Skip to content
Connect AISign inSign up free

Bug bounty program

SI

Stripo Inc

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
2
Disclosed reports
72
Subdomains
108

Most upvoted reports72

All reports
Most upvoted reports of Stripo Inc
ReportWeaknessDisclosedBountyVotes
Open memory dump method leaking customer information ,secret keys , password , source code & admin accountsAnalysed#783360Access Control2020-01-31–158
Public and secret api key leaked in JavaScript sourceAnalysed#983331Cryptography2020-09-29–148
[Critical] Unauthorized Cross-Tenant Data Access in Stripo AI Hub Campaign via Deleted Project.Analysed#3459285Access Control2026-01-20–140
[my.stripo.email] Blind SSRF Vulnerability in Stripo App Export via Missing Endpoints Export Email Message to ZapierAnalysed#2932960Server-Side Request Forgery2025-12-01–92
stripo.email reflected xssAnalysed#714521Cross-site Scripting2019-12-26–70
No length on passwordAnalysed#738569No weakness recorded2019-12-23–64
Able to change password by entering wrong old passwordAnalysed#738899Cryptography2019-12-18–56
No rate limiting for subscribe email + lead to Cross origin misconfigurationAnalysed#1029723Input Validation and Logic2020-11-30–54
Able to use 'PREMIUM TEMPLATES' in 'FREE PLAN' at [https://my.stripo.email/cabinet/#/my-templates/]Analysed#1009046Input Validation and Logic2021-01-25–51
[www.stripo.email] There is no rate limit for contact-us endpointsAnalysed#856305Access Control2020-05-26–47

Subdomains108

Root
Scope:Not in the scope
Name suggests
First seen
Text fileClear filters107 names
Subdomains of Stripo Inc
NameScopeFirst seen
account.stripo.emailNot in the scope2026-11-14
airflow.stripo.emailtoolsNot in the scope2026-11-14
amp.stripo.emailNot in the scope2026-11-14
analytics.stripo.emailNot in the scope2026-11-14
2a57j78o7dcwep571h2zexyv8ba9up0.analytics.stripo.emailNot in the scope2026-11-14
api.stripo.emailapiNot in the scope2026-11-14
blue.stripo.emailNot in the scope2026-11-14
cdn-ckeditor.stripo.emailNot in the scope2026-11-14
cert-manager-webhook.stripo.emailadminNot in the scope2026-11-14
demo.stripo.emailtestNot in the scope2026-11-14
dev-account.stripo.emaildevNot in the scope2026-11-14
dev-grafana.stripo.emaildev, monitoringNot in the scope2026-11-14
dev-minio-cabinet-console.stripo.emailadmin, data, devNot in the scope2026-11-14
dev-minio-plugins-console.stripo.emailadmin, data, devNot in the scope2026-11-14
dev-plugin.stripo.emaildevNot in the scope2026-11-14
dev-plugins.stripo.emaildevNot in the scope2026-11-14
dev-plugins-grafana.stripo.emaildev, monitoringNot in the scope2026-11-14
dev-plugins-kd.stripo.emaildevNot in the scope2026-11-14
dev-plugins-prom.stripo.emaildevNot in the scope2026-11-14
dev-plugins-third-party.stripo.emaildevNot in the scope2026-11-14
dev-stage-cab-plug-minio-console.stripo.emailadmin, data, dev, stagingNot in the scope2026-11-14
empleio.stripo.emailNot in the scope2026-11-14
staging.empleio.stripo.emailstagingNot in the scope2026-11-14
ftp.stripo.emaildataNot in the scope2026-11-14
graphiti-stage.stripo.emailstagingNot in the scope2026-11-14
green.stripo.emailNot in the scope2026-11-14
int.stripo.emailNot in the scope2026-11-14
k8s-dump-collector-int.stripo.emaildata, toolsNot in the scope2026-11-14
logs.stripo.emailmonitoringNot in the scope2026-11-14
lp.stripo.emailNot in the scope2026-11-14
mau-staging-3-int.stripo.emailstagingNot in the scope2026-11-14
mau-staging-4-int.stripo.emailstagingNot in the scope2026-11-14
mau-staging-5-int.stripo.emailstagingNot in the scope2026-11-14
n8n.stripo.emailNot in the scope2026-11-14
new.stripo.emailNot in the scope2026-11-14
newstaging.stripo.emailNot in the scope2026-11-14
plugin.stripo.emailNot in the scope2026-11-14
plugin-test.stripo.emailtestNot in the scope2026-11-14
plugins.stripo.emailNot in the scope2026-11-14
rem2.stripo.emailNot in the scope2026-11-14
research.stripo.emailNot in the scope2026-11-14
showcase.stripo.emailNot in the scope2026-11-14
api.showcase.stripo.emailapiNot in the scope2026-11-14
stage-account.stripo.emailstagingNot in the scope2026-11-14
stage-plugin.stripo.emailstagingNot in the scope2026-11-14
stage-plugins.stripo.emailstagingNot in the scope2026-11-14
stage-plugins-third-party.stripo.emailstagingNot in the scope2026-11-14
staging.stripo.emailstagingNot in the scope2026-11-14
staging-demo.stripo.emailstaging, testNot in the scope2026-11-14
svc.staging.stripo.emailstagingNot in the scope2026-11-14
stagingk.stripo.emailNot in the scope2026-11-14
kd.stagingk.stripo.emailNot in the scope2026-11-14
plugins.stagingk.stripo.emailNot in the scope2026-11-14
wildcard.stagingk.stripo.emailNot in the scope2026-11-14
status.stripo.emailmonitoringNot in the scope2026-11-14
status-archive.stripo.emaillegacy, monitoringNot in the scope2026-11-14
status-stage0.stripo.emailmonitoring, stagingNot in the scope2026-11-14
status0.stripo.emailmonitoringNot in the scope2026-11-14
stripo-cdn.stripo.emailNot in the scope2026-11-14
stripo-jupyter.stripo.emailtoolsNot in the scope2026-11-14
stripo-marketing-ftp.stripo.emaildataNot in the scope2026-11-14
stripo-staging-cdn.stripo.emailstagingNot in the scope2026-11-14
stripocdn-staging.stripo.emailstagingNot in the scope2026-11-14
wildcard.stripocdn-staging.stripo.emailstagingNot in the scope2026-11-14
stripocdn-test.stripo.emailtestNot in the scope2026-11-14
test.stripocdn-test.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test.stripo.emailtestNot in the scope2026-11-14
stripocdn-test1.stripo.emailtestNot in the scope2026-11-14
test.stripocdn-test1.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test1.stripo.emailtestNot in the scope2026-11-14
stripocdn-test10.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test10.stripo.emailtestNot in the scope2026-11-14
stripocdn-test2.stripo.emailtestNot in the scope2026-11-14
test.stripocdn-test2.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test2.stripo.emailtestNot in the scope2026-11-14
stripocdn-test3.stripo.emailtestNot in the scope2026-11-14
test.stripocdn-test3.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test3.stripo.emailtestNot in the scope2026-11-14
stripocdn-test4.stripo.emailtestNot in the scope2026-11-14
test.stripocdn-test4.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test4.stripo.emailtestNot in the scope2026-11-14
stripocdn-test5.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test5.stripo.emailtestNot in the scope2026-11-14
stripocdn-test6.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test6.stripo.emailtestNot in the scope2026-11-14
stripocdn-test7.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test7.stripo.emailtestNot in the scope2026-11-14
stripocdn-test8.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test8.stripo.emailtestNot in the scope2026-11-14
stripocdn-test9.stripo.emailtestNot in the scope2026-11-14
wildcard.stripocdn-test9.stripo.emailtestNot in the scope2026-11-14
stripocdn-testremote.stripo.emailNot in the scope2026-11-14
wildcard.stripocdn-testremote.stripo.emailNot in the scope2026-11-14
stripocdnplugin-staging.stripo.emailstagingNot in the scope2026-11-14
wildcard.stripocdnplugin-staging.stripo.emailstagingNot in the scope2026-11-14
support.stripo.emailNot in the scope2026-11-14
svc.stripo.emailNot in the scope2026-11-14
test-plugins-cdt.stripo.emailtestNot in the scope2026-11-14
test-plugins-e2e.stripo.emailtestNot in the scope2026-11-14
test-plugins-e2e-3rd.stripo.emailtestNot in the scope2026-11-14

1 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated