Bug bounty program · HackerOne
Stripo Inc
Most upvoted reports72
- #783360ValidOpen memory dump method leaking customer information ,secret keys , password , source code & admin accountsStripo Inc · Access Control · 2020–158votes
- #983331ValidPublic and secret api key leaked in JavaScript sourceStripo Inc · Cryptography · 2020–148votes
- #3459285Valid[Critical] Unauthorized Cross-Tenant Data Access in Stripo AI Hub Campaign via Deleted Project.Stripo Inc · Access Control · 2026 · Critical–140votes
- #2932960Valid[my.stripo.email] Blind SSRF Vulnerability in Stripo App Export via Missing Endpoints Export Email Message to ZapierStripo Inc · Server-Side Request Forgery · 2025 · Critical–92votes
- #714521Validstripo.email reflected xssStripo Inc · Cross-site Scripting · 2019–70votes
- #738569ValidNo length on passwordStripo Inc · No weakness recorded · 2019–64votes
- #738899ValidAble to change password by entering wrong old passwordStripo Inc · Cryptography · 2019–56votes
- #1029723ValidNo rate limiting for subscribe email + lead to Cross origin misconfigurationStripo Inc · Input Validation and Logic · 2020–54votes
- #1009046ValidAble to use 'PREMIUM TEMPLATES' in 'FREE PLAN' at [https://my.stripo.email/cabinet/#/my-templates/]Stripo Inc · Input Validation and Logic · 2021–51votes
- #856305Valid[www.stripo.email] There is no rate limit for contact-us endpointsStripo Inc · Access Control · 2020–47votes
Subdomains108
1 covered by the program's own scope · 0 first seen this week
Name suggestsAnything
108 names
| Name | Scope | First seen |
|---|---|---|
| account.stripo.email | Not in the scope | 2026-11-14 |
| airflow.stripo.emailtools | Not in the scope | 2026-11-14 |
| amp.stripo.email | Not in the scope | 2026-11-14 |
| analytics.stripo.email | Not in the scope | 2026-11-14 |
| 2a57j78o7dcwep571h2zexyv8ba9up0.analytics.stripo.email | Not in the scope | 2026-11-14 |
| api.stripo.emailapi | Not in the scope | 2026-11-14 |
| blue.stripo.email | Not in the scope | 2026-11-14 |
| cdn-ckeditor.stripo.email | Not in the scope | 2026-11-14 |
| cert-manager-webhook.stripo.emailadmin | Not in the scope | 2026-11-14 |
| demo.stripo.emailtest | Not in the scope | 2026-11-14 |
| dev-account.stripo.emaildev | Not in the scope | 2026-11-14 |
| dev-grafana.stripo.emaildev, monitoring | Not in the scope | 2026-11-14 |
| dev-minio-cabinet-console.stripo.emailadmin, data, dev | Not in the scope | 2026-11-14 |
| dev-minio-plugins-console.stripo.emailadmin, data, dev | Not in the scope | 2026-11-14 |
| dev-plugin.stripo.emaildev | Not in the scope | 2026-11-14 |
| dev-plugins.stripo.emaildev | Not in the scope | 2026-11-14 |
| dev-plugins-grafana.stripo.emaildev, monitoring | Not in the scope | 2026-11-14 |
| dev-plugins-kd.stripo.emaildev | Not in the scope | 2026-11-14 |
| dev-plugins-prom.stripo.emaildev | Not in the scope | 2026-11-14 |
| dev-plugins-third-party.stripo.emaildev | Not in the scope | 2026-11-14 |
| dev-stage-cab-plug-minio-console.stripo.emailadmin, data, dev, staging | Not in the scope | 2026-11-14 |
| empleio.stripo.email | Not in the scope | 2026-11-14 |
| staging.empleio.stripo.emailstaging | Not in the scope | 2026-11-14 |
| ftp.stripo.emaildata | Not in the scope | 2026-11-14 |
| graphiti-stage.stripo.emailstaging | Not in the scope | 2026-11-14 |
| green.stripo.email | Not in the scope | 2026-11-14 |
| int.stripo.email | Not in the scope | 2026-11-14 |
| k8s-dump-collector-int.stripo.emaildata, tools | Not in the scope | 2026-11-14 |
| logs.stripo.emailmonitoring | Not in the scope | 2026-11-14 |
| lp.stripo.email | Not in the scope | 2026-11-14 |
| mau-staging-3-int.stripo.emailstaging | Not in the scope | 2026-11-14 |
| mau-staging-4-int.stripo.emailstaging | Not in the scope | 2026-11-14 |
| mau-staging-5-int.stripo.emailstaging | Not in the scope | 2026-11-14 |
| my.stripo.email | In scope | 2026-11-14 |
| n8n.stripo.email | Not in the scope | 2026-11-14 |
| new.stripo.email | Not in the scope | 2026-11-14 |
| newstaging.stripo.email | Not in the scope | 2026-11-14 |
| plugin.stripo.email | Not in the scope | 2026-11-14 |
| plugin-test.stripo.emailtest | Not in the scope | 2026-11-14 |
| plugins.stripo.email | Not in the scope | 2026-11-14 |
| rem2.stripo.email | Not in the scope | 2026-11-14 |
| research.stripo.email | Not in the scope | 2026-11-14 |
| showcase.stripo.email | Not in the scope | 2026-11-14 |
| api.showcase.stripo.emailapi | Not in the scope | 2026-11-14 |
| stage-account.stripo.emailstaging | Not in the scope | 2026-11-14 |
| stage-plugin.stripo.emailstaging | Not in the scope | 2026-11-14 |
| stage-plugins.stripo.emailstaging | Not in the scope | 2026-11-14 |
| stage-plugins-third-party.stripo.emailstaging | Not in the scope | 2026-11-14 |
| staging.stripo.emailstaging | Not in the scope | 2026-11-14 |
| staging-demo.stripo.emailstaging, test | Not in the scope | 2026-11-14 |
| svc.staging.stripo.emailstaging | Not in the scope | 2026-11-14 |
| stagingk.stripo.email | Not in the scope | 2026-11-14 |
| kd.stagingk.stripo.email | Not in the scope | 2026-11-14 |
| plugins.stagingk.stripo.email | Not in the scope | 2026-11-14 |
| wildcard.stagingk.stripo.email | Not in the scope | 2026-11-14 |
| status.stripo.emailmonitoring | Not in the scope | 2026-11-14 |
| status-archive.stripo.emaillegacy, monitoring | Not in the scope | 2026-11-14 |
| status-stage0.stripo.emailmonitoring, staging | Not in the scope | 2026-11-14 |
| status0.stripo.emailmonitoring | Not in the scope | 2026-11-14 |
| stripo-cdn.stripo.email | Not in the scope | 2026-11-14 |
| stripo-jupyter.stripo.emailtools | Not in the scope | 2026-11-14 |
| stripo-marketing-ftp.stripo.emaildata | Not in the scope | 2026-11-14 |
| stripo-staging-cdn.stripo.emailstaging | Not in the scope | 2026-11-14 |
| stripocdn-staging.stripo.emailstaging | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-staging.stripo.emailstaging | Not in the scope | 2026-11-14 |
| stripocdn-test.stripo.emailtest | Not in the scope | 2026-11-14 |
| test.stripocdn-test.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test1.stripo.emailtest | Not in the scope | 2026-11-14 |
| test.stripocdn-test1.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test1.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test10.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test10.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test2.stripo.emailtest | Not in the scope | 2026-11-14 |
| test.stripocdn-test2.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test2.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test3.stripo.emailtest | Not in the scope | 2026-11-14 |
| test.stripocdn-test3.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test3.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test4.stripo.emailtest | Not in the scope | 2026-11-14 |
| test.stripocdn-test4.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test4.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test5.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test5.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test6.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test6.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test7.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test7.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test8.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test8.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-test9.stripo.emailtest | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-test9.stripo.emailtest | Not in the scope | 2026-11-14 |
| stripocdn-testremote.stripo.email | Not in the scope | 2026-11-14 |
| wildcard.stripocdn-testremote.stripo.email | Not in the scope | 2026-11-14 |
| stripocdnplugin-staging.stripo.emailstaging | Not in the scope | 2026-11-14 |
| wildcard.stripocdnplugin-staging.stripo.emailstaging | Not in the scope | 2026-11-14 |
| support.stripo.email | Not in the scope | 2026-11-14 |
| svc.stripo.email | Not in the scope | 2026-11-14 |
| test-plugins-cdt.stripo.emailtest | Not in the scope | 2026-11-14 |
| test-plugins-e2e.stripo.emailtest | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.