Skip to content
Connect AISign inSign up free

Bug bounty program

RO

Roblox

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
5
Subdomains
2,245

Most upvoted reports5

Most upvoted reports of Roblox
ReportWeaknessDisclosedBountyVotes
Subdomain Takeover to Authentication bypassAnalysed#335330No weakness recorded2020-04-23–783
Insecure redirect rule results in bypassing ban redirect on certain pagesAnalysed#703058Insecure Direct Object Reference2020-04-26–233
Subdomain Takeover at creatorforum.roblox.comAnalysed#264494Access Control2020-03-24–90
Reflected XSS through multiple inputs in the issue collector on JiraAnalysed#380354Cross-site Scripting2020-03-24–56
Malformed string sent through FireServer leads to server freezing/hangingAnalysed#679907Denial of Service2020-04-29–44

Subdomains2,245

Root
Scope
Name suggests
First seen
Text file2,245 names
Subdomains of Roblox
NameScopeFirst seen
1passcorpengscim.rbx.comIn scope2026-11-14
6.rbx.comIn scope2026-11-14
about-demo.rbx.comtestIn scope2026-11-14
about-dev.rbx.comdevIn scope2026-11-14
about-stage.rbx.comstagingIn scope2026-11-14
access.rbx.comvpnIn scope2026-11-14
accman-web-tools.rbx.comIn scope2026-11-14
admin.rbx.comadminIn scope2026-11-14
ads-admin-panel.rbx.comadminIn scope2026-11-14
ads-library.rbx.comIn scope2026-11-14
alert-logger-stage.rbx.comstagingIn scope2026-11-14
analytics-it.rbx.comIn scope2026-11-14
anchore.rbx.comIn scope2026-11-14
anchore-old.rbx.comlegacyIn scope2026-11-14
anchore-prod-t1.rbx.comIn scope2026-11-14
anchore-stage.rbx.comstagingIn scope2026-11-14
appsec-policy-proxy.rbx.comIn scope2026-11-14
appsec-policy-proxy-stage.rbx.comstagingIn scope2026-11-14
c028.argo.rbx.comciIn scope2026-11-14
c029.argo.rbx.comciIn scope2026-11-14
c030.argo.rbx.comciIn scope2026-11-14
c033.argo.rbx.comciIn scope2026-11-14
c034.argo.rbx.comciIn scope2026-11-14
c035.argo.rbx.comciIn scope2026-11-14
c040.argo.rbx.comciIn scope2026-11-14
c041.argo.rbx.comciIn scope2026-11-14
c042.argo.rbx.comciIn scope2026-11-14
c043.argo.rbx.comciIn scope2026-11-14
c044.argo.rbx.comciIn scope2026-11-14
c045.argo.rbx.comciIn scope2026-11-14
c051.argo.rbx.comciIn scope2026-11-14
c052.argo.rbx.comciIn scope2026-11-14
c053.argo.rbx.comciIn scope2026-11-14
c054.argo.rbx.comciIn scope2026-11-14
c055.argo.rbx.comciIn scope2026-11-14
c056.argo.rbx.comciIn scope2026-11-14
e000.argo.rbx.comciIn scope2026-11-14
e200.argo.rbx.comciIn scope2026-11-14
e300.argo.rbx.comciIn scope2026-11-14
r000.argo.rbx.comciIn scope2026-11-14
r002.argo.rbx.comciIn scope2026-11-14
r003.argo.rbx.comciIn scope2026-11-14
r004.argo.rbx.comciIn scope2026-11-14
r005.argo.rbx.comciIn scope2026-11-14
r008.argo.rbx.comciIn scope2026-11-14
r009.argo.rbx.comciIn scope2026-11-14
r010.argo.rbx.comciIn scope2026-11-14
r011.argo.rbx.comciIn scope2026-11-14
sitetest1.argo.rbx.comciIn scope2026-11-14
c002.argocd.rbx.comciIn scope2026-11-14
jay-test.argocd.rbx.comci, testIn scope2026-11-14
argus.rbx.comIn scope2026-11-14
www.argus.rbx.comIn scope2026-11-14
arize-api.rbx.comapiIn scope2026-11-14
arize-api-prod.rbx.comapiIn scope2026-11-14
arize-app.rbx.comIn scope2026-11-14
arize-app-prod.rbx.comIn scope2026-11-14
arize-exp.rbx.comIn scope2026-11-14
arize-exp-prod.rbx.comIn scope2026-11-14
arize-otlp.rbx.comIn scope2026-11-14
arize-otlp-prod.rbx.comIn scope2026-11-14
arti-geo-dns-prod.rbx.comIn scope2026-11-14
arti-ha.rbx.comIn scope2026-11-14
arti-ha-dev.rbx.comdevIn scope2026-11-14
arti-prod-use2-1.rbx.comIn scope2026-11-14
arti-prod-usw1-1.rbx.comIn scope2026-11-14
arti-prod-usw1-2.rbx.comIn scope2026-11-14
wildcard.arti-prod-usw1-2.rbx.comIn scope2026-11-14
arti-stage-use2.rbx.comstagingIn scope2026-11-14
arti-stage-usw1.rbx.comstagingIn scope2026-11-14
arti-stage-usw1-2.rbx.comstagingIn scope2026-11-14
wildcard.arti-stage-usw1-2.rbx.comstagingIn scope2026-11-14
artifact-forwarding.rbx.comIn scope2026-11-14
artifact-forwarding-stage.rbx.comstagingIn scope2026-11-14
artifactory.rbx.comtoolsIn scope2026-11-14
artifactory-cache.rbx.comtoolsIn scope2026-11-14
artifactory-cache-poc.rbx.comtoolsIn scope2026-11-14
artifactory-cargo.rbx.comtoolsIn scope2026-11-14
artifactory-dev.rbx.comdev, toolsIn scope2026-11-14
artifactory-dr.rbx.comtoolsIn scope2026-11-14
artifactory-edge.rbx.comtoolsIn scope2026-11-14
artifactory-edge-st1.rbx.comtoolsIn scope2026-11-14
artifactory-edge-st2.rbx.comtoolsIn scope2026-11-14
artifactory-edge-st3.rbx.comtoolsIn scope2026-11-14
artifactory-edge-test.rbx.comtest, toolsIn scope2026-11-14
artifactory-edge-west1.rbx.comtoolsIn scope2026-11-14
artifactory-edge0.rbx.comtoolsIn scope2026-11-14
artifactory-edge01.rbx.comtoolsIn scope2026-11-14
wildcard.artifactory-edge01.rbx.comtoolsIn scope2026-11-14
artifactory-edge02.rbx.comtoolsIn scope2026-11-14
artifactory-edge07.rbx.comtoolsIn scope2026-11-14
wildcard.artifactory-edge07.rbx.comtoolsIn scope2026-11-14
artifactory-edge1.rbx.comtoolsIn scope2026-11-14
wildcard.artifactory-edge1.rbx.comtoolsIn scope2026-11-14
artifactory-edge123.rbx.comtoolsIn scope2026-11-14
artifactory-edge2.rbx.comtoolsIn scope2026-11-14
artifactory-edgemd.rbx.comtoolsIn scope2026-11-14
artifactory-edgemd1.rbx.comtoolsIn scope2026-11-14
artifactory-edgemdtest.rbx.comtoolsIn scope2026-11-14
artifactory-edgestage.rbx.comtoolsIn scope2026-11-14

2,245 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated