Bug bounty program
PP
Palantir Public
Most upvoted reports2
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| SQL Injection at https://files.palantir.com/ due to CVE-2021-38159#1525200 | SQL Injection | 2022-04-05 | – | 121 |
| Github Account Takeover which is used as gradle vcs in "github.com/palantir/gradle-launch-config-plugin"#1525578 | Access Control | 2022-05-05 | – | 21 |
Subdomains9,262
| Name | Scope | First seen |
|---|---|---|
| arda.foundrygov.com | No domain scope published | 2026-11-14 |
| atomic.foundrygov.com | No domain scope published | 2026-11-14 |
| atomic-container-registry.foundrygov.comtools | No domain scope published | 2026-11-14 |
| atomic-container-registry-staging.foundrygov.comstaging, tools | No domain scope published | 2026-11-14 |
| atomic-mgmt.foundrygov.com | No domain scope published | 2026-11-14 |
| atomic-mgmt-staging.foundrygov.comstaging | No domain scope published | 2026-11-14 |
| atomic-staging.foundrygov.comstaging | No domain scope published | 2026-11-14 |
| brick.foundrygov.com | No domain scope published | 2026-11-14 |
| brick-container-registry.foundrygov.comtools | No domain scope published | 2026-11-14 |
| brick-container-registry-staging.foundrygov.comstaging, tools | No domain scope published | 2026-11-14 |
| brick-mgmt.foundrygov.com | No domain scope published | 2026-11-14 |
| brick-mgmt-staging.foundrygov.comstaging | No domain scope published | 2026-11-14 |
| brick-staging.foundrygov.comstaging | No domain scope published | 2026-11-14 |
| buenosaires.foundrygov.com | No domain scope published | 2026-11-14 |
| colombia.foundrygov.com | No domain scope published | 2026-11-14 |
| founde.foundrygov.com | No domain scope published | 2026-11-14 |
| kamenozoki.foundrygov.com | No domain scope published | 2026-11-14 |
| kanagawa.foundrygov.com | No domain scope published | 2026-11-14 |
| kanagawa-lg.foundrygov.com | No domain scope published | 2026-11-14 |
| kimidori.foundrygov.com | No domain scope published | 2026-11-14 |
| mallow.foundrygov.com | No domain scope published | 2026-11-14 |
| mallow-container-registry.foundrygov.comtools | No domain scope published | 2026-11-14 |
| mallow-container-registry-staging.foundrygov.comstaging, tools | No domain scope published | 2026-11-14 |
| mallow-mgmt.foundrygov.com | No domain scope published | 2026-11-14 |
| mallow-mgmt-staging.foundrygov.comstaging | No domain scope published | 2026-11-14 |
| mallow-staging.foundrygov.comstaging | No domain scope published | 2026-11-14 |
| midori.foundrygov.com | No domain scope published | 2026-11-14 |
| pomocdlaukrainy.foundrygov.com | No domain scope published | 2026-11-14 |
| pomocdlaukrainy2.foundrygov.com | No domain scope published | 2026-11-14 |
| projektpiecza.foundrygov.com | No domain scope published | 2026-11-14 |
| royalgreen.foundrygov.com | No domain scope published | 2026-11-14 |
| stipruskartu.foundrygov.com | No domain scope published | 2026-11-14 |
| voronet.foundrygov.com | No domain scope published | 2026-11-14 |
| www.foundrygov.com | No domain scope published | 2026-11-14 |
| arc-webhooks.palantir.build | No domain scope published | 2026-11-14 |
| artifactory.palantir.buildtools | No domain scope published | 2026-11-14 |
| us-east-1.artifactory.palantir.buildtools | No domain scope published | 2026-11-14 |
| us-west-1.artifactory.palantir.buildtools | No domain scope published | 2026-11-14 |
| audax.palantir.build | No domain scope published | 2026-11-14 |
| bamboo-legacy.palantir.buildci, legacy | No domain scope published | 2026-11-14 |
| bots.palantir.build | No domain scope published | 2026-11-14 |
| policy.bots.palantir.build | No domain scope published | 2026-11-14 |
| www.policy.bots.palantir.build | No domain scope published | 2026-11-14 |
| puppet.bots.palantir.build | No domain scope published | 2026-11-14 |
| www.puppet.bots.palantir.build | No domain scope published | 2026-11-14 |
| circle.palantir.build | No domain scope published | 2026-11-14 |
| circle-dr.palantir.build | No domain scope published | 2026-11-14 |
| app.circle-dr.palantir.build | No domain scope published | 2026-11-14 |
| cache.circle-dr.palantir.build | No domain scope published | 2026-11-14 |
| webhooks.circle-dr.palantir.build | No domain scope published | 2026-11-14 |
| circle-pg.palantir.build | No domain scope published | 2026-11-14 |
| circle-vault.palantir.buildtools | No domain scope published | 2026-11-14 |
| leader.circle-vault.palantir.buildtools | No domain scope published | 2026-11-14 |
| app.circle.palantir.build | No domain scope published | 2026-11-14 |
| cache.circle.palantir.build | No domain scope published | 2026-11-14 |
| kots.circle.palantir.build | No domain scope published | 2026-11-14 |
| vault.circle.palantir.buildtools | No domain scope published | 2026-11-14 |
| webhooks.circle.palantir.build | No domain scope published | 2026-11-14 |
| circle2.palantir.build | No domain scope published | 2026-11-14 |
| circle3.palantir.build | No domain scope published | 2026-11-14 |
| app.circle3.palantir.build | No domain scope published | 2026-11-14 |
| kots.circle3.palantir.build | No domain scope published | 2026-11-14 |
| vault.circle3.palantir.buildtools | No domain scope published | 2026-11-14 |
| webhooks.circle3.palantir.build | No domain scope published | 2026-11-14 |
| circle4.palantir.build | No domain scope published | 2026-11-14 |
| app.circle4.palantir.build | No domain scope published | 2026-11-14 |
| cache.circle4.palantir.build | No domain scope published | 2026-11-14 |
| kots.circle4.palantir.build | No domain scope published | 2026-11-14 |
| vault.circle4.palantir.buildtools | No domain scope published | 2026-11-14 |
| webhooks.circle4.palantir.build | No domain scope published | 2026-11-14 |
| coder.palantir.build | No domain scope published | 2026-11-14 |
| us-east-1.coder.palantir.build | No domain scope published | 2026-11-14 |
| us-west-1.coder.palantir.build | No domain scope published | 2026-11-14 |
| consul.palantir.buildtools | No domain scope published | 2026-11-14 |
| dmz.palantir.build | No domain scope published | 2026-11-14 |
| fabio.dmz.palantir.build | No domain scope published | 2026-11-14 |
| docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| elastic.docker.palantir.builddata, tools | No domain scope published | 2026-11-14 |
| gcr.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| gcr-k8s.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| gcr-onna.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| ghcr.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| hub.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| itar.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| k8s.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| mcr.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| nvcr.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| premerge.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| quay.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| quay-openshift.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| redhat.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| redhat-access-openshift.docker.palantir.buildtools, vpn | No domain scope published | 2026-11-14 |
| redhat-connect.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| redhat-io-openshift.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| release.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| release-circle.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| release-itar.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| sandbox.docker.palantir.buildtest, tools | No domain scope published | 2026-11-14 |
| snapshot.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
| snapshot-itar.docker.palantir.buildtools | No domain scope published | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.