Skip to content
Connect AISign inSign up free

Bug bounty program

RO

Roblox

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
5
Subdomains
2,245

Most upvoted reports5

Most upvoted reports of Roblox
ReportWeaknessDisclosedBountyVotes
Subdomain Takeover to Authentication bypassAnalysed#335330No weakness recorded2020-04-23–783
Insecure redirect rule results in bypassing ban redirect on certain pagesAnalysed#703058Insecure Direct Object Reference2020-04-26–233
Subdomain Takeover at creatorforum.roblox.comAnalysed#264494Access Control2020-03-24–90
Reflected XSS through multiple inputs in the issue collector on JiraAnalysed#380354Cross-site Scripting2020-03-24–56
Malformed string sent through FireServer leads to server freezing/hangingAnalysed#679907Denial of Service2020-04-29–44

Subdomains2,245

Root
Scope
Name suggests
First seen
Text file2,245 names
Subdomains of Roblox
NameScopeFirst seen
hazmat-api-stage.rbx.comapi, stagingIn scope2026-11-14
headspin.rbx.comIn scope2026-11-14
hello.rbx.comIn scope2026-11-14
influencers.rbx.comIn scope2026-11-14
insight-prod1.rbx.comIn scope2026-11-14
insight-stage7.rbx.comstagingIn scope2026-11-14
insights.rbx.comIn scope2026-11-14
www.insights.rbx.comIn scope2026-11-14
internal.rbx.cominternalIn scope2026-11-14
internal-nomad.rbx.cominternalIn scope2026-11-14
internal-nomad-stage.rbx.cominternal, stagingIn scope2026-11-14
internal-prod-stage.rbx.cominternal, stagingIn scope2026-11-14
www.internal.rbx.cominternalIn scope2026-11-14
ipe.rbx.comIn scope2026-11-14
ipe-prod-consul.rbx.comtoolsIn scope2026-11-14
ipe-prod-nomad.rbx.comIn scope2026-11-14
ipe-prod-rlb-nomad.rbx.comIn scope2026-11-14
ipe-prod-vault.rbx.comtoolsIn scope2026-11-14
ipe-stage.rbx.comstagingIn scope2026-11-14
ipe-stage-consul.rbx.comstaging, toolsIn scope2026-11-14
ipe-stage-nomad.rbx.comstagingIn scope2026-11-14
ipe-stage-rlb-nomad.rbx.comstagingIn scope2026-11-14
ipe-stage-vault.rbx.comstaging, toolsIn scope2026-11-14
jason-820-prod-test.rbx.comtestIn scope2026-11-14
jfmc.rbx.comIn scope2026-11-14
jfmc-prod1.rbx.comIn scope2026-11-14
jfmc-stage.rbx.comstagingIn scope2026-11-14
jfmc-stage7.rbx.comstagingIn scope2026-11-14
jfrog-dist.rbx.comIn scope2026-11-14
jfrog-dist-prod1.rbx.comIn scope2026-11-14
jfrog-dist-stage.rbx.comstagingIn scope2026-11-14
jfrog-dist-stage7.rbx.comstagingIn scope2026-11-14
jfrog-distribution-stage-usw1.rbx.comstagingIn scope2026-11-14
jira.rbx.comtoolsIn scope2026-11-14
jira-dev.rbx.comdev, toolsIn scope2026-11-14
jira-prep.rbx.comtoolsIn scope2026-11-14
jira-prod.rbx.comtoolsIn scope2026-11-14
jira-ros.rbx.comtoolsIn scope2026-11-14
jira-stage.rbx.comstaging, toolsIn scope2026-11-14
jira-terraform-stage.rbx.comstaging, toolsIn scope2026-11-14
jira-uw1.rbx.comtoolsIn scope2026-11-14
www.jira.rbx.comtoolsIn scope2026-11-14
kellnr.rbx.comIn scope2026-11-14
knomad-development-production-us-central-1.rbx.comdevIn scope2026-11-14
knomad-development-production-us-east-1.rbx.comdevIn scope2026-11-14
knomad-development-sitetest1-us-west-1.rbx.comdevIn scope2026-11-14
knomad-development-sitetest1-us-west-1b.rbx.comdevIn scope2026-11-14
knomad-development-sitetest2-us-west-1.rbx.comdevIn scope2026-11-14
knomad-development-sitetest2-us-west-1a.rbx.comdevIn scope2026-11-14
knomad-development-sitetest2a-us-west-1.rbx.comdevIn scope2026-11-14
knomad-development-sitetest3-us-west-1.rbx.comdevIn scope2026-11-14
knomad-production-production-us-central-1.rbx.comIn scope2026-11-14
knomad-production-production-us-east-1.rbx.comIn scope2026-11-14
knomad-production-sitetest1-us-west-1.rbx.comIn scope2026-11-14
knomad-production-sitetest1-us-west-1b.rbx.comIn scope2026-11-14
knomad-production-sitetest2-us-west-1.rbx.comIn scope2026-11-14
knomad-production-sitetest3-us-west-1.rbx.comIn scope2026-11-14
knomad-staging-production-us-central-1.rbx.comstagingIn scope2026-11-14
knomad-staging-production-us-east-1.rbx.comstagingIn scope2026-11-14
knomad-staging-sitetest1-us-west-1.rbx.comstagingIn scope2026-11-14
knomad-staging-sitetest1-us-west-1b.rbx.comstagingIn scope2026-11-14
knomad-staging-sitetest2-us-west-1.rbx.comstagingIn scope2026-11-14
knomad-staging-sitetest2a-us-west-1.rbx.comstagingIn scope2026-11-14
knomad-staging-sitetest3-us-west-1.rbx.comstagingIn scope2026-11-14
knowledge-space-marketplace.rbx.comIn scope2026-11-14
lb-module.rbx.comIn scope2026-11-14
lb-module-test.rbx.comtestIn scope2026-11-14
jwks-dev.lca.rbx.comdevIn scope2026-11-14
jwks-prod.lca.rbx.comIn scope2026-11-14
oidc.lca.rbx.comauthIn scope2026-11-14
lens.rbx.comIn scope2026-11-14
lens-dev.rbx.comdevIn scope2026-11-14
lens-dev2.rbx.comdevIn scope2026-11-14
gms.lens-dev2.rbx.comdevIn scope2026-11-14
lens-prod.rbx.comIn scope2026-11-14
gms.lens-prod.rbx.comIn scope2026-11-14
gms.lens.rbx.comIn scope2026-11-14
lgtm.rbx.comIn scope2026-11-14
lgtm-dev.rbx.comdevIn scope2026-11-14
lgtm-poc.rbx.comIn scope2026-11-14
lgtm-stage.rbx.comstagingIn scope2026-11-14
litellm-stage.rbx.comstagingIn scope2026-11-14
lms.rbx.comIn scope2026-11-14
lockbox.rbx.comIn scope2026-11-14
www.lockbox.rbx.comIn scope2026-11-14
loop.rbx.comIn scope2026-11-14
loop-dev.rbx.comdevIn scope2026-11-14
loop-stage.rbx.comstagingIn scope2026-11-14
lpm.rbx.comIn scope2026-11-14
macstadium.rbx.comIn scope2026-11-14
mail.rbx.commailIn scope2026-11-14
marketplace-admin.rbx.comadminIn scope2026-11-14
master.rbx.comIn scope2026-11-14
mewtwo.rbx.comIn scope2026-11-14
dev.mewtwo.rbx.comdevIn scope2026-11-14
grpc.dev.mewtwo.rbx.comapi, devIn scope2026-11-14
wildcard.dev.mewtwo.rbx.comdevIn scope2026-11-14
worker.dev.mewtwo.rbx.comdevIn scope2026-11-14
workers.dev.mewtwo.rbx.comdevIn scope2026-11-14
dev2.mewtwo.rbx.comdevIn scope2026-11-14

2,245 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated