Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
24
Disclosed reports
0
Subdomains
3,664

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains3,664

Subdomains of Scopely
NameScopeFirst seen
api.prod.datarequests.scopely.comapiIn scope2026-11-14
2a57j78d05nkylnjxxxbsfyb1hqpih3.api.prod.datarequests.scopely.comapiIn scope2026-11-14
api.staging.datarequests.scopely.comapi, stagingIn scope2026-11-14
2a57j77vgoemr8puv5ikbogcmcui9fd.api.staging.datarequests.scopely.comapi, stagingIn scope2026-11-14
luna-api.scopely.comapiIn scope2026-11-14
chunkstore.luna-api.scopely.comapiIn scope2026-11-14
filestore.luna-api.scopely.comapiIn scope2026-11-14
symbols.luna-api.scopely.comapiIn scope2026-11-14
api.partnerportal.scopely.comapiIn scope2026-11-14
api.dev.partnerportal.scopely.comapi, devIn scope2026-11-14
cube-api.playgami.scopely.comapiIn scope2026-11-14
cube-api.dev.playgami.scopely.comapi, devIn scope2026-11-14
terraform-test-apigw.sandbox.playgami.scopely.comapi, testIn scope2026-11-14
terraform-test-apigw-complete.sandbox.playgami.scopely.comapi, testIn scope2026-11-14
terraform-test-raw-apigw.sandbox.playgami.scopely.comapi, testIn scope2026-11-14
apigw-affinity-limits-example-tophat.adev.scopely.ioapiIn scope2026-11-14
apigw-complete-public-satellite-example.adev.scopely.ioapiIn scope2026-11-14
apigw-existing-vpclink-example.adev.scopely.ioapiIn scope2026-11-14
apigw-private-example.adev.scopely.ioapi, internalIn scope2026-11-14
apigw-private-example-2.adev.scopely.ioapi, internalIn scope2026-11-14
apigw-service-limits-example.adev.scopely.ioapiIn scope2026-11-14
console-api-gw-poc.adev.scopely.ioadmin, apiIn scope2026-11-14
api.use1.sat2.k8s.adev.scopely.ioapi, toolsIn scope2026-11-14
api.internal.use1.sat2.k8s.adev.scopely.ioapi, internal, toolsIn scope2026-11-14
playgami-ai-api.adev.scopely.ioapiIn scope2026-11-14
apigw-private-example.private.adev.scopely.ioapi, internalIn scope2026-11-14
apigw-private-example-2.private.adev.scopely.ioapi, internalIn scope2026-11-14
service-limit-api-gw-poc.private.adev.scopely.ioapi, internalIn scope2026-11-14
service-limit-api-gw-poc.adev.scopely.ioapiIn scope2026-11-14
service-limit-api-gw-poc-2.adev.scopely.ioapiIn scope2026-11-14
simple-apigw-example.adev.scopely.ioapiIn scope2026-11-14
test-mixed-openapi-gw.adev.scopely.ioapi, testIn scope2026-11-14
test-player-profile-api-default.adev.scopely.ioapi, testIn scope2026-11-14
test-raw-openapi-gw.adev.scopely.ioapi, testIn scope2026-11-14
api.use1.sat1.k8s.aprod.scopely.ioapi, toolsIn scope2026-11-14
api.internal.use1.sat1.k8s.aprod.scopely.ioapi, internal, toolsIn scope2026-11-14
playgami-ai-api.aprod.scopely.ioapiIn scope2026-11-14
prod-api.spinnaker.playgami.scopely.ioapi, ciIn scope2026-11-14
sandbox-api.spinnaker.playgami.scopely.ioapi, ci, testIn scope2026-11-14
batch-games-dice-api.withbuddies.comapiIn scope2026-11-14
dev-wheeloffortune-api.withbuddies.comapi, devIn scope2026-11-14
dice-api.withbuddies.comapiIn scope2026-11-14
api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
asanka.2015.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
config.2015.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
apps-rnd-mirrors.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
bomgar1.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
clientgit.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
docker-alpha.api.dev.odyssey.withbuddies.comapi, dev, staging, toolsIn scope2026-11-14
admin.engineering.api.dev.odyssey.withbuddies.comadmin, api, devIn scope2026-11-14
assetshost.productions.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
3.reset.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
sinairyu.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
staging-tableau.api.dev.odyssey.withbuddies.comapi, dev, stagingIn scope2026-11-14
wood19.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
namibia.yahtzee-with-buddies.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
nextour.yahtzee-with-buddies.api.dev.odyssey.withbuddies.comapi, devIn scope2026-11-14
api-content-sandbox.dev.panda.withbuddies.comapi, dev, testIn scope2026-11-14
api-iris.dev.panda.withbuddies.comapi, devIn scope2026-11-14
api-iris.prod.panda.withbuddies.comapiIn scope2026-11-14
api.prod-arcade.pantheon.withbuddies.comapiIn scope2026-11-14
preview-api.withbuddies.comapi, stagingIn scope2026-11-14
preview-dice-api.withbuddies.comapi, stagingIn scope2026-11-14
preview-dice-api-test.withbuddies.comapi, staging, testIn scope2026-11-14
preview-scrabble-api.withbuddies.comapi, stagingIn scope2026-11-14
preview-wheeloffortune-api.withbuddies.comapi, stagingIn scope2026-11-14
scrabble-api.withbuddies.comapiIn scope2026-11-14
api.production.scrabble.withbuddies.comapiIn scope2026-11-14
stage-dice-api.withbuddies.comapi, stagingIn scope2026-11-14
stage-scrabble-api.withbuddies.comapi, stagingIn scope2026-11-14
staging-api.withbuddies.comapi, stagingIn scope2026-11-14
api.prod.tophat.withbuddies.comapiIn scope2026-11-14
api.sandbox1.tophat.withbuddies.comapi, testIn scope2026-11-14
dev.api.vault.tophat.withbuddies.comapi, dev, toolsIn scope2026-11-14
api.dev.vault.tophat.withbuddies.comapi, dev, toolsIn scope2026-11-14
api.stage.vault.tophat.withbuddies.comapi, staging, toolsIn scope2026-11-14
api.test.vault.tophat.withbuddies.comapi, test, toolsIn scope2026-11-14
api.preview.wheel.withbuddies.comapi, stagingIn scope2026-11-14
wheeloffortune-api.withbuddies.comapiIn scope2026-11-14

3,661 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in