Bug bounty program · HackerOne
Palo Alto Software
Most upvoted reports9
- #765679ValidStored XSS on upload files leads to steal cookiePalo Alto Software · Cross-site Scripting · 2020–59votes
- #766875Validweak protection against brute-forcing on login api leads to account takeoverPalo Alto Software · Authentication · 2022–24votes
- #914331ValidIDOR on notes to HTML injectionPalo Alto Software · Insecure Direct Object Reference · 2020–22votes
- #854290ValidIDOR on update user preferencesPalo Alto Software · Insecure Direct Object Reference · 2020–21votes
- #1070889Valid[Bypass #870709] Unauthorised access to pagespeed global admin at https://webtools.paloalto.com/Palo Alto Software · Access Control · 2021–20votes
- #1179193ValidSubdomain takeover of www2.growasyouplan.comPalo Alto Software · Server-Side Request Forgery · 2021–15votes
- #870709ValidUnauthorised access to pagespeed global admin at https://webtools.paloalto.com/Palo Alto Software · Access Control · 2020–11votes
- #1294492ValidDNS Miconfiguration Leads to Subdomain Takeover - max1.liveplan.comPalo Alto Software · Access Control · 2021–10votes
- #688546ValidClickjackingPalo Alto Software · No weakness recorded · 2022–8votes
Subdomains2,377
4 covered by the program's own scope · 0 first seen this week
Roots:liveplan.com 777 · 2 in scopepaloalto.com 574 · 1 in scopebplans.com 512 · 1 in scopeteamoutpost.com 484outpost.co 26mplans.com 4
2,377 names
| Name | Scope | First seen |
|---|---|---|
| 253awww.bplans.com | Not in the scope | 2026-11-14 |
| 3awww.bplans.com | Not in the scope | 2026-11-14 |
| _cisco-uds.bplans.com | Not in the scope | 2026-11-14 |
| _collab-edge.bplans.com | Not in the scope | 2026-11-14 |
| _cuplogin.bplans.com | Not in the scope | 2026-11-14 |
| _etcd-server-ssl.bplans.com | Not in the scope | 2026-11-14 |
| _mta-sts.bplans.com | Not in the scope | 2026-11-14 |
| _tcp.bplans.com | Not in the scope | 2026-11-14 |
| _cisco-uds._tcp.bplans.com | Not in the scope | 2026-11-14 |
| _cuplogin._tcp.bplans.com | Not in the scope | 2026-11-14 |
| _tls.bplans.com | Not in the scope | 2026-11-14 |
| _collab-edge._tls.bplans.com | Not in the scope | 2026-11-14 |
| a.bplans.com | Not in the scope | 2026-11-14 |
| acapi.bplans.com | Not in the scope | 2026-11-14 |
| admin.bplans.comadmin | Not in the scope | 2026-11-14 |
| akamai.bplans.com | Not in the scope | 2026-11-14 |
| akamai-test.bplans.comtest | Not in the scope | 2026-11-14 |
| akamai-test-origin.bplans.comtest | Not in the scope | 2026-11-14 |
| api.bplans.comapi | Not in the scope | 2026-11-14 |
| app.bplans.com | Not in the scope | 2026-11-14 |
| articles.bplans.com | Not in the scope | 2026-11-14 |
| qa.articles.bplans.comtest | Not in the scope | 2026-11-14 |
| assets.bplans.com | Not in the scope | 2026-11-14 |
| auth.bplans.comauth | Not in the scope | 2026-11-14 |
| autoconfig.bplans.com | Not in the scope | 2026-11-14 |
| autodiscover.bplans.commail | Not in the scope | 2026-11-14 |
| awsdashboard.bplans.com | Not in the scope | 2026-11-14 |
| b.bplans.com | Not in the scope | 2026-11-14 |
| basic.bplans.com | Not in the scope | 2026-11-14 |
| basic-nodejs-dev.bplans.comdev | Not in the scope | 2026-11-14 |
| bbs.bplans.com | Not in the scope | 2026-11-14 |
| beta.bplans.comstaging | Not in the scope | 2026-11-14 |
| blog.bplans.com | Not in the scope | 2026-11-14 |
| blogs.bplans.com | Not in the scope | 2026-11-14 |
| builder.bplans.com | Not in the scope | 2026-11-14 |
| c.bplans.com | Not in the scope | 2026-11-14 |
| careers.bplans.com | Not in the scope | 2026-11-14 |
| cdn.bplans.com | Not in the scope | 2026-11-14 |
| cdq-api.bplans.comapi | Not in the scope | 2026-11-14 |
| cert.bplans.com | Not in the scope | 2026-11-14 |
| certificate.bplans.com | Not in the scope | 2026-11-14 |
| check.bplans.com | Not in the scope | 2026-11-14 |
| cim-api.bplans.comapi | Not in the scope | 2026-11-14 |
| cim-api-dev.bplans.comapi, dev | Not in the scope | 2026-11-14 |
| cim-api-qa.bplans.comapi, test | Not in the scope | 2026-11-14 |
| cim-api-uat.bplans.comapi, test | Not in the scope | 2026-11-14 |
| cim-data-quality-qa.bplans.comtest | Not in the scope | 2026-11-14 |
| cim-dev.bplans.comdev | Not in the scope | 2026-11-14 |
| cim-geo-dev.bplans.comdev | Not in the scope | 2026-11-14 |
| citrix.bplans.comvpn | Not in the scope | 2026-11-14 |
| click.bplans.com | Not in the scope | 2026-11-14 |
| cloud.bplans.com | Not in the scope | 2026-11-14 |
| cname.bplans.com | Not in the scope | 2026-11-14 |
| code.bplans.com | Not in the scope | 2026-11-14 |
| collab.bplans.com | Not in the scope | 2026-11-14 |
| consul.bplans.comtools | Not in the scope | 2026-11-14 |
| course.bplans.com | Not in the scope | 2026-11-14 |
| cp.bplans.com | Not in the scope | 2026-11-14 |
| cpanel.bplans.comadmin | Not in the scope | 2026-11-14 |
| crm.bplans.com | Not in the scope | 2026-11-14 |
| cveapi.bplans.com | Not in the scope | 2026-11-14 |
| danieapp.bplans.com | Not in the scope | 2026-11-14 |
| db.bplans.comdata | Not in the scope | 2026-11-14 |
| dc.bplans.com | Not in the scope | 2026-11-14 |
| de.bplans.com | Not in the scope | 2026-11-14 |
| demo.bplans.comtest | Not in the scope | 2026-11-14 |
| dev.bplans.comdev | Not in the scope | 2026-11-14 |
| dnm.bplans.com | Not in the scope | 2026-11-14 |
| dns.bplans.com | Not in the scope | 2026-11-14 |
| dns1.bplans.com | Not in the scope | 2026-11-14 |
| dns2.bplans.com | Not in the scope | 2026-11-14 |
| docker.bplans.comtools | Not in the scope | 2026-11-14 |
| dogfood-dev.bplans.comdev | Not in the scope | 2026-11-14 |
| download.bplans.com | Not in the scope | 2026-11-14 |
| downloads.bplans.com | Not in the scope | 2026-11-14 |
| dyn.bplans.com | Not in the scope | 2026-11-14 |
| edge.bplans.com | Not in the scope | 2026-11-14 |
| elastic.bplans.comdata | Not in the scope | 2026-11-14 |
| email.bplans.com | Not in the scope | 2026-11-14 |
| en.bplans.com | Not in the scope | 2026-11-14 |
| exchange.bplans.commail | Not in the scope | 2026-11-14 |
| forum.bplans.com | Not in the scope | 2026-11-14 |
| forums.bplans.com | Not in the scope | 2026-11-14 |
| ftp.bplans.comdata | Not in the scope | 2026-11-14 |
| fw.bplans.com | Not in the scope | 2026-11-14 |
| ga.bplans.com | Not in the scope | 2026-11-14 |
| gac-rds-external-readonly.bplans.com | Not in the scope | 2026-11-14 |
| gac-rds-external-readonly-preprod.bplans.comstaging | Not in the scope | 2026-11-14 |
| gcom-product-find-dev.bplans.comdev | Not in the scope | 2026-11-14 |
| gcom-product-find-qa.bplans.comtest | Not in the scope | 2026-11-14 |
| git.bplans.comgit | Not in the scope | 2026-11-14 |
| gitlab.bplans.comgit | Not in the scope | 2026-11-14 |
| go.bplans.com | Not in the scope | 2026-11-14 |
| gui.bplans.com | Not in the scope | 2026-11-14 |
| guru.bplans.com | Not in the scope | 2026-11-14 |
| gw.bplans.com | Not in the scope | 2026-11-14 |
| gws.bplans.com | Not in the scope | 2026-11-14 |
| gws-api-sandbox.bplans.comapi, test | Not in the scope | 2026-11-14 |
| gws-dev.bplans.comdev | Not in the scope | 2026-11-14 |
| gws-qa.bplans.comtest | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.