Skip to content
Connect AISign inSign up free

Bug bounty program

PP

Palantir Public

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
2
Disclosed reports
2
Subdomains
9,266

Most upvoted reports2

Most upvoted reports of Palantir Public
ReportWeaknessDisclosedBountyVotes
SQL Injection at https://files.palantir.com/ due to CVE-2021-38159Analysed#1525200SQL Injection2022-04-05–121
Github Account Takeover which is used as gradle vcs in "github.com/palantir/gradle-launch-config-plugin"Analysed#1525578Access Control2022-05-05–21

Subdomains9,266

Root:foundrygov.com
Scope
Name suggests
First seen
Text fileClear filters34 names
Subdomains of Palantir Public
NameScopeFirst seen
arda.foundrygov.comNo domain scope published2026-11-14
atomic.foundrygov.comNo domain scope published2026-11-14
atomic-container-registry.foundrygov.comtoolsNo domain scope published2026-11-14
atomic-container-registry-staging.foundrygov.comstaging, toolsNo domain scope published2026-11-14
atomic-mgmt.foundrygov.comNo domain scope published2026-11-14
atomic-mgmt-staging.foundrygov.comstagingNo domain scope published2026-11-14
atomic-staging.foundrygov.comstagingNo domain scope published2026-11-14
brick.foundrygov.comNo domain scope published2026-11-14
brick-container-registry.foundrygov.comtoolsNo domain scope published2026-11-14
brick-container-registry-staging.foundrygov.comstaging, toolsNo domain scope published2026-11-14
brick-mgmt.foundrygov.comNo domain scope published2026-11-14
brick-mgmt-staging.foundrygov.comstagingNo domain scope published2026-11-14
brick-staging.foundrygov.comstagingNo domain scope published2026-11-14
buenosaires.foundrygov.comNo domain scope published2026-11-14
colombia.foundrygov.comNo domain scope published2026-11-14
founde.foundrygov.comNo domain scope published2026-11-14
kamenozoki.foundrygov.comNo domain scope published2026-11-14
kanagawa.foundrygov.comNo domain scope published2026-11-14
kanagawa-lg.foundrygov.comNo domain scope published2026-11-14
kimidori.foundrygov.comNo domain scope published2026-11-14
mallow.foundrygov.comNo domain scope published2026-11-14
mallow-container-registry.foundrygov.comtoolsNo domain scope published2026-11-14
mallow-container-registry-staging.foundrygov.comstaging, toolsNo domain scope published2026-11-14
mallow-mgmt.foundrygov.comNo domain scope published2026-11-14
mallow-mgmt-staging.foundrygov.comstagingNo domain scope published2026-11-14
mallow-staging.foundrygov.comstagingNo domain scope published2026-11-14
midori.foundrygov.comNo domain scope published2026-11-14
pomocdlaukrainy.foundrygov.comNo domain scope published2026-11-14
pomocdlaukrainy2.foundrygov.comNo domain scope published2026-11-14
projektpiecza.foundrygov.comNo domain scope published2026-11-14
royalgreen.foundrygov.comNo domain scope published2026-11-14
stipruskartu.foundrygov.comNo domain scope published2026-11-14
voronet.foundrygov.comNo domain scope published2026-11-14
www.foundrygov.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 4 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated