Skip to content
Connect AISign inSign up free

Bug bounty program

RO

Roblox

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
5
Subdomains
2,245

Most upvoted reports5

Most upvoted reports of Roblox
ReportWeaknessDisclosedBountyVotes
Subdomain Takeover to Authentication bypassAnalysed#335330No weakness recorded2020-04-23–783
Insecure redirect rule results in bypassing ban redirect on certain pagesAnalysed#703058Insecure Direct Object Reference2020-04-26–233
Subdomain Takeover at creatorforum.roblox.comAnalysed#264494Access Control2020-03-24–90
Reflected XSS through multiple inputs in the issue collector on JiraAnalysed#380354Cross-site Scripting2020-03-24–56
Malformed string sent through FireServer leads to server freezing/hangingAnalysed#679907Denial of Service2020-04-29–44

Subdomains2,245

Root
Scope
Name suggests
First seen
Text file2,245 names
Subdomains of Roblox
NameScopeFirst seen
worker.dev2.mewtwo.rbx.comdevIn scope2026-11-14
grpc.mewtwo.rbx.comapiIn scope2026-11-14
prod.mewtwo.rbx.comIn scope2026-11-14
worker.prod.mewtwo.rbx.comIn scope2026-11-14
stage.mewtwo.rbx.comstagingIn scope2026-11-14
grpc.stage.mewtwo.rbx.comapi, stagingIn scope2026-11-14
worker.stage.mewtwo.rbx.comstagingIn scope2026-11-14
worker2.stage.mewtwo.rbx.comstagingIn scope2026-11-14
stage2.mewtwo.rbx.comstagingIn scope2026-11-14
worker.stage2.mewtwo.rbx.comstagingIn scope2026-11-14
temp.mewtwo.rbx.comIn scope2026-11-14
wildcard.temp.mewtwo.rbx.comIn scope2026-11-14
grpc.test.mewtwo.rbx.comapi, testIn scope2026-11-14
wildcard.mewtwo.rbx.comIn scope2026-11-14
worker.mewtwo.rbx.comIn scope2026-11-14
microsoft.rbx.comIn scope2026-11-14
ml.rbx.comIn scope2026-11-14
arrikto.ml.rbx.comIn scope2026-11-14
arrikto-private.ml.rbx.cominternalIn scope2026-11-14
arrikto2.ml.rbx.comIn scope2026-11-14
iguazio.ml.rbx.comIn scope2026-11-14
dashboard.default-tenant.app.iguazio.ml.rbx.comadminIn scope2026-11-14
kubeflow.ml.rbx.comIn scope2026-11-14
kubeflow-dev.ml.rbx.comdevIn scope2026-11-14
kubeflow-stage.ml.rbx.comstagingIn scope2026-11-14
ml-platform-infra.ml.rbx.comIn scope2026-11-14
noteable.ml.rbx.comIn scope2026-11-14
management.backend.noteable.ml.rbx.comadminIn scope2026-11-14
staging.noteable.ml.rbx.comstagingIn scope2026-11-14
app.external.backend.staging.noteable.ml.rbx.comstagingIn scope2026-11-14
management.backend.staging.noteable.ml.rbx.comadmin, stagingIn scope2026-11-14
prod.ml.rbx.comIn scope2026-11-14
ai-inference.prod.ml.rbx.comIn scope2026-11-14
ai-inference-aws-use1-prod-1.prod.ml.rbx.comIn scope2026-11-14
ai-inference-aws-usw1-test.prod.ml.rbx.comtestIn scope2026-11-14
ai-inference-dev.prod.ml.rbx.comdevIn scope2026-11-14
ai-inference-dev-2-use2.prod.ml.rbx.comdevIn scope2026-11-14
ai-inference-dr.prod.ml.rbx.comIn scope2026-11-14
ai-inference-lite.prod.ml.rbx.comIn scope2026-11-14
ai-inference-llm.prod.ml.rbx.comIn scope2026-11-14
ai-inference-llm-dev.prod.ml.rbx.comdevIn scope2026-11-14
ai-inference-prod.prod.ml.rbx.comIn scope2026-11-14
ai-inference-prod-1.prod.ml.rbx.comIn scope2026-11-14
ai-inference-prod-2.prod.ml.rbx.comIn scope2026-11-14
ai-inference-prod-3.prod.ml.rbx.comIn scope2026-11-14
ai-inference-prod-4.prod.ml.rbx.comIn scope2026-11-14
ai-inference-prod-5.prod.ml.rbx.comIn scope2026-11-14
ai-inference-prod-6.prod.ml.rbx.comIn scope2026-11-14
ai-inference-prod-dr-1.prod.ml.rbx.comIn scope2026-11-14
ai-inference-use1.prod.ml.rbx.comIn scope2026-11-14
ai-inference-use1-sticky.prod.ml.rbx.comIn scope2026-11-14
ai-inference-use2-sticky-dev.prod.ml.rbx.comdevIn scope2026-11-14
ai-management-dev.prod.ml.rbx.comadmin, devIn scope2026-11-14
loop.ai-management-dev.prod.ml.rbx.comadmin, devIn scope2026-11-14
temporal.ai-management-dev.prod.ml.rbx.comadmin, devIn scope2026-11-14
ai-management-prod.prod.ml.rbx.comadminIn scope2026-11-14
kargo.ai-management-prod.prod.ml.rbx.comadminIn scope2026-11-14
loop.ai-management-prod.prod.ml.rbx.comadminIn scope2026-11-14
loop-stage.ai-management-prod.prod.ml.rbx.comadmin, stagingIn scope2026-11-14
temporal.ai-management-prod.prod.ml.rbx.comadminIn scope2026-11-14
temporal-stage.ai-management-prod.prod.ml.rbx.comadmin, stagingIn scope2026-11-14
ai-training-aws-use1-prod-1.prod.ml.rbx.comIn scope2026-11-14
ai-training-usw2.prod.ml.rbx.comIn scope2026-11-14
aip-inference.prod.ml.rbx.comIn scope2026-11-14
aip-inference-prod.prod.ml.rbx.comIn scope2026-11-14
aip-inference-prod-1.prod.ml.rbx.comIn scope2026-11-14
aip-inference-prod-2.prod.ml.rbx.comIn scope2026-11-14
aip-inference-prod-3.prod.ml.rbx.comIn scope2026-11-14
aip-inference-prod-4.prod.ml.rbx.comIn scope2026-11-14
aip-inference-test.prod.ml.rbx.comtestIn scope2026-11-14
arize-poc.prod.ml.rbx.comIn scope2026-11-14
arize-poc-receiver.prod.ml.rbx.comIn scope2026-11-14
arrikto-private.prod.ml.rbx.cominternalIn scope2026-11-14
serving.arrikto-private.prod.ml.rbx.cominternalIn scope2026-11-14
baas.prod.ml.rbx.comIn scope2026-11-14
baas-dev.prod.ml.rbx.comdevIn scope2026-11-14
baas-mcp.prod.ml.rbx.comIn scope2026-11-14
baas-mcp-dev.prod.ml.rbx.comdevIn scope2026-11-14
benchmark.prod.ml.rbx.comIn scope2026-11-14
benchmark-dev.prod.ml.rbx.comdevIn scope2026-11-14
kfp-use1.prod.ml.rbx.comIn scope2026-11-14
kubeflow.prod.ml.rbx.comIn scope2026-11-14
llm-finetune.prod.ml.rbx.comIn scope2026-11-14
llm-serving.prod.ml.rbx.comIn scope2026-11-14
llm-serving-dev.prod.ml.rbx.comdevIn scope2026-11-14
llm-use2-prod-1.prod.ml.rbx.comIn scope2026-11-14
llm-usw2-prod-2.prod.ml.rbx.comIn scope2026-11-14
management.prod.ml.rbx.comadminIn scope2026-11-14
management-dev.prod.ml.rbx.comadmin, devIn scope2026-11-14
management-prod.prod.ml.rbx.comadminIn scope2026-11-14
ml-platform-dev.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-1-5-rc3.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-1-5-rc3-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-1-5rc1.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-1-5rc1-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-2-use1-1-6-0.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-2-use1-1-6-1.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-2-use1-1-6-1-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-ash1-1-6-1.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-ash1-1-6-1-serving.prod.ml.rbx.comdevIn scope2026-11-14

2,245 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated