Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
36
Disclosed reports
0
Subdomains
7,776
Vendor on CyberSIXT
Kaseya (37 CVEs, 3 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains7,776

Subdomains of Kaseya
NameScopeFirst seen
demo.bitdam.comtestIn scope2026-11-14
test.bitdam.comtestIn scope2026-11-14
sandbox.bitdam.comtestIn scope2026-11-14
demo.app.bitdam.comtestIn scope2026-11-14
test.mila.bitdam.comtestIn scope2026-11-14
app-sg-test.bitdam.comtestIn scope2026-11-14
app-uk-test.bitdam.comtestIn scope2026-11-14
prod.test.mila.bitdam.comtestIn scope2026-11-14
partner.prod.test.mila.bitdam.comtestIn scope2026-11-14
sandbox.centrastage.nettestIn scope2026-11-14
test.cloudtrax.comtestIn scope2026-11-14
sam-test.cloudtrax.comtestIn scope2026-11-14
api-v3-test.cloudtrax.comapi, testIn scope2026-11-14
branding-qa.cloudtrax.comtestIn scope2026-11-14
sandbox-ct4.cloudtrax.comtestIn scope2026-11-14
sam-ssl-test.cloudtrax.comtestIn scope2026-11-14
cloud_ap-test.cloudtrax.comtestIn scope2026-11-14
autocert-test1.cloudtrax.comtestIn scope2026-11-14
autocert-test2.cloudtrax.comtestIn scope2026-11-14
device-private-ca-test.cloudtrax.cominternal, testIn scope2026-11-14
sandbox.rmm.datto.comtestIn scope2026-11-14
sandbox2.rmm.datto.comtestIn scope2026-11-14
authweb-sandbox.datto.comtestIn scope2026-11-14
qa-var.workplace.datto.comtestIn scope2026-11-14
qa-dvaa.workplace.datto.comtestIn scope2026-11-14
qa-atpsa.workplace.datto.comtestIn scope2026-11-14
qa-ateval.workplace.datto.comtestIn scope2026-11-14
qa-coffee.workplace.datto.comtestIn scope2026-11-14
qa-taiwan.workplace.datto.comtestIn scope2026-11-14
auth.authweb-sandbox.datto.comauth, testIn scope2026-11-14
dlt-rly-relay-1-test.datto.comtestIn scope2026-11-14
dlt-rly-relay-2-test.datto.comtestIn scope2026-11-14
fra-rly-relay-1-test.datto.comtestIn scope2026-11-14
fra-rly-relay-2-test.datto.comtestIn scope2026-11-14
qa-jp-lab4.workplace.datto.comtestIn scope2026-11-14
syd-rly-relay-1-test.datto.comtestIn scope2026-11-14
syd-rly-relay-2-test.datto.comtestIn scope2026-11-14
qatest-test.workplace.datto.comtestIn scope2026-11-14
aca-demo1.dbi-platform.datto.comtestIn scope2026-11-14
dlt-rly-tracker-1-test.datto.comtestIn scope2026-11-14
dlt-rly-tracker-2-test.datto.comtestIn scope2026-11-14
dlt-rly-tracker-3-test.datto.comtestIn scope2026-11-14
dlt-rly-tracker-4-test.datto.comtestIn scope2026-11-14
dlt-rly-tracker-5-test.datto.comtestIn scope2026-11-14
dlt-rly-tracker-6-test.datto.comtestIn scope2026-11-14
lag-test-hello.workplace.datto.comtestIn scope2026-11-14
qa-test-resvan.workplace.datto.comtestIn scope2026-11-14
stc-c7-qa-web01.dattobackup.comtestIn scope2026-11-14
stc-c7-qa-db01.stcqa.dattobackup.comtestIn scope2026-11-14
stc-c7-qa-web01.stcqa.dattobackup.comtestIn scope2026-11-14
stc-dss-qa-db01.stcqa.dattobackup.comtestIn scope2026-11-14
stc-dss-qa-web01.stcqa.dattobackup.comtestIn scope2026-11-14
demo.gluh.cotestIn scope2026-11-14
test.gluh.cotestIn scope2026-11-14
test1.gluh.cotestIn scope2026-11-14
test2.gluh.cotestIn scope2026-11-14
test3.gluh.cotestIn scope2026-11-14
test1b.gluh.cotestIn scope2026-11-14
test2b.gluh.cotestIn scope2026-11-14
test3b.gluh.cotestIn scope2026-11-14
demo-us.gluh.cotestIn scope2026-11-14
www.demo.gluh.cotestIn scope2026-11-14
authweb.test.gluh.cotestIn scope2026-11-14
demo.infocyte.comtestIn scope2026-11-14
test.streaming.ap.infocyte.comtestIn scope2026-11-14
test.streaming.eu.infocyte.comtestIn scope2026-11-14
test.streaming.us.infocyte.comtestIn scope2026-11-14
qa.lab3.soonr.comtestIn scope2026-11-14
fed-test.soonr.comtestIn scope2026-11-14

7,776 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in