Bug bounty program · HackerOne
Most upvoted reports5
- #335330ValidAnalysedSubdomain Takeover to Authentication bypassRoblox · No weakness recorded · 2020 · needs: no account · Subdomain takeover, Blind XSS, CORS misconfiguration, Account takeover chain–783votes
- #703058ValidAnalysedInsecure redirect rule results in bypassing ban redirect on certain pagesRoblox · Insecure Direct Object Reference · 2020 · needs: a user account · Authentication bypass, Business logic flaw–233votes
- #264494ValidSubdomain Takeover at creatorforum.roblox.comRoblox · Access Control · 2020–90votes
- #380354ValidReflected XSS through multiple inputs in the issue collector on JiraRoblox · Cross-site Scripting · 2020–56votes
- #679907ValidMalformed string sent through FireServer leads to server freezing/hangingRoblox · Denial of Service · 2020–44votes
Subdomains2,243
2,243 covered by the program's own scope · 0 first seen this week
2,243 names
| Name | Scope | First seen |
|---|---|---|
| 1passcorpengscim.rbx.com | In scope | 2026-11-14 |
| 6.rbx.com | In scope | 2026-11-14 |
| about-demo.rbx.comtest | In scope | 2026-11-14 |
| about-dev.rbx.comdev | In scope | 2026-11-14 |
| about-stage.rbx.comstaging | In scope | 2026-11-14 |
| access.rbx.comvpn | In scope | 2026-11-14 |
| accman-web-tools.rbx.com | In scope | 2026-11-14 |
| admin.rbx.comadmin | In scope | 2026-11-14 |
| ads-admin-panel.rbx.comadmin | In scope | 2026-11-14 |
| ads-library.rbx.com | In scope | 2026-11-14 |
| alert-logger-stage.rbx.comstaging | In scope | 2026-11-14 |
| analytics-it.rbx.com | In scope | 2026-11-14 |
| anchore.rbx.com | In scope | 2026-11-14 |
| anchore-old.rbx.comlegacy | In scope | 2026-11-14 |
| anchore-prod-t1.rbx.com | In scope | 2026-11-14 |
| anchore-stage.rbx.comstaging | In scope | 2026-11-14 |
| appsec-policy-proxy.rbx.com | In scope | 2026-11-14 |
| appsec-policy-proxy-stage.rbx.comstaging | In scope | 2026-11-14 |
| c028.argo.rbx.comci | In scope | 2026-11-14 |
| c029.argo.rbx.comci | In scope | 2026-11-14 |
| c030.argo.rbx.comci | In scope | 2026-11-14 |
| c033.argo.rbx.comci | In scope | 2026-11-14 |
| c034.argo.rbx.comci | In scope | 2026-11-14 |
| c035.argo.rbx.comci | In scope | 2026-11-14 |
| c040.argo.rbx.comci | In scope | 2026-11-14 |
| c041.argo.rbx.comci | In scope | 2026-11-14 |
| c042.argo.rbx.comci | In scope | 2026-11-14 |
| c043.argo.rbx.comci | In scope | 2026-11-14 |
| c044.argo.rbx.comci | In scope | 2026-11-14 |
| c045.argo.rbx.comci | In scope | 2026-11-14 |
| c051.argo.rbx.comci | In scope | 2026-11-14 |
| c052.argo.rbx.comci | In scope | 2026-11-14 |
| c053.argo.rbx.comci | In scope | 2026-11-14 |
| c054.argo.rbx.comci | In scope | 2026-11-14 |
| c055.argo.rbx.comci | In scope | 2026-11-14 |
| c056.argo.rbx.comci | In scope | 2026-11-14 |
| e000.argo.rbx.comci | In scope | 2026-11-14 |
| e200.argo.rbx.comci | In scope | 2026-11-14 |
| e300.argo.rbx.comci | In scope | 2026-11-14 |
| r000.argo.rbx.comci | In scope | 2026-11-14 |
| r002.argo.rbx.comci | In scope | 2026-11-14 |
| r003.argo.rbx.comci | In scope | 2026-11-14 |
| r004.argo.rbx.comci | In scope | 2026-11-14 |
| r005.argo.rbx.comci | In scope | 2026-11-14 |
| r008.argo.rbx.comci | In scope | 2026-11-14 |
| r009.argo.rbx.comci | In scope | 2026-11-14 |
| r010.argo.rbx.comci | In scope | 2026-11-14 |
| r011.argo.rbx.comci | In scope | 2026-11-14 |
| sitetest1.argo.rbx.comci | In scope | 2026-11-14 |
| c002.argocd.rbx.comci | In scope | 2026-11-14 |
| jay-test.argocd.rbx.comci, test | In scope | 2026-11-14 |
| argus.rbx.com | In scope | 2026-11-14 |
| www.argus.rbx.com | In scope | 2026-11-14 |
| arize-api.rbx.comapi | In scope | 2026-11-14 |
| arize-api-prod.rbx.comapi | In scope | 2026-11-14 |
| arize-app.rbx.com | In scope | 2026-11-14 |
| arize-app-prod.rbx.com | In scope | 2026-11-14 |
| arize-exp.rbx.com | In scope | 2026-11-14 |
| arize-exp-prod.rbx.com | In scope | 2026-11-14 |
| arize-otlp.rbx.com | In scope | 2026-11-14 |
| arize-otlp-prod.rbx.com | In scope | 2026-11-14 |
| arti-geo-dns-prod.rbx.com | In scope | 2026-11-14 |
| arti-ha.rbx.com | In scope | 2026-11-14 |
| arti-ha-dev.rbx.comdev | In scope | 2026-11-14 |
| arti-prod-use2-1.rbx.com | In scope | 2026-11-14 |
| arti-prod-usw1-1.rbx.com | In scope | 2026-11-14 |
| arti-prod-usw1-2.rbx.com | In scope | 2026-11-14 |
| wildcard.arti-prod-usw1-2.rbx.com | In scope | 2026-11-14 |
| arti-stage-use2.rbx.comstaging | In scope | 2026-11-14 |
| arti-stage-usw1.rbx.comstaging | In scope | 2026-11-14 |
| arti-stage-usw1-2.rbx.comstaging | In scope | 2026-11-14 |
| wildcard.arti-stage-usw1-2.rbx.comstaging | In scope | 2026-11-14 |
| artifact-forwarding.rbx.com | In scope | 2026-11-14 |
| artifact-forwarding-stage.rbx.comstaging | In scope | 2026-11-14 |
| artifactory.rbx.comtools | In scope | 2026-11-14 |
| artifactory-cache.rbx.comtools | In scope | 2026-11-14 |
| artifactory-cache-poc.rbx.comtools | In scope | 2026-11-14 |
| artifactory-cargo.rbx.comtools | In scope | 2026-11-14 |
| artifactory-dev.rbx.comdev, tools | In scope | 2026-11-14 |
| artifactory-dr.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge-st1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge-st2.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge-st3.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge-test.rbx.comtest, tools | In scope | 2026-11-14 |
| artifactory-edge-west1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge0.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge01.rbx.comtools | In scope | 2026-11-14 |
| wildcard.artifactory-edge01.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge02.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge07.rbx.comtools | In scope | 2026-11-14 |
| wildcard.artifactory-edge07.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge1.rbx.comtools | In scope | 2026-11-14 |
| wildcard.artifactory-edge1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge123.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge2.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgemd.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgemd1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgemdtest.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgestage.rbx.comtools | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.