Bug bounty program
KU
Kubernetes
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 82
- Disclosed reports
- 77
- Subdomains
- 662
- Vendor on CyberSIXT
- Kubernetes (120 CVEs, 0 exploited)
Most upvoted reports77
All reportsSubdomains662
| Name | Scope | First seen |
|---|---|---|
| exploding.k8s.io | Not in the scope | 2026-11-14 |
| famf.k8s.io | Not in the scope | 2026-11-14 |
| feature.k8s.io | Not in the scope | 2026-11-14 |
| features.k8s.io | Not in the scope | 2026-11-14 |
| foo.k8s.io | Not in the scope | 2026-11-14 |
| gcsweb.k8s.io | Not in the scope | 2026-11-14 |
| get.k8s.io | Not in the scope | 2026-11-14 |
| git.k8s.iogit | Not in the scope | 2026-11-14 |
| go.k8s.io | Not in the scope | 2026-11-14 |
| config.go.k8s.io | Not in the scope | 2026-11-14 |
| goroutinecertificates.k8s.io | Not in the scope | 2026-11-14 |
| gubernator.k8s.io | Not in the scope | 2026-11-14 |
| hcr.k8s.io | Not in the scope | 2026-11-14 |
| issue.k8s.io | Not in the scope | 2026-11-14 |
| issues.k8s.io | Not in the scope | 2026-11-14 |
| jenkins.k8s.ioci | Not in the scope | 2026-11-14 |
| k8s-infra-cdn-cf-sandbox-ame.k8s.iotest, tools | Not in the scope | 2026-11-14 |
| k8s-infra-prow.k8s.iotools | Not in the scope | 2026-11-14 |
| kep.k8s.io | Not in the scope | 2026-11-14 |
| discovery.kops.k8s.io | Not in the scope | 2026-11-14 |
| kubeadm.k8s.io | Not in the scope | 2026-11-14 |
| metrics.k8s.iomonitoring | Not in the scope | 2026-11-14 |
| custom.metrics.k8s.iomonitoring | Not in the scope | 2026-11-14 |
| external.metrics.k8s.iomonitoring | Not in the scope | 2026-11-14 |
| migration.k8s.io | Not in the scope | 2026-11-14 |
| minikube.k8s.io | Not in the scope | 2026-11-14 |
| networking.k8s.io | Not in the scope | 2026-11-14 |
| gateway.networking.k8s.io | Not in the scope | 2026-11-14 |
| gateways.gateway.networking.k8s.io | Not in the scope | 2026-11-14 |
| networkpolicy.networking.k8s.io | Not in the scope | 2026-11-14 |
| new-gcsweb.k8s.io | Not in the scope | 2026-11-14 |
| node.k8s.io | Not in the scope | 2026-11-14 |
| node-perf-dash.k8s.iotest | Not in the scope | 2026-11-14 |
| node-perf-dash-staging.k8s.iostaging, test | Not in the scope | 2026-11-14 |
| oauth2-proxy.k8s.ioauth | Not in the scope | 2026-11-14 |
| packages.k8s.io | Not in the scope | 2026-11-14 |
| prod-cdn.packages.k8s.io | Not in the scope | 2026-11-14 |
| perf-dash.k8s.iotest | Not in the scope | 2026-11-14 |
| perf-dash-canary.k8s.iostaging, test | Not in the scope | 2026-11-14 |
| go.link.pkghash.k8s.io | Not in the scope | 2026-11-14 |
| go.link.pkghashbytes.k8s.io | Not in the scope | 2026-11-14 |
| pkgs.k8s.io | Not in the scope | 2026-11-14 |
| pr.k8s.io | Not in the scope | 2026-11-14 |
| pr-test.k8s.iotest | Not in the scope | 2026-11-14 |
| etcdserver.protoevents.k8s.io | Not in the scope | 2026-11-14 |
| prow.k8s.io | In scope | 2026-11-14 |
| prow-canary.k8s.iostaging | Not in the scope | 2026-11-14 |
| monitoring.prow-canary.k8s.iomonitoring, staging | Not in the scope | 2026-11-14 |
| docs.prow.k8s.io | Not in the scope | 2026-11-14 |
| mimir.prow.k8s.io | Not in the scope | 2026-11-14 |
| monitoring.prow.k8s.iomonitoring | Not in the scope | 2026-11-14 |
| monitoring-eks.prow.k8s.iomonitoring | Not in the scope | 2026-11-14 |
| monitoring-gke.prow.k8s.iomonitoring | Not in the scope | 2026-11-14 |
| prs.k8s.io | Not in the scope | 2026-11-14 |
| redirect.k8s.io | Not in the scope | 2026-11-14 |
| registry.k8s.iotools | Not in the scope | 2026-11-14 |
| registry-sandbox.k8s.iotest, tools | Not in the scope | 2026-11-14 |
| cdn.registry.k8s.iotools | Not in the scope | 2026-11-14 |
| rel.k8s.io | Not in the scope | 2026-11-14 |
| release.k8s.io | Not in the scope | 2026-11-14 |
| releases.k8s.io | Not in the scope | 2026-11-14 |
| relnotes.k8s.io | Not in the scope | 2026-11-14 |
| reviewable.k8s.io | Not in the scope | 2026-11-14 |
| sbom.k8s.io | Not in the scope | 2026-11-14 |
| scheduling.k8s.io | Not in the scope | 2026-11-14 |
| servicecatalog.k8s.io | Not in the scope | 2026-11-14 |
| sigs.k8s.io | Not in the scope | 2026-11-14 |
| agent-sandbox.sigs.k8s.iotest | Not in the scope | 2026-11-14 |
| capz.sigs.k8s.io | Not in the scope | 2026-11-14 |
| cloud-provider-aws.sigs.k8s.io | Not in the scope | 2026-11-14 |
| cloud-provider-azure.sigs.k8s.io | Not in the scope | 2026-11-14 |
| cloud-provider-vsphere.sigs.k8s.io | Not in the scope | 2026-11-14 |
| cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| cluster-api-aws.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| cluster-api-cloudstack.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| cluster-api-gcp.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| cluster-api-ibmcloud.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| main.cluster-api-ibmcloud.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-12.cluster-api-ibmcloud.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-3.cluster-api-ibmcloud.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-4.cluster-api-ibmcloud.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-5.cluster-api-ibmcloud.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-6.cluster-api-ibmcloud.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-7.cluster-api-ibmcloud.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| cluster-api-openstack.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| cluster-api-operator.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| main.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| master.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-1.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-2.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-3.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-0-4.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-0.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-1.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-10.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-11.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-12.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-13.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-14.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-2.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
2 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.