Bug bounty program
RO
Roblox
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Subdomain Takeover to Authentication bypassAnalysed#335330 | No weakness recorded | 2020-04-23 | – | 783 |
| Insecure redirect rule results in bypassing ban redirect on certain pagesAnalysed#703058 | Insecure Direct Object Reference | 2020-04-26 | – | 233 |
| Subdomain Takeover at creatorforum.roblox.comAnalysed#264494 | Access Control | 2020-03-24 | – | 90 |
| Reflected XSS through multiple inputs in the issue collector on JiraAnalysed#380354 | Cross-site Scripting | 2020-03-24 | – | 56 |
| Malformed string sent through FireServer leads to server freezing/hangingAnalysed#679907 | Denial of Service | 2020-04-29 | – | 44 |
Subdomains2,245
| Name | Scope | First seen |
|---|---|---|
| artifactory.rbx.comtools | In scope | 2026-11-14 |
| artifactory-cache.rbx.comtools | In scope | 2026-11-14 |
| artifactory-cache-poc.rbx.comtools | In scope | 2026-11-14 |
| artifactory-cargo.rbx.comtools | In scope | 2026-11-14 |
| artifactory-dev.rbx.comdev, tools | In scope | 2026-11-14 |
| artifactory-dr.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge-st1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge-st2.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge-st3.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge-test.rbx.comtest, tools | In scope | 2026-11-14 |
| artifactory-edge-west1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge0.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge01.rbx.comtools | In scope | 2026-11-14 |
| wildcard.artifactory-edge01.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge02.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge07.rbx.comtools | In scope | 2026-11-14 |
| wildcard.artifactory-edge07.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge1.rbx.comtools | In scope | 2026-11-14 |
| wildcard.artifactory-edge1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge123.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edge2.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgemd.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgemd1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgemdtest.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgestage.rbx.comtools | In scope | 2026-11-14 |
| artifactory-edgetest.rbx.comtools | In scope | 2026-11-14 |
| artifactory-prod-aa.rbx.comtools | In scope | 2026-11-14 |
| artifactory-prod-test.rbx.comtest, tools | In scope | 2026-11-14 |
| artifactory-prod1.rbx.comtools | In scope | 2026-11-14 |
| wildcard.artifactory-prod1.rbx.comtools | In scope | 2026-11-14 |
| artifactory-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| artifactory-stage-aa.rbx.comstaging, tools | In scope | 2026-11-14 |
| artifactory-stage-aa-test.rbx.comstaging, test, tools | In scope | 2026-11-14 |
| artifactory-stage-old.rbx.comlegacy, staging, tools | In scope | 2026-11-14 |
| wildcard.artifactory-stage-old.rbx.comlegacy, staging, tools | In scope | 2026-11-14 |
| artifactory-stage2.rbx.comstaging, tools | In scope | 2026-11-14 |
| artifactory-stage7.rbx.comstaging, tools | In scope | 2026-11-14 |
| wildcard.artifactory-stage7.rbx.comstaging, tools | In scope | 2026-11-14 |
| artifactory-test.rbx.comtest, tools | In scope | 2026-11-14 |
| artifactory-uswest1.rbx.comtools | In scope | 2026-11-14 |
| wildcard.artifactory.rbx.comtools | In scope | 2026-11-14 |
| cargo-registry.rbx.comtools | In scope | 2026-11-14 |
| cargo-registry-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| cloud-registry.rbx.comtools | In scope | 2026-11-14 |
| cloud-registry-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| confluence.rbx.comtools | In scope | 2026-11-14 |
| confluence-dev.rbx.comdev, tools | In scope | 2026-11-14 |
| confluence-legacy.rbx.comlegacy, tools | In scope | 2026-11-14 |
| confluence-prod.rbx.comtools | In scope | 2026-11-14 |
| confluence-redirect-test.rbx.comtest, tools | In scope | 2026-11-14 |
| confluence-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| confluence-stage-legacy.rbx.comlegacy, staging, tools | In scope | 2026-11-14 |
| confluence-stage-red.rbx.comstaging, tools | In scope | 2026-11-14 |
| consul-demo.rbx.comtest, tools | In scope | 2026-11-14 |
| consul-dev2.rbx.comdev, tools | In scope | 2026-11-14 |
| consul-stage.rbx.comstaging, tools | In scope | 2026-11-14 |
| dev-confluence-dns-name.rbx.comdev, tools | In scope | 2026-11-14 |
| dev-docker-registry.rbx.comdev, tools | In scope | 2026-11-14 |
| dev-docker-registry-stage.rbx.comdev, staging, tools | In scope | 2026-11-14 |
| airflow.di.rbx.comtools | In scope | 2026-11-14 |
| airflow2.di.rbx.comtools | In scope | 2026-11-14 |
| core.airflow2.di.rbx.comtools | In scope | 2026-11-14 |
| wildcard.core.airflow2.di.rbx.comtools | In scope | 2026-11-14 |
| data-platform.airflow2.di.rbx.comtools | In scope | 2026-11-14 |
| wildcard.data-platform.airflow2.di.rbx.comtools | In scope | 2026-11-14 |
| wildcard.airflow2.di.rbx.comtools | In scope | 2026-11-14 |
| registry.astro-dev.di.rbx.comdev, tools | In scope | 2026-11-14 |
| kon-airflow-dev.di.rbx.comdev, tools | In scope | 2026-11-14 |
| spark-k8s.di.rbx.comtools | In scope | 2026-11-14 |
| ash1-rke-alpha.spark-k8s.di.rbx.comstaging, tools | In scope | 2026-11-14 |
| starburst-airflow-blue.di.rbx.comtools | In scope | 2026-11-14 |
| starburst-trino-superset.di.rbx.comtools | In scope | 2026-11-14 |
| superset.di.rbx.comtools | In scope | 2026-11-14 |
| superset-dev.di.rbx.comdev, tools | In scope | 2026-11-14 |
| superset-staging.di.rbx.comstaging, tools | In scope | 2026-11-14 |
| superset-test.di.rbx.comtest, tools | In scope | 2026-11-14 |
| trino-superset.di.rbx.comtools | In scope | 2026-11-14 |
| trino-superset-os-blue.di.rbx.comtools | In scope | 2026-11-14 |
| trino-superset-os-green.di.rbx.comtools | In scope | 2026-11-14 |
| trino-superset-prod.di.rbx.comtools | In scope | 2026-11-14 |
| trino-superset-sb-blue.di.rbx.comtools | In scope | 2026-11-14 |
| trino-superset-sb-green.di.rbx.comtools | In scope | 2026-11-14 |
| trinodb-dc-airflow-dev.di.rbx.comdev, tools | In scope | 2026-11-14 |
| trinodb-dc-airflow-dev-ash1.di.rbx.comdev, tools | In scope | 2026-11-14 |
| trinodb-dc-airflow-prod.di.rbx.comtools | In scope | 2026-11-14 |
| trinodb-dc-airflow-prod-ash1.di.rbx.comtools | In scope | 2026-11-14 |
| airflow2.dev-core.dic.rbx.comdev, tools | In scope | 2026-11-14 |
| airflow2.dev-creator.dic.rbx.comdev, tools | In scope | 2026-11-14 |
| superset.dev.dic.rbx.comdev, tools | In scope | 2026-11-14 |
| superset.prod.dic.rbx.comtools | In scope | 2026-11-14 |
| spark-k8s.dic.rbx.comtools | In scope | 2026-11-14 |
| superset.staging.dic.rbx.comstaging, tools | In scope | 2026-11-14 |
| superset.stg.dic.rbx.comstaging, tools | In scope | 2026-11-14 |
| superset-staging.dic.rbx.comstaging, tools | In scope | 2026-11-14 |
| docker-artifactory-cache.rbx.comtools | In scope | 2026-11-14 |
| docker-artifactory-cache-poc.rbx.comtools | In scope | 2026-11-14 |
| edge-artifactory.rbx.comtools | In scope | 2026-11-14 |
| jira.github.rbx.comgit, tools | In scope | 2026-11-14 |
| ipe-prod-consul.rbx.comtools | In scope | 2026-11-14 |
2,245 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.