Bug bounty program
RO
Roblox
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Subdomain Takeover to Authentication bypassAnalysed#335330 | No weakness recorded | 2020-04-23 | – | 783 |
| Insecure redirect rule results in bypassing ban redirect on certain pagesAnalysed#703058 | Insecure Direct Object Reference | 2020-04-26 | – | 233 |
| Subdomain Takeover at creatorforum.roblox.comAnalysed#264494 | Access Control | 2020-03-24 | – | 90 |
| Reflected XSS through multiple inputs in the issue collector on JiraAnalysed#380354 | Cross-site Scripting | 2020-03-24 | – | 56 |
| Malformed string sent through FireServer leads to server freezing/hangingAnalysed#679907 | Denial of Service | 2020-04-29 | – | 44 |
Subdomains2,245
| Name | Scope | First seen |
|---|---|---|
| about-stage.rbx.comstaging | In scope | 2026-11-14 |
| alert-logger-stage.rbx.comstaging | In scope | 2026-11-14 |
| anchore-stage.rbx.comstaging | In scope | 2026-11-14 |
| appsec-policy-proxy-stage.rbx.comstaging | In scope | 2026-11-14 |
| arti-stage-use2.rbx.comstaging | In scope | 2026-11-14 |
| arti-stage-usw1.rbx.comstaging | In scope | 2026-11-14 |
| arti-stage-usw1-2.rbx.comstaging | In scope | 2026-11-14 |
| wildcard.arti-stage-usw1-2.rbx.comstaging | In scope | 2026-11-14 |
| artifact-forwarding-stage.rbx.comstaging | In scope | 2026-11-14 |
| artifactory-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| artifactory-stage-aa.rbx.comstaging, tools | In scope | 2026-11-14 |
| artifactory-stage-aa-test.rbx.comstaging, test, tools | In scope | 2026-11-14 |
| artifactory-stage-old.rbx.comlegacy, staging, tools | In scope | 2026-11-14 |
| wildcard.artifactory-stage-old.rbx.comlegacy, staging, tools | In scope | 2026-11-14 |
| artifactory-stage2.rbx.comstaging, tools | In scope | 2026-11-14 |
| artifactory-stage7.rbx.comstaging, tools | In scope | 2026-11-14 |
| wildcard.artifactory-stage7.rbx.comstaging, tools | In scope | 2026-11-14 |
| artifacts-api-stage.rbx.comapi, staging | In scope | 2026-11-14 |
| artifacts-stage.rbx.comstaging | In scope | 2026-11-14 |
| artifacts-stage-1.rbx.comstaging | In scope | 2026-11-14 |
| wildcard.artifacts-stage-1.rbx.comstaging | In scope | 2026-11-14 |
| wildcard.artifacts-stage.rbx.comstaging | In scope | 2026-11-14 |
| svc.scep03.ra-scep.pki.aws-stage.rbx.comstaging | In scope | 2026-11-14 |
| backtrace-stage.rbx.comstaging | In scope | 2026-11-14 |
| console-stage.backtrace.rbx.comadmin, staging | In scope | 2026-11-14 |
| crashes-stage.backtrace.rbx.comstaging | In scope | 2026-11-14 |
| uploads-stage.backtrace.rbx.comdata, staging | In scope | 2026-11-14 |
| brands-stage.rbx.comstaging | In scope | 2026-11-14 |
| cachet-stage.rbx.comstaging | In scope | 2026-11-14 |
| careers-stage.rbx.comstaging | In scope | 2026-11-14 |
| cargo-registry-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| cdctl-stg.rbx.comstaging | In scope | 2026-11-14 |
| changestream-manager-stage.rbx.comadmin, staging | In scope | 2026-11-14 |
| changestream-manager-stage-grpc.rbx.comadmin, api, staging | In scope | 2026-11-14 |
| cloud-registry-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| code-stage.rbx.comstaging | In scope | 2026-11-14 |
| codecov-stage.rbx.comstaging | In scope | 2026-11-14 |
| stage.codecov.rbx.comstaging | In scope | 2026-11-14 |
| codefeed-webhook-stage.rbx.comstaging | In scope | 2026-11-14 |
| confluence-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| confluence-stage-legacy.rbx.comlegacy, staging, tools | In scope | 2026-11-14 |
| confluence-stage-red.rbx.comstaging, tools | In scope | 2026-11-14 |
| consul-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| cortex-stage.rbx.comstaging | In scope | 2026-11-14 |
| cortex-stage-legacy.rbx.comlegacy, staging | In scope | 2026-11-14 |
| cortex-stage-test.rbx.comstaging, test | In scope | 2026-11-14 |
| cortex-stage-unavailable.rbx.comstaging | In scope | 2026-11-14 |
| coveralls-stage.rbx.comstaging | In scope | 2026-11-14 |
| stage.critr.rbx.comstaging | In scope | 2026-11-14 |
| grpc.stage.critr.rbx.comapi, staging | In scope | 2026-11-14 |
| cs-verifier-stage.rbx.comstaging | In scope | 2026-11-14 |
| dev-docker-registry-stage.rbx.comdev, staging, tools | In scope | 2026-11-14 |
| dev-stage.rbx.comdev, staging | In scope | 2026-11-14 |
| devspaces-egress-dpi-stage.rbx.comstaging | In scope | 2026-11-14 |
| devspaces-egress-stage.rbx.comstaging | In scope | 2026-11-14 |
| devspaces-stage.rbx.comstaging | In scope | 2026-11-14 |
| devspaces2-stage.rbx.comstaging | In scope | 2026-11-14 |
| dc-alpha.di.rbx.comstaging | In scope | 2026-11-14 |
| rke-server-alpha.di.rbx.comstaging | In scope | 2026-11-14 |
| rke2-server-alpha1.di.rbx.comstaging | In scope | 2026-11-14 |
| rke2-server-alpha2.di.rbx.comstaging | In scope | 2026-11-14 |
| ash1-rke-alpha.spark-k8s.di.rbx.comstaging, tools | In scope | 2026-11-14 |
| starburst-presto-alpha.di.rbx.comstaging | In scope | 2026-11-14 |
| superset-staging.di.rbx.comstaging, tools | In scope | 2026-11-14 |
| superset.staging.dic.rbx.comstaging, tools | In scope | 2026-11-14 |
| superset.stg.dic.rbx.comstaging, tools | In scope | 2026-11-14 |
| superset-staging.dic.rbx.comstaging, tools | In scope | 2026-11-14 |
| distribution-stage.rbx.comstaging | In scope | 2026-11-14 |
| distribution-stage-old.rbx.comlegacy, staging | In scope | 2026-11-14 |
| dragonfly-manager-stage.rbx.comadmin, staging | In scope | 2026-11-14 |
| drone-stage.rbx.comci, staging | In scope | 2026-11-14 |
| drydock-proxy-stage.rbx.comstaging | In scope | 2026-11-14 |
| edge-stage-usw1.rbx.comstaging | In scope | 2026-11-14 |
| ee-stage-tier0-argocd.rbx.comci, staging | In scope | 2026-11-14 |
| ee-stage-tier1-argocd.rbx.comci, staging | In scope | 2026-11-14 |
| stage.ee-temporal.rbx.comstaging | In scope | 2026-11-14 |
| stage2.ee-temporal.rbx.comstaging | In scope | 2026-11-14 |
| engflow-staging.rbx.comstaging | In scope | 2026-11-14 |
| eventwatch-stage.rbx.comstaging | In scope | 2026-11-14 |
| eventwatch-stage-grpc.rbx.comapi, staging | In scope | 2026-11-14 |
| fm-luobu-stage.rbx.comstaging | In scope | 2026-11-14 |
| fm-stage.rbx.comstaging | In scope | 2026-11-14 |
| fmc-stage.rbx.comstaging | In scope | 2026-11-14 |
| stage.follower.rbx.comstaging | In scope | 2026-11-14 |
| grpc.stage.follower.rbx.comapi, staging | In scope | 2026-11-14 |
| fossa-stage.rbx.comstaging | In scope | 2026-11-14 |
| fulcio-stage.rbx.comstaging | In scope | 2026-11-14 |
| gh-relay-stage.rbx.comstaging | In scope | 2026-11-14 |
| gha-egress-ghc-stage.rbx.comstaging | In scope | 2026-11-14 |
| gha-egress-stage.rbx.comstaging | In scope | 2026-11-14 |
| gha-scaling-stage.rbx.comstaging | In scope | 2026-11-14 |
| gharas-stage.rbx.comstaging | In scope | 2026-11-14 |
| ghe-stage1-new.rbx.comstaging | In scope | 2026-11-14 |
| wildcard.ghe-stage1-new.rbx.comstaging | In scope | 2026-11-14 |
| github-cli-stage.rbx.comgit, staging | In scope | 2026-11-14 |
| wildcard.github-cli-stage.rbx.comgit, staging | In scope | 2026-11-14 |
| github-stage.rbx.comgit, staging | In scope | 2026-11-14 |
| github-stage1.rbx.comgit, staging | In scope | 2026-11-14 |
| wildcard.github-stage1.rbx.comgit, staging | In scope | 2026-11-14 |
| beta.github.rbx.comgit, staging | In scope | 2026-11-14 |
2,245 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.