Skip to content
Connect AISign inSign up free

Bug bounty program

RO

Roblox

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
5
Subdomains
2,245

Most upvoted reports5

Most upvoted reports of Roblox
ReportWeaknessDisclosedBountyVotes
Subdomain Takeover to Authentication bypassAnalysed#335330No weakness recorded2020-04-23–783
Insecure redirect rule results in bypassing ban redirect on certain pagesAnalysed#703058Insecure Direct Object Reference2020-04-26–233
Subdomain Takeover at creatorforum.roblox.comAnalysed#264494Access Control2020-03-24–90
Reflected XSS through multiple inputs in the issue collector on JiraAnalysed#380354Cross-site Scripting2020-03-24–56
Malformed string sent through FireServer leads to server freezing/hangingAnalysed#679907Denial of Service2020-04-29–44

Subdomains2,245

Root
Scope
Name suggests
First seen
Text file2,245 names
Subdomains of Roblox
NameScopeFirst seen
careers-stage.rbx.comstagingIn scope2026-11-14
cargo-registry.rbx.comtoolsIn scope2026-11-14
cargo-registry-stage.rbx.comstaging, toolsIn scope2026-11-14
cas-admin.rbx.comadmin, authIn scope2026-11-14
ccov-ext.rbx.comIn scope2026-11-14
ccov-play.rbx.comIn scope2026-11-14
cdctl.rbx.comIn scope2026-11-14
cdctl-dev.rbx.comdevIn scope2026-11-14
cdctl-dev-poll.rbx.comdevIn scope2026-11-14
cdctl-dev-poller.rbx.comdevIn scope2026-11-14
cdctl-dev-tmp.rbx.comdevIn scope2026-11-14
cdctl-devpoller.rbx.comIn scope2026-11-14
cdctl-internal-lb.rbx.cominternalIn scope2026-11-14
cdctl-stg.rbx.comstagingIn scope2026-11-14
cdctldev-internal-lb.rbx.cominternalIn scope2026-11-14
cdctlstg-internal-lb.rbx.cominternalIn scope2026-11-14
certs.rbx.comIn scope2026-11-14
changestream-manager.rbx.comadminIn scope2026-11-14
changestream-manager-dev.rbx.comadmin, devIn scope2026-11-14
changestream-manager-dev-grpc.rbx.comadmin, api, devIn scope2026-11-14
changestream-manager-grpc.rbx.comadmin, apiIn scope2026-11-14
changestream-manager-stage.rbx.comadmin, stagingIn scope2026-11-14
changestream-manager-stage-grpc.rbx.comadmin, api, stagingIn scope2026-11-14
cloud-registry.rbx.comtoolsIn scope2026-11-14
cloud-registry-stage.rbx.comstaging, toolsIn scope2026-11-14
cms.rbx.comadminIn scope2026-11-14
cms-dev.rbx.comadmin, devIn scope2026-11-14
code-stage.rbx.comstagingIn scope2026-11-14
codecov.rbx.comIn scope2026-11-14
codecov-dev.rbx.comdevIn scope2026-11-14
codecov-prod.rbx.comIn scope2026-11-14
codecov-stage.rbx.comstagingIn scope2026-11-14
stage.codecov.rbx.comstagingIn scope2026-11-14
codefeed-webhook.rbx.comIn scope2026-11-14
codefeed-webhook-stage.rbx.comstagingIn scope2026-11-14
comms-plat-debugger.rbx.comIn scope2026-11-14
conf-prep.rbx.comIn scope2026-11-14
conf-prepb.rbx.comIn scope2026-11-14
conf-uw1.rbx.comIn scope2026-11-14
confluence.rbx.comtoolsIn scope2026-11-14
confluence-dev.rbx.comdev, toolsIn scope2026-11-14
confluence-legacy.rbx.comlegacy, toolsIn scope2026-11-14
confluence-prod.rbx.comtoolsIn scope2026-11-14
confluence-redirect-test.rbx.comtest, toolsIn scope2026-11-14
confluence-stage.rbx.comstaging, toolsIn scope2026-11-14
confluence-stage-legacy.rbx.comlegacy, staging, toolsIn scope2026-11-14
confluence-stage-red.rbx.comstaging, toolsIn scope2026-11-14
console.rbx.comadminIn scope2026-11-14
console-prod.rbx.comadminIn scope2026-11-14
consul-demo.rbx.comtest, toolsIn scope2026-11-14
consul-dev2.rbx.comdev, toolsIn scope2026-11-14
consul-stage.rbx.comstaging, toolsIn scope2026-11-14
content-systems-tools.rbx.comIn scope2026-11-14
corp-assets.rbx.cominternalIn scope2026-11-14
corp-metrics.rbx.cominternal, monitoringIn scope2026-11-14
corpeng-portal.rbx.comIn scope2026-11-14
cortex.rbx.comIn scope2026-11-14
cortex-stage.rbx.comstagingIn scope2026-11-14
cortex-stage-legacy.rbx.comlegacy, stagingIn scope2026-11-14
cortex-stage-test.rbx.comstaging, testIn scope2026-11-14
cortex-stage-unavailable.rbx.comstagingIn scope2026-11-14
cortex-test.rbx.comtestIn scope2026-11-14
cortex-test-2.rbx.comtestIn scope2026-11-14
wildcard.cortex.rbx.comIn scope2026-11-14
coveralls-stage.rbx.comstagingIn scope2026-11-14
crashes.rbx.comIn scope2026-11-14
crashes-prod.rbx.comIn scope2026-11-14
creator-analytics-internal-tools.rbx.cominternalIn scope2026-11-14
creator-store-admin.rbx.comadminIn scope2026-11-14
critr.rbx.comIn scope2026-11-14
dev.critr.rbx.comdevIn scope2026-11-14
grpc.dev.critr.rbx.comapi, devIn scope2026-11-14
grpc.critr.rbx.comapiIn scope2026-11-14
stage.critr.rbx.comstagingIn scope2026-11-14
grpc.stage.critr.rbx.comapi, stagingIn scope2026-11-14
cs.rbx.comIn scope2026-11-14
cs-verifier.rbx.comIn scope2026-11-14
cs-verifier-stage.rbx.comstagingIn scope2026-11-14
dart-nest.rbx.comIn scope2026-11-14
datahub.rbx.comIn scope2026-11-14
datahub-dev.rbx.comdevIn scope2026-11-14
dataverse.rbx.comIn scope2026-11-14
datawalk.rbx.comIn scope2026-11-14
dev.rbx.comdevIn scope2026-11-14
dev-confluence-dns-name.rbx.comdev, toolsIn scope2026-11-14
dev-docker-registry.rbx.comdev, toolsIn scope2026-11-14
dev-docker-registry-stage.rbx.comdev, staging, toolsIn scope2026-11-14
dev-stage.rbx.comdev, stagingIn scope2026-11-14
dev-test.rbx.comdev, testIn scope2026-11-14
bloxid.dev.rbx.comdevIn scope2026-11-14
cbar.bloxid.dev.rbx.comdevIn scope2026-11-14
fang.bloxid.dev.rbx.comdevIn scope2026-11-14
fram.bloxid.dev.rbx.comdevIn scope2026-11-14
nested.bloxid.dev.rbx.comdevIn scope2026-11-14
vpha.bloxid.dev.rbx.comdevIn scope2026-11-14
rozilla.dev.rbx.comdevIn scope2026-11-14
sentry.dev.rbx.comdev, monitoringIn scope2026-11-14
devspaces.rbx.comIn scope2026-11-14
devspaces-egress.rbx.comIn scope2026-11-14
devspaces-egress-dpi.rbx.comIn scope2026-11-14

2,245 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated