Bug bounty program
KU
Kubernetes
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 82
- Disclosed reports
- 77
- Subdomains
- 662
- Vendor on CyberSIXT
- Kubernetes (120 CVEs, 0 exploited)
Most upvoted reports77
All reportsSubdomains662
| Name | Scope | First seen |
|---|---|---|
| release-1-3.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-4.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-5.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-6.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-7.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-8.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| release-1-9.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| tip.cluster-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| v1alpha1.cluster-api.sigs.k8s.ioapi, staging | Not in the scope | 2026-11-14 |
| container-object-storage-interface.sigs.k8s.io | Not in the scope | 2026-11-14 |
| dra-driver-cpu.sigs.k8s.io | Not in the scope | 2026-11-14 |
| dra-driver-nvidia-gpu.sigs.k8s.io | Not in the scope | 2026-11-14 |
| dranet.sigs.k8s.io | Not in the scope | 2026-11-14 |
| foo.sigs.k8s.io | Not in the scope | 2026-11-14 |
| gateway-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| gateway-api-inference-extension.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| main.gateway-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| image-builder.sigs.k8s.io | Not in the scope | 2026-11-14 |
| jobset.sigs.k8s.io | Not in the scope | 2026-11-14 |
| kind.sigs.k8s.io | Not in the scope | 2026-11-14 |
| kindnet.sigs.k8s.io | Not in the scope | 2026-11-14 |
| kmm.sigs.k8s.io | Not in the scope | 2026-11-14 |
| kops.sigs.k8s.io | Not in the scope | 2026-11-14 |
| krew.sigs.k8s.io | Not in the scope | 2026-11-14 |
| kube-agentic-networking.sigs.k8s.iotools | Not in the scope | 2026-11-14 |
| kube-network-policies.sigs.k8s.iotools | Not in the scope | 2026-11-14 |
| kubectl.sigs.k8s.io | Not in the scope | 2026-11-14 |
| kueue.sigs.k8s.io | Not in the scope | 2026-11-14 |
| kustomize.sigs.k8s.io | Not in the scope | 2026-11-14 |
| kwok.sigs.k8s.io | Not in the scope | 2026-11-14 |
| lws.sigs.k8s.io | Not in the scope | 2026-11-14 |
| mcp-lifecycle-operator.sigs.k8s.io | Not in the scope | 2026-11-14 |
| minikube.sigs.k8s.io | Not in the scope | 2026-11-14 |
| model-serving-signals.sigs.k8s.io | Not in the scope | 2026-11-14 |
| multicluster.sigs.k8s.io | Not in the scope | 2026-11-14 |
| network-policy-api.sigs.k8s.ioapi | Not in the scope | 2026-11-14 |
| nfd.sigs.k8s.io | Not in the scope | 2026-11-14 |
| node-readiness-controller.sigs.k8s.io | Not in the scope | 2026-11-14 |
| prow.sigs.k8s.io | Not in the scope | 2026-11-14 |
| scheduler-plugins.sigs.k8s.io | Not in the scope | 2026-11-14 |
| secrets-store-csi-driver.sigs.k8s.io | Not in the scope | 2026-11-14 |
| master.secrets-store-csi-driver.sigs.k8s.io | Not in the scope | 2026-11-14 |
| vsphere-csi-driver.sigs.k8s.io | Not in the scope | 2026-11-14 |
| sippy.k8s.io | Not in the scope | 2026-11-14 |
| slack.k8s.io | Not in the scope | 2026-11-14 |
| slack-infra.k8s.io | Not in the scope | 2026-11-14 |
| slack-staging.k8s.iostaging | Not in the scope | 2026-11-14 |
| spartakus.k8s.io | Not in the scope | 2026-11-14 |
| storage.k8s.io | Not in the scope | 2026-11-14 |
| snapshot.storage.k8s.io | Not in the scope | 2026-11-14 |
| submit-queue.k8s.io | Not in the scope | 2026-11-14 |
| community.submit-queue.k8s.io | Not in the scope | 2026-11-14 |
| contrib.submit-queue.k8s.io | Not in the scope | 2026-11-14 |
| docs.submit-queue.k8s.io | Not in the scope | 2026-11-14 |
| kops.submit-queue.k8s.io | Not in the scope | 2026-11-14 |
| kubernetes.submit-queue.k8s.iotools | Not in the scope | 2026-11-14 |
| terminaldiscovery.k8s.io | Not in the scope | 2026-11-14 |
| api.e2e-0b558396e7-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-0e3b3b105e-51e6f.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-119d4bce7f-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-2a1210d242-167d8.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-2f38f331a5-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-335a350845-82393.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-3b069ed03f-3bdeb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-4386ba2b8b-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-48c3e7466b-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-52299a2419-167d8.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-6443a68b84-51e6f.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-752a644b67-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-7530df1184-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-78945a0dd8-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-78e37db369-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-8626c578fa-167d8.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-87a41f769c-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-903bce6b17-82393.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-9204b62fe8-82393.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-9b4c150ca1-3bdeb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-a1bee8b4b9-51e6f.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-a4cf1bad8d-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-a8ded46cc5-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-bcd6bf0425-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-c040dd4db7-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-c2b9a690a3-167d8.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-d0e1908200-82393.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-d2776fe574-82393.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-dda82cbc91-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-de41e3ce3a-51e6f.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-e0626a3170-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-e253554a42-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-f3f156c7a5-51e6f.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.e2e-ffa700880e-ff1eb.test-cncf-aws.k8s.ioapi, test | Not in the scope | 2026-11-14 |
| api.internal.e2e-kops-aws-canary.test-cncf-aws.k8s.ioapi, internal, staging, test | Not in the scope | 2026-11-14 |
| api.internal.scale-1000.periodic.test-cncf-aws.k8s.ioapi, internal, test | Not in the scope | 2026-11-14 |
| api.internal.scale-5000.periodic.test-cncf-aws.k8s.ioapi, internal, test | Not in the scope | 2026-11-14 |
| control-plane-sfo3-2.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotest | Not in the scope | 2026-11-14 |
| control-plane-sfo3-3.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotest | Not in the scope | 2026-11-14 |
| control-plane-sgp1-1.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotest | Not in the scope | 2026-11-14 |
| control-plane-sgp1-2.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotest | Not in the scope | 2026-11-14 |
| master-nyc1-3.masters.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotest | Not in the scope | 2026-11-14 |
| nodes-sfo3.e2e-b284d3e83b-4c997.test-cncf-do.k8s.iotest | Not in the scope | 2026-11-14 |
2 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.