Skip to content
Connect AISign inSign up free

Bug bounty program

MO

MongoDB

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
30
Disclosed reports
0
Subdomains
7,936
Vendor on CyberSIXT
MongoDB (411 CVEs, 2 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains7,936

Root
Scope
Name suggests
First seen
Text file7,936 names
Subdomains of MongoDB
NameScopeFirst seen
wildcard.atlas.mongodb.comIn scope2026-11-14
auth.mongodb.comauthIn scope2026-11-14
auth-qa.mongodb.comauth, testIn scope2026-11-14
www.auth-qa.mongodb.comauth, testIn scope2026-11-14
www.auth.mongodb.comauthIn scope2026-11-14
authorize.mongodb.comIn scope2026-11-14
authorize-dev.mongodb.comdevIn scope2026-11-14
authorize-internal.mongodb.cominternalIn scope2026-11-14
authorize-qa.mongodb.comtestIn scope2026-11-14
authorize-stage.mongodb.comstagingIn scope2026-11-14
authorize-staging.mongodb.comstagingIn scope2026-11-14
autoconfig.mongodb.comIn scope2026-11-14
autodiscover.mongodb.commailIn scope2026-11-14
b.mongodb.comIn scope2026-11-14
backup-san.mongodb.comdataIn scope2026-11-14
bbs.mongodb.comIn scope2026-11-14
beta.mongodb.comstagingIn scope2026-11-14
billing-raw-metrics.mongodb.commonitoringIn scope2026-11-14
billing-raw-metrics-dev.mongodb.comdev, monitoringIn scope2026-11-14
billing-raw-metrics-qa.mongodb.commonitoring, testIn scope2026-11-14
billing-raw-metrics-staging.mongodb.commonitoring, stagingIn scope2026-11-14
blog.mongodb.comIn scope2026-11-14
blogs.mongodb.comIn scope2026-11-14
api.blue.mongodb.comapiIn scope2026-11-14
evs.blue.mongodb.comIn scope2026-11-14
bounce.mongodb.comIn scope2026-11-14
bugs.mongodb.comIn scope2026-11-14
builder.mongodb.comIn scope2026-11-14
bux180.mongodb.comIn scope2026-11-14
c.mongodb.comIn scope2026-11-14
canary.mongodb.comstagingIn scope2026-11-14
careers.mongodb.comIn scope2026-11-14
cdn.mongodb.comIn scope2026-11-14
cedar.mongodb.comIn scope2026-11-14
cf.mongodb.comIn scope2026-11-14
benmachine.cf.mongodb.comIn scope2026-11-14
benmachine2.cf.mongodb.comIn scope2026-11-14
benmachine3.cf.mongodb.comIn scope2026-11-14
benmachine4.cf.mongodb.comIn scope2026-11-14
benmachine5.cf.mongodb.comIn scope2026-11-14
vm1.cf.mongodb.comIn scope2026-11-14
www.cf.mongodb.comIn scope2026-11-14
cglb.mongodb.comIn scope2026-11-14
charts.mongodb.comIn scope2026-11-14
charts-api.mongodb.comapiIn scope2026-11-14
charts-api-canary-dev.mongodb.comapi, dev, stagingIn scope2026-11-14
charts-api-dev.mongodb.comapi, devIn scope2026-11-14
charts-api-qa.mongodb.comapi, testIn scope2026-11-14
charts-api-staging.mongodb.comapi, stagingIn scope2026-11-14
charts-dev.mongodb.comdevIn scope2026-11-14
www.charts-dev.mongodb.comdevIn scope2026-11-14
charts-qa.mongodb.comtestIn scope2026-11-14
www.charts-qa.mongodb.comtestIn scope2026-11-14
charts-stage.mongodb.comstagingIn scope2026-11-14
www.charts-stage.mongodb.comstagingIn scope2026-11-14
www.charts.mongodb.comIn scope2026-11-14
citrix.mongodb.comvpnIn scope2026-11-14
cloud.mongodb.comIn scope2026-11-14
cloud-dev.mongodb.comdevIn scope2026-11-14
alertmanager-notifier.cloud-dev.mongodb.comdev, monitoringIn scope2026-11-14
amp.cloud-dev.mongodb.comdevIn scope2026-11-14
atlas-cluster-ws.cloud-dev.mongodb.comdevIn scope2026-11-14
atlas-gateway.cloud-dev.mongodb.comdevIn scope2026-11-14
atlas-logs.cloud-dev.mongodb.comdev, monitoringIn scope2026-11-14
atlas-metrics.cloud-dev.mongodb.comdev, monitoringIn scope2026-11-14
atlas-pf-logs.cloud-dev.mongodb.comdev, monitoringIn scope2026-11-14
atlas-traces.cloud-dev.mongodb.comdevIn scope2026-11-14
aws.cloud-dev.mongodb.comdevIn scope2026-11-14
lb-b-dev.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.lb-a-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
eu-west-1.lb-b-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.lb-b-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-2.lb-b-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
global.lb-d-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.lb-d-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.lb-e-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
use1-az1.us-east-1.lb-e-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
use1-az2.us-east-1.lb-e-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.lb-h-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
eu-west-1.lb-k-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.lb-k-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-2.lb-k-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.lb-l-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.mv-lb-d-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east-1.mv-lb-e-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
use1-az1.us-east-1.mv-lb-e-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
use1-az2.us-east-1.mv-lb-e-dev.r53.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
global.lb-b.td.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
global.lb-e.td.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
atlas-cluster-ws.us-east-1.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
lb-b-dev.us-east-1.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
atlas-cluster-ws.us-east-2.aws.cloud-dev.mongodb.comdevIn scope2026-11-14
eastus2.lb-a-dev.r53.azure.cloud-dev.mongodb.comdevIn scope2026-11-14
eastus2.lb-a-qa.r53.azure.cloud-dev.mongodb.comdev, testIn scope2026-11-14
eastus2.lb-h-dev.r53.azure.cloud-dev.mongodb.comdevIn scope2026-11-14
chef-migration-test.cloud-dev.mongodb.comdev, testIn scope2026-11-14
cluster-connection.cloud-dev.mongodb.comdevIn scope2026-11-14
eu-west-1.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east4.lb-a-dev.r53.gcp.cloud-dev.mongodb.comdevIn scope2026-11-14
us-east4.lb-a-qa.r53.gcp.cloud-dev.mongodb.comdev, testIn scope2026-11-14

7,936 names are covered by the program's own scope; 9 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated