Skip to content
Sign in

Bug bounty program · HackerOne

PortSwigger Web Security

Open on HackerOneSee this on the Atlas
Yespays bounties
10assets in scope
40disclosed reports928subdomains

Most upvoted reports40

All 40 reports

Subdomains928

5 covered by the program's own scope · 0 first seen this week

Roots:web-security-academy.net 875portswigger.net 53 · 5 in scope
ScopeAny
Name suggestsAnything
This list as text

928 names

Subdomains of PortSwigger Web Security
NameScopeFirst seen
a787d072fe3d51121845f169bdc36cbe.portswigger.netListed out of scope2026-11-14
agent-mcp.portswigger.netListed out of scope2026-11-14
ai.portswigger.netIn scope2026-11-14
telemetry.enterprise.analytics.portswigger.netListed out of scope2026-11-14
auth.portswigger.netauthListed out of scope2026-11-14
blog.portswigger.netListed out of scope2026-11-14
burpcollaborator1.portswigger.netListed out of scope2026-11-14
burpcollaborator2.portswigger.netListed out of scope2026-11-14
cheat-sheets.portswigger.netListed out of scope2026-11-14
collections.portswigger.netIn scope2026-11-14
csat.portswigger.netListed out of scope2026-11-14
customer-hub.portswigger.netListed out of scope2026-11-14
dast-user-reporting.portswigger.netListed out of scope2026-11-14
direct.portswigger.netListed out of scope2026-11-14
cloudfront.direct.portswigger.netListed out of scope2026-11-14
docs.portswigger.netListed out of scope2026-11-14
email-tracking.portswigger.netListed out of scope2026-11-14
enquiries.portswigger.netListed out of scope2026-11-14
enterprise.portswigger.netListed out of scope2026-11-14
enterprise-demo.portswigger.nettestListed out of scope2026-11-14
flags.portswigger.netListed out of scope2026-11-14
formsubmission.portswigger.netListed out of scope2026-11-14
forum.portswigger.netListed out of scope2026-11-14
go.portswigger.netListed out of scope2026-11-14
hostmaster.portswigger.netListed out of scope2026-11-14
id.portswigger.netIn scope2026-11-14
info.portswigger.netListed out of scope2026-11-14
intranet.portswigger.netinternalListed out of scope2026-11-14
jeeves.portswigger.netListed out of scope2026-11-14
jml-automations.portswigger.netListed out of scope2026-11-14
links.portswigger.netIn scope2026-11-14
locking-rgthanwoasxdyb5nz2ajemahntfkwzsz.portswigger.netListed out of scope2026-11-14
login.portswigger.netauthListed out of scope2026-11-14
meetings.portswigger.netListed out of scope2026-11-14
my.portswigger.netListed out of scope2026-11-14
www.my.portswigger.netListed out of scope2026-11-14
perfdata.portswigger.netListed out of scope2026-11-14
www.perfdata.portswigger.netListed out of scope2026-11-14
pro.portswigger.netListed out of scope2026-11-14
www.pro.portswigger.netListed out of scope2026-11-14
releases.portswigger.netListed out of scope2026-11-14
share.portswigger.netIn scope2026-11-14
status.portswigger.netmonitoringListed out of scope2026-11-14
support.portswigger.netListed out of scope2026-11-14
www.support.portswigger.netListed out of scope2026-11-14
surveys.portswigger.netListed out of scope2026-11-14
www.surveys.portswigger.netListed out of scope2026-11-14
tech-radar.portswigger.netListed out of scope2026-11-14
technology.portswigger.netListed out of scope2026-11-14
telemetry.portswigger.netListed out of scope2026-11-14
tools.portswigger.netListed out of scope2026-11-14
trust.portswigger.netListed out of scope2026-11-14
www.portswigger.netListed out of scope2026-11-14
0a000042038aa1a180231cce006600b0.web-security-academy.netListed out of scope2026-11-14
0a00007204c8c1db801d6796000400ba.web-security-academy.netListed out of scope2026-11-14
0a01002503403d50815025c8009300f1.web-security-academy.netListed out of scope2026-11-14
0a01003704a8c52281b5a22200b1000e.web-security-academy.netListed out of scope2026-11-14
0a0100a403b892abc3efc17f009100e6.web-security-academy.netListed out of scope2026-11-14
0a0100bf031940778520a42e00c30055.web-security-academy.netListed out of scope2026-11-14
0a02009204b1f0c8807580200075006c.web-security-academy.netListed out of scope2026-11-14
0a0200d6036e62abc24dedbd007d0022.web-security-academy.netListed out of scope2026-11-14
0a030035039f8b7fc143037300af0095.web-security-academy.netListed out of scope2026-11-14
0a03006204c4936a809a0dec003100d6.web-security-academy.netListed out of scope2026-11-14
0a03006a04e0966480af627f002400b1.web-security-academy.netListed out of scope2026-11-14
0a0300a4041232eac07f049700c60026.web-security-academy.netListed out of scope2026-11-14
0a0300a603c93ddb81884d74007e00e1.web-security-academy.netListed out of scope2026-11-14
0a040094037dd0c980b3c17e00d60049.web-security-academy.netListed out of scope2026-11-14
0a04009d036ca83080208fa6001700f2.web-security-academy.netListed out of scope2026-11-14
0a0400b20476a61fb70150f800e60069.web-security-academy.netListed out of scope2026-11-14
0a0400e803ca6e9c80f8e9e7007c00d6.web-security-academy.netListed out of scope2026-11-14
0a05008303c0431ac01b0e9a00b8000e.web-security-academy.netListed out of scope2026-11-14
0a0500b703e166db849705cf00a300d7.web-security-academy.netListed out of scope2026-11-14
0a0500c6042cf1da8858e88500ab001f.web-security-academy.netListed out of scope2026-11-14
0a060014049d514780bc08700015003f.web-security-academy.netListed out of scope2026-11-14
0a0600ad0431cfe88107e4cd00a700a3.web-security-academy.netListed out of scope2026-11-14
0a0600b30419069780b14e9d00dd0072.web-security-academy.netListed out of scope2026-11-14
0a07009f041a2142806e8f01001100ba.web-security-academy.netListed out of scope2026-11-14
0a0700c503143b68c4cd029300f00023.web-security-academy.netListed out of scope2026-11-14
0a0800300344ea70821e652b00a60053.web-security-academy.netListed out of scope2026-11-14
0a08003403c16c0c810843a400ec009a.web-security-academy.netListed out of scope2026-11-14
0a0800d303d5e4df8168b125009000dd.web-security-academy.netListed out of scope2026-11-14
0a0800dc03d6b17e80eb2bfa008b009d.web-security-academy.netListed out of scope2026-11-14
0a0800df04d368e580942b220052001a.web-security-academy.netListed out of scope2026-11-14
0a0a007a04a0dd4f81c57a8e00e800e7.web-security-academy.netListed out of scope2026-11-14
0a0b002e03d8a0d68186b62600e400ab.web-security-academy.netListed out of scope2026-11-14
0a0b003b032066b5806244c200d200a1.web-security-academy.netListed out of scope2026-11-14
0a0c00ee045fbd26823c38a600780022.web-security-academy.netListed out of scope2026-11-14
0a0d001304d7dc56800c626700410032.web-security-academy.netListed out of scope2026-11-14
0a0d00820304dd2cc0525a9100d70064.web-security-academy.netListed out of scope2026-11-14
0a0e002803dd229283a9b9c8000100af.web-security-academy.netListed out of scope2026-11-14
0a0e004503ca2d2280ec121d001200b4.web-security-academy.netListed out of scope2026-11-14
0a0e007d035b20c382cebf38005400d4.web-security-academy.netListed out of scope2026-11-14
0a0e007d03d9d20682a6bf36005e0033.web-security-academy.netListed out of scope2026-11-14
0a0e00b104cfa69d8065c111006d009b.web-security-academy.netListed out of scope2026-11-14
0a0e00bc04395830ba7010a100670099.web-security-academy.netListed out of scope2026-11-14
0a0f008f031f9b8281a1203000f900ce.web-security-academy.netListed out of scope2026-11-14
0a10001904ff8e8680b93f8800e70035.web-security-academy.netListed out of scope2026-11-14
0a1000b403f4d32ec017e0e300a900af.web-security-academy.netListed out of scope2026-11-14
0a1000c50430ae1781de073c00f100a7.web-security-academy.netListed out of scope2026-11-14
0a1000f00442332480d9c1cd00a10009.web-security-academy.netListed out of scope2026-11-14

Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in