Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
11
Disclosed reports
0
Subdomains
2,014
Vendor on CyberSIXT
Matomo (18 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains2,014

Subdomains of Matomo
NameScopeFirst seen
beta.innocraft.cloudstagingNot in the scope2026-11-14
alpha.innocraft.cloudstagingNot in the scope2026-11-14
stage.innocraft.cloudstagingNot in the scope2026-11-14
preview.innocraft.cloudstagingNot in the scope2026-11-14
staging.innocraft.cloudstagingNot in the scope2026-11-14
beta.www.innocraft.cloudstagingNot in the scope2026-11-14
stage.www.innocraft.cloudstagingNot in the scope2026-11-14
api-staging.innocraft.cloudapi, stagingNot in the scope2026-11-14
preview.www.innocraft.cloudstagingNot in the scope2026-11-14
staging.dev.innocraft.clouddev, stagingNot in the scope2026-11-14
staging.www.innocraft.cloudstagingNot in the scope2026-11-14
test-staging.innocraft.cloudstaging, testNot in the scope2026-11-14
test2-staging.innocraft.cloudstaging, testNot in the scope2026-11-14
th346-staging.innocraft.cloudstagingNot in the scope2026-11-14
staging-billing.innocraft.cloudstagingNot in the scope2026-11-14
steur343-staging.innocraft.cloudstagingNot in the scope2026-11-14
siteproxy-staging.innocraft.cloudstagingNot in the scope2026-11-14
publishing-preview.innocraft.cloudstagingNot in the scope2026-11-14
newtest.staging.dev.innocraft.clouddev, stagingNot in the scope2026-11-14
thomastest1-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomastest2-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomastest4-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomastest6-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomastest7-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomastest8-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomastest9-staging.innocraft.cloudstagingNot in the scope2026-11-14
lufthansagroup-stage.innocraft.cloudstagingNot in the scope2026-11-14
finaltest.staging.dev.innocraft.clouddev, stagingNot in the scope2026-11-14
firsttest.staging.dev.innocraft.clouddev, stagingNot in the scope2026-11-14
merchandising-preview.innocraft.cloudstagingNot in the scope2026-11-14
abcdef-jupiter-staging.innocraft.cloudstagingNot in the scope2026-11-14
acmtesting.staging.dev.innocraft.clouddev, stagingNot in the scope2026-11-14
publishing-preview.www.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur328-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur345-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur346-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur347-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur348-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur349-staging.innocraft.cloudstagingNot in the scope2026-11-14
enterprise-demo-staging.innocraft.cloudstaging, testNot in the scope2026-11-14
thomassteur4343-staging.innocraft.cloudstagingNot in the scope2026-11-14
erwrinnocrafttest-staging.innocraft.cloudstagingNot in the scope2026-11-14
merchandising-preview.www.innocraft.cloudstagingNot in the scope2026-11-14
newtesttarget.staging.dev.innocraft.clouddev, stagingNot in the scope2026-11-14
thomassteur232324-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur239232-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur493932-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteurnotdpa-staging.innocraft.cloudstagingNot in the scope2026-11-14
thomassteur3493881-staging.innocraft.cloudstagingNot in the scope2026-11-14
staging.shop.halkingazetesi.innocraft.cloudstagingNot in the scope2026-11-14
secondtesttarget.staging.dev.innocraft.clouddev, stagingNot in the scope2026-11-14
xyzdemotestinnocraft-staging.innocraft.cloudstagingNot in the scope2026-11-14
gac-rds-external-readonly-preprod.innocraft.cloudstagingNot in the scope2026-11-14
gac-rds-external-readonly-preprod.www.innocraft.cloudstagingNot in the scope2026-11-14
stage-dashboard-766142696.us-east-2.staffs-union.innocraft.cloudadmin, stagingNot in the scope2026-11-14
staging.matomo.orgstagingNot in the scope2026-11-14
staging2.matomo.orgstagingNot in the scope2026-11-14
de-staging.matomo.orgstagingNot in the scope2026-11-14
es-staging.matomo.orgstagingNot in the scope2026-11-14
fr-staging.matomo.orgstagingNot in the scope2026-11-14
fr.staging.matomo.orgstagingNot in the scope2026-11-14
fr.staging2.matomo.orgstagingNot in the scope2026-11-14
staging-shop.matomo.orgstagingNot in the scope2026-11-14
staging2-shop.matomo.orgstagingNot in the scope2026-11-14
matomo-staging.matomo.orgstagingNot in the scope2026-11-14
origin.staging.matomo.orgstagingNot in the scope2026-11-14
staging-themes.matomo.orgstagingNot in the scope2026-11-14
origin.staging2.matomo.orgstagingNot in the scope2026-11-14
staging-plugins.matomo.orgstagingNot in the scope2026-11-14
zh-hans-staging.matomo.orgstagingNot in the scope2026-11-14
staging2-plugins.matomo.orgstagingNot in the scope2026-11-14
staging-test-shop.matomo.orgstaging, testNot in the scope2026-11-14
origin.staging-shop.matomo.orgstagingNot in the scope2026-11-14
origin.staging2-shop.matomo.orgstagingNot in the scope2026-11-14
origin.staging-themes.matomo.orgstagingNot in the scope2026-11-14
origin.staging-plugins.matomo.orgstagingNot in the scope2026-11-14
origin.staging2-plugins.matomo.orgstagingNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.