Skip to content
Connect AISign inSign up free

Bug bounty program

RO

Roblox

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
5
Subdomains
2,245

Most upvoted reports5

Most upvoted reports of Roblox
ReportWeaknessDisclosedBountyVotes
Subdomain Takeover to Authentication bypassAnalysed#335330No weakness recorded2020-04-23–783
Insecure redirect rule results in bypassing ban redirect on certain pagesAnalysed#703058Insecure Direct Object Reference2020-04-26–233
Subdomain Takeover at creatorforum.roblox.comAnalysed#264494Access Control2020-03-24–90
Reflected XSS through multiple inputs in the issue collector on JiraAnalysed#380354Cross-site Scripting2020-03-24–56
Malformed string sent through FireServer leads to server freezing/hangingAnalysed#679907Denial of Service2020-04-29–44

Subdomains2,245

Root
Scope
Name suggests
First seen
Text file2,245 names
Subdomains of Roblox
NameScopeFirst seen
wildcard.astro.dev-core.dic.rbx.comdevIn scope2026-11-14
spark.dev-core.dic.rbx.comdevIn scope2026-11-14
airflow2.dev-creator.dic.rbx.comdev, toolsIn scope2026-11-14
wildcard.astro.dev-creator.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-data.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-economy.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-engine.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-growth.dic.rbx.comdevIn scope2026-11-14
spark.dev-growth.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-infra.dic.rbx.comdevIn scope2026-11-14
astro.dev-psc.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-psc.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-safety.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-saki.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-schaffer.dic.rbx.comdevIn scope2026-11-14
spark.dev-schaffer.dic.rbx.comdevIn scope2026-11-14
wildcard.astro.dev-user.dic.rbx.comdevIn scope2026-11-14
superset.dev.dic.rbx.comdev, toolsIn scope2026-11-14
astro.prod-core.dic.rbx.comIn scope2026-11-14
spark.prod-core.dic.rbx.comIn scope2026-11-14
wildcard.astro.prod-creator.dic.rbx.comIn scope2026-11-14
wildcard.astro.prod-economy.dic.rbx.comIn scope2026-11-14
wildcard.astro.prod-engine.dic.rbx.comIn scope2026-11-14
wildcard.astro.prod-growth.dic.rbx.comIn scope2026-11-14
spark.prod-growth.dic.rbx.comIn scope2026-11-14
wildcard.astro.prod-safety.dic.rbx.comIn scope2026-11-14
wildcard.astro.prod-user.dic.rbx.comIn scope2026-11-14
superset.prod.dic.rbx.comtoolsIn scope2026-11-14
spark-k8s.dic.rbx.comtoolsIn scope2026-11-14
superset.staging.dic.rbx.comstaging, toolsIn scope2026-11-14
superset.stg.dic.rbx.comstaging, toolsIn scope2026-11-14
superset-staging.dic.rbx.comstaging, toolsIn scope2026-11-14
discoball.rbx.comIn scope2026-11-14
discourse.rbx.comIn scope2026-11-14
distribution.rbx.comIn scope2026-11-14
distribution-new.rbx.comIn scope2026-11-14
distribution-old.rbx.comlegacyIn scope2026-11-14
distribution-stage.rbx.comstagingIn scope2026-11-14
distribution-stage-old.rbx.comlegacy, stagingIn scope2026-11-14
docker-artifactory-cache.rbx.comtoolsIn scope2026-11-14
docker-artifactory-cache-poc.rbx.comtoolsIn scope2026-11-14
docs-infra-cdn.rbx.comIn scope2026-11-14
dragonfly-manager-stage.rbx.comadmin, stagingIn scope2026-11-14
drone.rbx.comciIn scope2026-11-14
drone-dev.rbx.comci, devIn scope2026-11-14
drone-dev2.rbx.comci, devIn scope2026-11-14
drone-ghc.rbx.comciIn scope2026-11-14
drone-stage.rbx.comci, stagingIn scope2026-11-14
drydock.rbx.comIn scope2026-11-14
drydock-fe.rbx.comIn scope2026-11-14
drydock-proxy.rbx.comIn scope2026-11-14
drydock-proxy-stage.rbx.comstagingIn scope2026-11-14
echo.rbx.comIn scope2026-11-14
economy-admin.rbx.comadminIn scope2026-11-14
edge-artifactory.rbx.comtoolsIn scope2026-11-14
edge-prod-use2.rbx.comIn scope2026-11-14
edge-prod-usw1.rbx.comIn scope2026-11-14
edge-st1-use2.rbx.comIn scope2026-11-14
edge-st1-usw1.rbx.comIn scope2026-11-14
edge-st2-use2.rbx.comIn scope2026-11-14
edge-st2-usw1.rbx.comIn scope2026-11-14
edge-st3-use2.rbx.comIn scope2026-11-14
edge-st3-usw1.rbx.comIn scope2026-11-14
edge-stage-usw1.rbx.comstagingIn scope2026-11-14
rozilla.edge.rbx.comIn scope2026-11-14
ee-prod-tier0-argocd.rbx.comciIn scope2026-11-14
ee-prod-tier1-argocd.rbx.comciIn scope2026-11-14
ee-stage-tier0-argocd.rbx.comci, stagingIn scope2026-11-14
ee-stage-tier1-argocd.rbx.comci, stagingIn scope2026-11-14
ee-temporal.rbx.comIn scope2026-11-14
dev.ee-temporal.rbx.comdevIn scope2026-11-14
wildcard.dev.ee-temporal.rbx.comdevIn scope2026-11-14
dev2.ee-temporal.rbx.comdevIn scope2026-11-14
frontend.dev2.ee-temporal.rbx.comdevIn scope2026-11-14
prod.ee-temporal.rbx.comIn scope2026-11-14
stage.ee-temporal.rbx.comstagingIn scope2026-11-14
stage2.ee-temporal.rbx.comstagingIn scope2026-11-14
temp.ee-temporal.rbx.comIn scope2026-11-14
wildcard.temp.ee-temporal.rbx.comIn scope2026-11-14
test.ee-temporal.rbx.comtestIn scope2026-11-14
testing.ee-temporal.rbx.comtestIn scope2026-11-14
wildcard.ee-temporal.rbx.comIn scope2026-11-14
eeri-collectd.rbx.comIn scope2026-11-14
eeri-server.rbx.comIn scope2026-11-14
emote-set-editor.rbx.comIn scope2026-11-14
engflow.rbx.comIn scope2026-11-14
engflow-mac.rbx.comIn scope2026-11-14
engflow-site1.rbx.comIn scope2026-11-14
engflow-site2.rbx.comIn scope2026-11-14
engflow-staging.rbx.comstagingIn scope2026-11-14
engsec-labelling-platform.rbx.comIn scope2026-11-14
enterprise-security-portal.rbx.comIn scope2026-11-14
eoq-review.rbx.comIn scope2026-11-14
events.rbx.comIn scope2026-11-14
www.events.rbx.comIn scope2026-11-14
eventwatch.rbx.comIn scope2026-11-14
eventwatch-grpc.rbx.comapiIn scope2026-11-14
eventwatch-stage.rbx.comstagingIn scope2026-11-14
eventwatch-stage-grpc.rbx.comapi, stagingIn scope2026-11-14
feature-lab.rbx.comIn scope2026-11-14

2,245 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated