Skip to content
Connect AISign inSign up free

Bug bounty program

RO

Roblox

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
5
Subdomains
2,245

Most upvoted reports5

Most upvoted reports of Roblox
ReportWeaknessDisclosedBountyVotes
Subdomain Takeover to Authentication bypassAnalysed#335330No weakness recorded2020-04-23–783
Insecure redirect rule results in bypassing ban redirect on certain pagesAnalysed#703058Insecure Direct Object Reference2020-04-26–233
Subdomain Takeover at creatorforum.roblox.comAnalysed#264494Access Control2020-03-24–90
Reflected XSS through multiple inputs in the issue collector on JiraAnalysed#380354Cross-site Scripting2020-03-24–56
Malformed string sent through FireServer leads to server freezing/hangingAnalysed#679907Denial of Service2020-04-29–44

Subdomains2,245

Root
Scope
Name suggests
First seen
Text file2,245 names
Subdomains of Roblox
NameScopeFirst seen
wildcard.ml-platform-dev-ash1-1-6-1-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-denis.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-denis-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-internal.prod.ml.rbx.comdev, internalIn scope2026-11-14
ml-platform-dev-us-east-1-1-6-1.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-us-east-1-1-6-1-serving.prod.ml.rbx.comdevIn scope2026-11-14
wildcard.ml-platform-dev-us-east-1-1-6-1-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-us-east-2-1-6-1.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-us-east-2-1-6-1-serving.prod.ml.rbx.comdevIn scope2026-11-14
wildcard.ml-platform-dev-us-east-2-1-6-1-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-use1-1-5-3.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-use1-1-5-3-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-use1-1-6-1.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-use1-1-6-1-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-use2-1-5-3.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-dev-use2-1-5-3-serving.prod.ml.rbx.comdevIn scope2026-11-14
ml-platform-infra.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-1-5-1.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-1-5-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-1-5-2.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-1-5-2-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-1-6-1.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-internal.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-infra-us-east-1-1-6-1.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-us-east-1-1-6-1-grpc.prod.ml.rbx.comapiIn scope2026-11-14
ml-platform-infra-us-east-1-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
wildcard.ml-platform-infra-us-east-1-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-use1-1-5-3.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-use1-1-5-3-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-use1-1-6-1.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-use1-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-use2-1-5-2.prod.ml.rbx.comIn scope2026-11-14
ml-platform-infra-use2-1-5-2-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-private.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-1-5-1.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-1-5-1-serving.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-1-5-3.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-1-5-3-serving.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-internal.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-us-east-1-1-6-1.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-us-east-1-1-6-1-serving.prod.ml.rbx.cominternalIn scope2026-11-14
wildcard.ml-platform-private-us-east-1-1-6-1-serving.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-use1-1-6-1.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-private-use1-1-6-1-serving.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-prod.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-ash1-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
wildcard.ml-platform-prod-ash1-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-c115-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-internal.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-prod-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-serving-internal.prod.ml.rbx.cominternalIn scope2026-11-14
ml-platform-prod-us-east-1-1-6-1.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-us-east-1-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
wildcard.ml-platform-prod-us-east-1-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-us-east-1-controlplane.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-us-east-2-1-6-1.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-us-east-2-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
wildcard.ml-platform-prod-us-east-2-1-6-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-use1-1-5-3.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-use1-1-5-3-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-use2-1-5-3.prod.ml.rbx.comIn scope2026-11-14
ml-platform-prod-use2-1-5-3-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-rkg-us-east-1-1-8-1.prod.ml.rbx.comIn scope2026-11-14
ml-platform-rkg-us-east-1-1-8-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-rkg-us-east-1-1-9-2.prod.ml.rbx.comIn scope2026-11-14
ml-platform-rkg-us-east-2-1-8-1.prod.ml.rbx.comIn scope2026-11-14
ml-platform-rkg-us-east-2-1-8-1-serving.prod.ml.rbx.comIn scope2026-11-14
ml-platform-stage-us-east-1-1-6-1.prod.ml.rbx.comstagingIn scope2026-11-14
ml-platform-stage-us-east-1-1-6-1-serving.prod.ml.rbx.comstagingIn scope2026-11-14
wildcard.ml-platform-stage-us-east-1-1-6-1-serving.prod.ml.rbx.comstagingIn scope2026-11-14
ml-platform-stage-us-east-2-1-6-1.prod.ml.rbx.comstagingIn scope2026-11-14
ml-platform-stage-us-east-2-1-6-1-serving.prod.ml.rbx.comstagingIn scope2026-11-14
ml-platform-stage-use1-1-5-3.prod.ml.rbx.comstagingIn scope2026-11-14
ml-platform-stage-use1-1-5-3-serving.prod.ml.rbx.comstagingIn scope2026-11-14
ml-platform-stage-use2-1-5-3.prod.ml.rbx.comstagingIn scope2026-11-14
ml-platform-stage-use2-1-5-3-serving.prod.ml.rbx.comstagingIn scope2026-11-14
mlq.prod.ml.rbx.comIn scope2026-11-14
mlq-dev.prod.ml.rbx.comdevIn scope2026-11-14
pipelines.prod.ml.rbx.comIn scope2026-11-14
pipelines-dev.prod.ml.rbx.comdevIn scope2026-11-14
portal.prod.ml.rbx.comIn scope2026-11-14
token-factory.prod.ml.rbx.comIn scope2026-11-14
traffic.prod.ml.rbx.comIn scope2026-11-14
traffic-capture.prod.ml.rbx.comIn scope2026-11-14
traffic-capture-dev.prod.ml.rbx.comdevIn scope2026-11-14
traffic-dev.prod.ml.rbx.comdevIn scope2026-11-14
traffic-mcp.prod.ml.rbx.comIn scope2026-11-14
traffic-mcp-dev.prod.ml.rbx.comdevIn scope2026-11-14
wandb.prod.ml.rbx.comIn scope2026-11-14
moderation.rbx.comIn scope2026-11-14
www.moderation.rbx.comIn scope2026-11-14
moments-config.rbx.comIn scope2026-11-14
mosaic-coordination.rbx.comIn scope2026-11-14
mosaic-coordination-grpc.rbx.comapiIn scope2026-11-14
mosaic-coordination-stage.rbx.comstagingIn scope2026-11-14
mosaic-coordination-stage-grpc.rbx.comapi, stagingIn scope2026-11-14
mosaic-lite.rbx.comIn scope2026-11-14
mosaic-lite-stage.rbx.comstagingIn scope2026-11-14
mosaic-proxy.rbx.comIn scope2026-11-14

2,245 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated