitalocean.com | In scope | 2026-11-14 |
| 220-wellness.digitalocean.com | In scope | 2026-11-14 |
| 220-yellowleafz.digitalocean.com | In scope | 2026-11-14 |
| ns.3.digitalocean.com | In scope | 2026-11-14 |
| e1fee68fa4fdfd43050c5a98cedbfd02.32b6f0645f4506c22f5fad92267826bb.digitalocean.com | In scope | 2026-11-14 |
| 244.98.63.45.digitalocean.com | In scope | 2026-11-14 |
| 4t3vouz8f264ru1s.digitalocean.com | In scope | 2026-11-14 |
| 7marketplace.digitalocean.com | In scope | 2026-11-14 |
| server1.196.82.digitalocean.com | In scope | 2026-11-14 |
| 91-143-81-115.digitalocean.com | In scope | 2026-11-14 |
| 999919.digitalocean.com | In scope | 2026-11-14 |
| acc237.digitalocean.com | In scope | 2026-11-14 |
| admin.digitalocean.comadmin | In scope | 2026-11-14 |
| agent.digitalocean.com | In scope | 2026-11-14 |
| aiglos.digitalocean.com | In scope | 2026-11-14 |
| akira.digitalocean.com | In scope | 2026-11-14 |
| albus.digitalocean.com | In scope | 2026-11-14 |
| alquran.digitalocean.com | In scope | 2026-11-14 |
| ama.digitalocean.com | In scope | 2026-11-14 |
| amd.digitalocean.com | In scope | 2026-11-14 |
| ams2.digitalocean.com | In scope | 2026-11-14 |
| prod-nssrc2.ams2.digitalocean.com | In scope | 2026-11-14 |
| ams3.digitalocean.com | In scope | 2026-11-14 |
| ae40.ams3-edge1.digitalocean.com | In scope | 2026-11-14 |
| ae40.ams3-edge2.digitalocean.com | In scope | 2026-11-14 |
| analytics.digitalocean.com | In scope | 2026-11-14 |
| anchor.digitalocean.com | Listed out of scope | 2026-11-14 |
| angstrom.digitalocean.com | In scope | 2026-11-14 |
| api.digitalocean.comapi | In scope | 2026-11-14 |
| www.api.digitalocean.comapi | In scope | 2026-11-14 |
| apporio-1.digitalocean.com | In scope | 2026-11-14 |
| apps-inbound.digitalocean.com | In scope | 2026-11-14 |
| appsail.digitalocean.com | In scope | 2026-11-14 |
| artasian.digitalocean.com | In scope | 2026-11-14 |
| de-cix.ase.digitalocean.com | In scope | 2026-11-14 |
| assets.digitalocean.com | In scope | 2026-11-14 |
| atlasfelp.digitalocean.com | In scope | 2026-11-14 |
| avmbeefree.digitalocean.com | In scope | 2026-11-14 |
| batman.digitalocean.com | In scope | 2026-11-14 |
| bc-cdn.digitalocean.com | In scope | 2026-11-14 |
| bc-log.digitalocean.com | In scope | 2026-11-14 |
| bc-wup.digitalocean.com | In scope | 2026-11-14 |
| bestroofingtools1.digitalocean.com | In scope | 2026-11-14 |
| bestroofingtools2.digitalocean.com | In scope | 2026-11-14 |
| bestroofingtools3.digitalocean.com | In scope | 2026-11-14 |
| beta.digitalocean.comstaging | In scope | 2026-11-14 |
| www.beta.digitalocean.comstaging | In scope | 2026-11-14 |
| betastatus.digitalocean.com | In scope | 2026-11-14 |
| blog.digitalocean.com | In scope | 2026-11-14 |
| boomi.digitalocean.com | In scope | 2026-11-14 |
| boomi-uat.digitalocean.comtest | In scope | 2026-11-14 |
| bova.digitalocean.com | In scope | 2026-11-14 |
| ns1.box.digitalocean.com | In scope | 2026-11-14 |
| ns2.box.digitalocean.com | In scope | 2026-11-14 |
| ns3.box.digitalocean.com | In scope | 2026-11-14 |
| brand.digitalocean.com | Listed out of scope | 2026-11-14 |
| bud.digitalocean.com | In scope | 2026-11-14 |
| 91-143-81-120.bud.digitalocean.com | In scope | 2026-11-14 |
| business.digitalocean.com | In scope | 2026-11-14 |
| bwsr.digitalocean.com | In scope | 2026-11-14 |
| ca.digitalocean.com | In scope | 2026-11-14 |
| careers.digitalocean.com | In scope | 2026-11-14 |
| media.lmccreative.com.sfo2.cdn.digitalocean.com | In scope | 2026-11-14 |
| centos-1gb-fra1-01.digitalocean.com | In scope | 2026-11-14 |
| centos-1gb-lon1-01.digitalocean.com | In scope | 2026-11-14 |
| centos-2gb-sgp01.digitalocean.com | In scope | 2026-11-14 |
| centos-s-1vcpu-1gb-lon1-01.digitalocean.com | In scope | 2026-11-14 |
| cesar.digitalocean.com | In scope | 2026-11-14 |
| cf-ssl40656-protected-www.digitalocean.com | In scope | 2026-11-14 |
| cfaccesspoc.digitalocean.com | In scope | 2026-11-14 |
| clienteng-nyc3.digitalocean.com | In scope | 2026-11-14 |
| www.clienteng-nyc3.digitalocean.com | In scope | 2026-11-14 |
| clienteng-sfo2.digitalocean.com | In scope | 2026-11-14 |
| www.clienteng-sfo2.digitalocean.com | In scope | 2026-11-14 |
| clienteng-syd1.digitalocean.com | In scope | 2026-11-14 |
| cloud.digitalocean.com | In scope | 2026-11-14 |
| cloud-cdn.digitalocean.com | In scope | 2026-11-14 |
| rachid.cloud.digitalocean.com | In scope | 2026-11-14 |
| cloudsupport.digitalocean.com | Listed out of scope | 2026-11-14 |
| cloudsupport-full-staging.digitalocean.comstaging | In scope | 2026-11-14 |
| www.cloudsupport-full-staging.digitalocean.comstaging | In scope | 2026-11-14 |
| www.cloudsupport.digitalocean.com | In scope | 2026-11-14 |
852 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.