Skip to content
Connect AISign inSign up free

Bug bounty program

ST

Stripe

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
55
Disclosed reports
26
Subdomains
1,492
Vendor on CyberSIXT
Stripe (7 CVEs, 0 exploited)

Most upvoted reports26

All reports
Most upvoted reports of Stripe
ReportWeaknessDisclosedBountyVotes
Fee discounts can be redeemed many times, resulting in unlimited fee-free transactionsAnalysed#1849626Input Validation and Logic2023-02-25$5,000266
Mass Account Takeover at https://app.taxjar.com/ - No user InteractionAnalysed#1581240Authentication2022-07-11–253
Mass Accounts Takeover Without any user Interaction at https://app.taxjar.com/Analysed#1685970Authentication2022-10-19–212
Email change or personal data change on the account.Analysed#1250037Insecure Direct Object Reference2022-01-21$3,000149
Possible XSS vulnerability without a content security bypassAnalysed#1804177Cross-site Scripting2023-05-01$2,000131
CSRF token validation system is disabled on Stripe DashboardAnalysed#1483327Cross-Site Request Forgery2022-04-02–113
Mass account takeover!Analysed#1634165Misconfiguration and Insecure Design2022-12-21–101
User can pay using archived price by manipulating the request sent to `POST /v1/payment_pages/for_plink`Analysed#1328278Insecure Direct Object Reference2022-01-19–100
CSRF token validation system is disabled on Stripe DashboardAnalysed#1493437Cross-Site Request Forgery2022-05-31$2,50087
Promotion code can be used more than redemption limit.Analysed#1717650Race Conditions2023-02-13–55

Subdomains1,492

Root
Scope
Name suggests:Test and QA
First seen
Text fileClear filters108 names
Subdomains of Stripe
NameScopeFirst seen
sandbox.api.getbouncer.comapi, testListed out of scope2026-11-14
aws-test.getbouncer.comtestListed out of scope2026-11-14
qa-auth.link.coauth, testIn scope2026-11-14
qa-checkout.link.cotestIn scope2026-11-14
qa-support-conversations.link.cotestIn scope2026-11-14
test.link.cotestIn scope2026-11-14
2x8r0.test-app.link.cotestIn scope2026-11-14
test.payable.comtestNot in the scope2026-11-14
test1.payable.comtestNot in the scope2026-11-14
demo.recko.iotestIn scope2026-11-14
demo1.recko.iotestIn scope2026-11-14
test.recko.iotestIn scope2026-11-14
test1.recko.iotestIn scope2026-11-14
qa-secure-files.fastly.cdn.stripe.comdata, testIn scope2026-11-14
connections-sandbox.stripe.comtestIn scope2026-11-14
qa.corp.stripe.cominternal, testIn scope2026-11-14
qa-bom.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa-bom.corp.stripe.cominternal, testIn scope2026-11-14
qa-cdg.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa-cdg.corp.stripe.cominternal, testIn scope2026-11-14
qa-cgk.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa-cgk.corp.stripe.cominternal, testIn scope2026-11-14
qa-cmh.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa-cmh.corp.stripe.cominternal, testIn scope2026-11-14
qa-dub.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa-dub.corp.stripe.cominternal, testIn scope2026-11-14
qa-east.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa-east.corp.stripe.cominternal, testIn scope2026-11-14
qa-northwest.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa-northwest.corp.stripe.cominternal, testIn scope2026-11-14
qa-pdx.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa-pdx.corp.stripe.cominternal, testIn scope2026-11-14
amp.qa.corp.stripe.cominternal, testIn scope2026-11-14
cpe.qa.corp.stripe.cominternal, testIn scope2026-11-14
devboxproxy.qa.corp.stripe.cominternal, testIn scope2026-11-14
fl.qa.corp.stripe.cominternal, testIn scope2026-11-14
jira.qa.corp.stripe.cominternal, test, toolsIn scope2026-11-14
jss.qa.corp.stripe.cominternal, testIn scope2026-11-14
toolshed.qa.corp.stripe.cominternal, testIn scope2026-11-14
wildcard.qa.corp.stripe.cominternal, testIn scope2026-11-14
demo.stripe.comtestIn scope2026-11-14
mcp-sandbox.stripe.comtestIn scope2026-11-14
partner-ideal-qa.stripe.comtestIn scope2026-11-14
preprod-connections-sandbox.stripe.comstaging, testIn scope2026-11-14
qa.stripe.comtestIn scope2026-11-14
qa-access.stripe.comtest, vpnIn scope2026-11-14
qa-api.stripe.comapi, testIn scope2026-11-14
qa-api-global-bluegreen.stripe.comapi, testIn scope2026-11-14
qa-api-w2.stripe.comapi, testIn scope2026-11-14
qa-armada.stripe.comtestIn scope2026-11-14
qa-bfcm.stripe.comtestIn scope2026-11-14
qa-book.stripe.comtestIn scope2026-11-14
qa-button.stripe.comtestIn scope2026-11-14
qa-buy.stripe.comtestIn scope2026-11-14
qa-checkout.stripe.comtestIn scope2026-11-14
qa-connect-js.stripe.comtestIn scope2026-11-14
qa-connections-bofa.stripe.comtestIn scope2026-11-14
qa-connections-chase.stripe.comtestIn scope2026-11-14
qa-connections-citi.stripe.comtestIn scope2026-11-14
qa-connections-citi-payload.stripe.comtestIn scope2026-11-14
qa-connections-sandbox.stripe.comtestIn scope2026-11-14
qa-crypto-js.stripe.comtestIn scope2026-11-14
qa-dashboard.stripe.comadmin, testIn scope2026-11-14
qa-dev1.stripe.comdev, testIn scope2026-11-14
qa-discover-dsts-integration-encryption.stripe.comtestIn scope2026-11-14
qa-discover-dsts-integration-signing.stripe.comtestIn scope2026-11-14
qa-donate.stripe.comtestIn scope2026-11-14
qa-edge-testing.stripe.comtestIn scope2026-11-14
qa-errors.stripe.comtestIn scope2026-11-14
qa-files.stripe.comdata, testIn scope2026-11-14
qa-files-cdn.stripe.comdata, testIn scope2026-11-14
cdn.qa-files.stripe.comdata, testIn scope2026-11-14
qa-gator.stripe.comtestIn scope2026-11-14
qa-invoice.stripe.comtestIn scope2026-11-14
qa-ipaddr-3ds.stripe.comtestIn scope2026-11-14
qa-js.stripe.comtestIn scope2026-11-14
qa-jwt-connections-barclays.stripe.comtestIn scope2026-11-14
qa-m.stripe.comtestIn scope2026-11-14
qa-network-citi.stripe.comtestIn scope2026-11-14
qa-network-citi-payload.stripe.comtestIn scope2026-11-14
qa-partner-amex-east-asia-sponsored-merchant.stripe.comtestIn scope2026-11-14
qa-partner-hdfc.stripe.comtestIn scope2026-11-14
qa-profile.stripe.comtestIn scope2026-11-14
qa-public-goods.stripe.comtestIn scope2026-11-14
qa-secure-files.stripe.comdata, testIn scope2026-11-14
qa-status.stripe.commonitoring, testIn scope2026-11-14
qa-support-conversations.stripe.comtestIn scope2026-11-14
qa-terminal-device.stripe.comtestIn scope2026-11-14
qa-terminal-statics.stripe.comtestIn scope2026-11-14
qa-trust.stripe.comtestIn scope2026-11-14
qa-uploads.stripe.comdata, testIn scope2026-11-14
index.qa.stripe.comtestIn scope2026-11-14
sandbox.stripe.comtestIn scope2026-11-14
sandbox-acs.stripe.comtestIn scope2026-11-14
api.sandbox.stripe.comapi, testIn scope2026-11-14
test.stripe.comtestIn scope2026-11-14
test-mode-simulated.stripe.comtestIn scope2026-11-14
api.test.stripe.comapi, testIn scope2026-11-14
uat.stripe.comtestIn scope2026-11-14
sandbox.acs.touchtechpayments.comtestNot in the scope2026-11-14

1,323 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated