Bug bounty program
Kiwi.com
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 9
- Disclosed reports
- 0
- Subdomains
- 2,859
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains2,859
| Name | Scope | First seen |
|---|---|---|
| email-www.automation.kiwi.com | Listed out of scope | 2026-11-14 |
| www.cars.kiwi.com | Listed out of scope | 2026-11-14 |
| www.citi-sign.kiwi.com | Listed out of scope | 2026-11-14 |
| email.code.kiwi.com | Listed out of scope | 2026-11-14 |
| www.code.kiwi.com | Listed out of scope | 2026-11-14 |
| it.coupons.kiwi.com | Listed out of scope | 2026-11-14 |
| pt.coupons.kiwi.com | Listed out of scope | 2026-11-14 |
| dvnpeinncov.kiwi.com | Listed out of scope | 2026-11-14 |
| email.kiwi.com | Listed out of scope | 2026-11-14 |
| email.flightcrew.kiwi.com | Listed out of scope | 2026-11-14 |
| gcars.kiwi.com | Listed out of scope | 2026-11-14 |
| gciti-sign.kiwi.com | Listed out of scope | 2026-11-14 |
| gcode.kiwi.com | Listed out of scope | 2026-11-14 |
| glearn.kiwi.com | Listed out of scope | 2026-11-14 |
| email.ground.kiwi.com | Listed out of scope | 2026-11-14 |
| email.hotels.kiwi.com | Listed out of scope | 2026-11-14 |
| www.learn.kiwi.com | Listed out of scope | 2026-11-14 |
| link.kiwi.com | Listed out of scope | 2026-11-14 |
| email.ov.kiwi.com | Listed out of scope | 2026-11-14 |
| packages.kiwi.com | Listed out of scope | 2026-11-14 |
| dev.parking.kiwi.comdev | Listed out of scope | 2026-11-14 |
| int.parking.kiwi.com | Listed out of scope | 2026-11-14 |
| rooms.kiwi.com | Listed out of scope | 2026-11-14 |
| status.kiwi.commonitoring | Listed out of scope | 2026-11-14 |
| email.support.kiwi.com | Listed out of scope | 2026-11-14 |
| email.surveys-mg.kiwi.com | Listed out of scope | 2026-11-14 |
| email.surveys.kiwi.com | Listed out of scope | 2026-11-14 |
| emails.surveys.kiwi.com | Listed out of scope | 2026-11-14 |
| email.txn-dev-mg.kiwi.comdev | Listed out of scope | 2026-11-14 |
| email.txn-mg.kiwi.com | Listed out of scope | 2026-11-14 |
| email.txn-ov.kiwi.com | Listed out of scope | 2026-11-14 |
| vacation.kiwi.com | Listed out of scope | 2026-11-14 |
| email.airline.skypicker.com | Listed out of scope | 2026-11-14 |
| email.mg.analytics.skypicker.com | Listed out of scope | 2026-11-14 |
| emails-ng.disruptions-prod.skypicker.com | Listed out of scope | 2026-11-14 |
| emails.skypicker.com | Listed out of scope | 2026-11-14 |
| emails-dev.skypicker.comdev | Listed out of scope | 2026-11-14 |
| mail.skypicker.commail | Listed out of scope | 2026-11-14 |
| email.mg.skypicker.com | Listed out of scope | 2026-11-14 |
| nyrujhhu3yuk.nest.skypicker.com | Listed out of scope | 2026-11-14 |
| emails.reservations-prod.skypicker.com | Listed out of scope | 2026-11-14 |
| emails.reservations-sandbox.skypicker.comtest | Listed out of scope | 2026-11-14 |
| retool.skypicker.com | Listed out of scope | 2026-11-14 |
2,816 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.