Skip to content
Connect AISign inSign up free

Bug bounty program

PI

Ping Identity

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
10
Disclosed reports
8
Subdomains
1,669

Most upvoted reports8

Most upvoted reports of Ping Identity
ReportWeaknessDisclosedBountyVotes
Google Maps API key leaked during device pairingAnalysed#724039Information Disclosure2020-04-28$15024
Stored XSS in Application menu via Home Page UrlAnalysed#797754Cross-site Scripting2020-11-16–24
Broken Link on Ping Identity's Vulnerability Submission Form on Hackerone#1225299Misconfiguration and Insecure Design2021-06-16–22
Internal Hostname disclosure from multiple Apache servers via blank host header method#548094Information Disclosure2020-03-12$15021
Session misconfiguration on change password feature at https://apps-staging.pingone.com/myaccount/?environmentId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx##643731Misconfiguration and Insecure Design2020-11-16–16
Forbidden access to https://apps-staging.pingone.com but "/packages.json" visible and full path disclosure#770711Access Control2020-11-16$10014
Session misconfiguration on forget password feature at https://ort-admin.pingone.com#659957Authentication2020-11-16–8
No valid SPF record not found#771028Authentication2020-11-16–2

Subdomains1,669

Root
Scope
Name suggests
First seen
Text file1,669 names
Subdomains of Ping Identity
NameScopeFirst seen
smtp.apps-staging.pingone.commail, stagingNot in the scope2026-11-14
spf.apps-staging.pingone.comstagingNot in the scope2026-11-14
ssl.apps-staging.pingone.comstagingNot in the scope2026-11-14
static.apps-staging.pingone.comstagingNot in the scope2026-11-14
stats.apps-staging.pingone.comstagingNot in the scope2026-11-14
store.apps-staging.pingone.comstagingNot in the scope2026-11-14
test.apps-staging.pingone.comstaging, testNot in the scope2026-11-14
tls.apps-staging.pingone.comstagingNot in the scope2026-11-14
tools.apps-staging.pingone.comstagingNot in the scope2026-11-14
tx.apps-staging.pingone.comstagingNot in the scope2026-11-14
uk.apps-staging.pingone.comstagingNot in the scope2026-11-14
upload.apps-staging.pingone.comdata, stagingNot in the scope2026-11-14
us-east-1.apps-staging.pingone.comstagingNot in the scope2026-11-14
useast.apps-staging.pingone.comstagingNot in the scope2026-11-14
vault.apps-staging.pingone.comstaging, toolsNot in the scope2026-11-14
vendor-api.apps-staging.pingone.comapi, stagingNot in the scope2026-11-14
view.apps-staging.pingone.comstagingNot in the scope2026-11-14
voice.apps-staging.pingone.comstagingNot in the scope2026-11-14
vpn.apps-staging.pingone.comstaging, vpnNot in the scope2026-11-14
wap.apps-staging.pingone.comstagingNot in the scope2026-11-14
webhook.apps-staging.pingone.comstagingNot in the scope2026-11-14
webmail.apps-staging.pingone.commail, stagingNot in the scope2026-11-14
whm.apps-staging.pingone.comstagingNot in the scope2026-11-14
whois.apps-staging.pingone.comstagingNot in the scope2026-11-14
wiki.apps-staging.pingone.comstaging, toolsNot in the scope2026-11-14
wordpress.apps-staging.pingone.comstagingNot in the scope2026-11-14
wp.apps-staging.pingone.comstagingNot in the scope2026-11-14
www1.apps-staging.pingone.comstagingNot in the scope2026-11-14
www2.apps-staging.pingone.comstagingNot in the scope2026-11-14
assets.pingone.comNot in the scope2026-11-14
auth.pingone.comauthNot in the scope2026-11-14
auth-sre.pingone.comauthNot in the scope2026-11-14
auth-sre-01.pingone.comauthNot in the scope2026-11-14
auth-sre-728215373873.pingone.comauthNot in the scope2026-11-14
auth-sre-us-east-2.pingone.comauthNot in the scope2026-11-14
auth-sre-us-east-2-01.pingone.comauthNot in the scope2026-11-14
auth-sre-us-east-2-728215373873.pingone.comauthNot in the scope2026-11-14
auth-staging.pingone.comauth, stagingNot in the scope2026-11-14
authentication.pingone.comNot in the scope2026-11-14
authenticator.pingone.comListed out of scope2026-11-14
autoconfig.pingone.comNot in the scope2026-11-14
autodiscover.pingone.commailNot in the scope2026-11-14
awsdashboard.pingone.comNot in the scope2026-11-14
b.pingone.comNot in the scope2026-11-14
basic.pingone.comNot in the scope2026-11-14
basic-nodejs-dev.pingone.comdevNot in the scope2026-11-14
bbs.pingone.comNot in the scope2026-11-14
bbs-covideo-isus.pingone.comNot in the scope2026-11-14
covideo-isus.bbs.pingone.comNot in the scope2026-11-14
beta.pingone.comstagingNot in the scope2026-11-14
blackvirus.pingone.comNot in the scope2026-11-14
blog.pingone.comNot in the scope2026-11-14
covideo-isus.blog.pingone.comNot in the scope2026-11-14
blogcovideo-isus.pingone.comNot in the scope2026-11-14
blogs.pingone.comNot in the scope2026-11-14
booking-api.pingone.comapiNot in the scope2026-11-14
antivirus.booking-api.pingone.comapiNot in the scope2026-11-14
builder.pingone.comNot in the scope2026-11-14
c.pingone.comNot in the scope2026-11-14
careers.pingone.comNot in the scope2026-11-14
cdn.pingone.comNot in the scope2026-11-14
cdn1.pingone.comNot in the scope2026-11-14
zamestnancov.cdn1.pingone.comNot in the scope2026-11-14
cdq-api.pingone.comapiNot in the scope2026-11-14
cemerickantiviruspre.pingone.comNot in the scope2026-11-14
cert.pingone.comNot in the scope2026-11-14
certificate.pingone.comNot in the scope2026-11-14
check.pingone.comNot in the scope2026-11-14
cim-api.pingone.comapiNot in the scope2026-11-14
cim-api-dev.pingone.comapi, devNot in the scope2026-11-14
cim-api-qa.pingone.comapi, testNot in the scope2026-11-14
cim-api-uat.pingone.comapi, testNot in the scope2026-11-14
cim-data-quality-qa.pingone.comtestNot in the scope2026-11-14
cim-dev.pingone.comdevNot in the scope2026-11-14
cim-geo-dev.pingone.comdevNot in the scope2026-11-14
citrix.pingone.comvpnNot in the scope2026-11-14
click.pingone.comNot in the scope2026-11-14
cloud.pingone.comNot in the scope2026-11-14
vaccines.cloud.pingone.comNot in the scope2026-11-14
cname.pingone.comNot in the scope2026-11-14
coantivirus2.pingone.comNot in the scope2026-11-14
pinterest.coantivirus2.pingone.comNot in the scope2026-11-14
crawl-54-236-1-180.pinterest.coantivirus2.pingone.comNot in the scope2026-11-14
code.pingone.comNot in the scope2026-11-14
cofiles.pingone.comNot in the scope2026-11-14
coronavirus-warning-banner.cofiles.pingone.comNot in the scope2026-11-14
collab.pingone.comNot in the scope2026-11-14
com.pingone.comNot in the scope2026-11-14
com-coronavirus.pingone.comNot in the scope2026-11-14
pinterest.com-coronavirus.pingone.comNot in the scope2026-11-14
outbound-11-191-237.usw2.aws.post.pinterest.com-coronavirus.pingone.comNot in the scope2026-11-14
pinterest.com.pingone.comNot in the scope2026-11-14
coronavirus-crawl-54-236-1-139.pinterest.com.pingone.comNot in the scope2026-11-14
connect.pingone.comNot in the scope2026-11-14
sso.connect.pingone.comauthNot in the scope2026-11-14
connect365.pingone.comNot in the scope2026-11-14
console.pingone.comadminListed out of scope2026-11-14
console-staging.pingone.comadmin, stagingListed out of scope2026-11-14
_mta-sts.console-staging.pingone.comadmin, stagingNot in the scope2026-11-14
_tcp.console-staging.pingone.comadmin, stagingNot in the scope2026-11-14

3 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated