Bug bounty program
DI
DigitalOcean
- Platform
- Intigriti
- Bounties
- Pays
- Assets in scope
- 19
- Disclosed reports
- 2
- Subdomains
- 61,391
- Vendor on CyberSIXT
- DigitalOcean (1 CVE, 0 exploited)
Most upvoted reports2
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Unauthorized access to https://shipit.analogpond.com/#822547 | Access Control | – | – | 86 |
| Blind XSS via Digital Ocean Partner account creation form.#880591 | Cross-site Scripting | – | – | 11 |
Subdomains61,391
| Name | Scope | First seen |
|---|---|---|
| dctrack-dev.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| example.dev.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| defaultdroplet1-nologin-zmvm-ys52zry.dev0.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| defaultdropletu-nologin-dockerdesktop-e5imkwi.dev0.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| defaultdropletu-nologin-zora-7gn8i3w.dev0.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| defaultphysical-nologin-zmvm-sst7joy.dev0.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| defaultphysical-nologin-zora-77a2jtb.dev0.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| dev-icinga2-master01.dev0.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| dev-icinga2-master02.dev0.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| obj-lb.dev0.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| test-lb01.dev0.internal.digitalocean.comdev, internal, test | In scope | 2026-11-14 |
| test-lb01-imgmt01.dev0.internal.digitalocean.comdev, internal, test | In scope | 2026-11-14 |
| dev-icinga2-satellite01.dev1.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| icinga2-satellite01.dev1.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| icingadistr01.dev1.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| dctrack-dev.nyc3.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| www.dctrack-dev.nyc3.internal.digitalocean.comdev, internal | In scope | 2026-11-14 |
| localhost.digitalocean.comdev | In scope | 2026-11-14 |
| a3d-s3-dev.ams3.digitaloceanspaces.comdata, dev | Listed out of scope | 2026-11-14 |
| advaya-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| arrowhead-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| buying-local.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| cerins-space-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| count-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| cretico-fs-dev-public.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| crop-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-auth-spaces.ams3.digitaloceanspaces.comauth, dev | Listed out of scope | 2026-11-14 |
| dev-gamerhash-com.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-newcraft-custom-photo-editor-app.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-snowit.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-storage-savvyvideo.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-tiaglin-cdn.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| impaktcrm-dev-storage.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| negotiate-like-a-local.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| newsapp-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| obsentum-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| streameth-develop.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| tradehouse-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| v2-cdn-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| validator-info-dev-s3.ams3.digitaloceanspaces.comdata, dev | Listed out of scope | 2026-11-14 |
| yellow-dev.ams3.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| vtv-media-dev.blr1.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| 7span-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| appenhancer-static-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| apq-retouren-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| atom-private-development.ams3.cdn.digitaloceanspaces.comdev, internal | Listed out of scope | 2026-11-14 |
| atom-private-development4.ams3.cdn.digitaloceanspaces.comdev, internal | Listed out of scope | 2026-11-14 |
| atom-public-development.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| atom-public-development4.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| atticq-uploads-dev.ams3.cdn.digitaloceanspaces.comdata, dev | Listed out of scope | 2026-11-14 |
| auftrag-nl-ams-3-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| bluelilo-static-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| bookinglayer-devel-app-cdn.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| bravo-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| calabi-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| cdn-sjef-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| ceapro-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| cer-bo-dev-cdn.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| chat-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| cityoffer-local.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| ckeditor-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| claus-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| contentcreatorstudio-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| contentstudio-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| crm-leadgid-dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| davidpeachme-local.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| delivery-development.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev.codelines.demo.ams3.cdn.digitaloceanspaces.comdev, test | Listed out of scope | 2026-11-14 |
| denimdefined-develop.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-alleexamens.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-arcsi.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-badensolutions.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-bio-zephyr.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-cdn-blocrice.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-content.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-intranet-grupovantagem.ams3.cdn.digitaloceanspaces.comdev, internal | Listed out of scope | 2026-11-14 |
| dev-marathon-photos.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-med.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-media.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-media-zephyr.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-moving-portals-catalog.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-snap-e.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-ssl-docentenpagina.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-ssl-videopaneel.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-sslleiden.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-static.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-static-zephyr.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| dev-twittertap-embeds.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| ausstattungskonzept-designer.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| cdn.cine.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| be.cleys.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| ess.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| be.maekelhoeve.events.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| space.exchangers.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| be.eyetec.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| katalysis.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| s1.kilab.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| mast-cdn.shbbl.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
| static.api.tulz.dev.ams3.cdn.digitaloceanspaces.comapi, dev | Listed out of scope | 2026-11-14 |
| static.scouted.bots.tulz.dev.ams3.cdn.digitaloceanspaces.comdev | Listed out of scope | 2026-11-14 |
852 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.