Bug bounty program
GovTech - Vulnerability Disclosure Programme
- Platform
- YesWeHack
- Bounties
- None
- Assets in scope
- 2
- Disclosed reports
- 0
- Subdomains
- 21,712
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains21,712
| Name | Scope | First seen |
|---|---|---|
| dev.scamshot.1799.gov.sgdev | In scope | 2026-11-14 |
| a-star.gov.sg | In scope | 2026-11-14 |
| www.a-star.gov.sg | In scope | 2026-11-14 |
| ac360.gov.sg | In scope | 2026-11-14 |
| dev.ac360.gov.sgdev | In scope | 2026-11-14 |
| stg.ac360.gov.sgstaging | In scope | 2026-11-14 |
| access.gov.sgvpn | In scope | 2026-11-14 |
| api.access.gov.sgapi, vpn | In scope | 2026-11-14 |
| dev.api.access.gov.sgapi, dev, vpn | In scope | 2026-11-14 |
| test.api.access.gov.sgapi, test, vpn | In scope | 2026-11-14 |
| uat.api.access.gov.sgapi, test, vpn | In scope | 2026-11-14 |
| www.uat.api.access.gov.sgapi, test, vpn | In scope | 2026-11-14 |
| www.api.access.gov.sgapi, vpn | In scope | 2026-11-14 |
| accord.gov.sg | In scope | 2026-11-14 |
| www.accord.gov.sg | In scope | 2026-11-14 |
| ace.gov.sg | In scope | 2026-11-14 |
| ace-hta.gov.sg | In scope | 2026-11-14 |
| tenth-anniversary.ace-hta.gov.sg | In scope | 2026-11-14 |
| www.ace-hta.gov.sg | In scope | 2026-11-14 |
| acefpn.ace.gov.sg | In scope | 2026-11-14 |
| aceqbj.ace.gov.sg | In scope | 2026-11-14 |
| aceqportal.ace.gov.sg | In scope | 2026-11-14 |
| abc.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-a.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-b.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-c.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-e.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-q.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-w.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-x.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-y.apps.ace.gov.sg | In scope | 2026-11-14 |
| app-z.apps.ace.gov.sg | In scope | 2026-11-14 |
| application-a.apps.ace.gov.sg | In scope | 2026-11-14 |
| application-b.apps.ace.gov.sg | In scope | 2026-11-14 |
| application-c.apps.ace.gov.sg | In scope | 2026-11-14 |
| application-d.apps.ace.gov.sg | In scope | 2026-11-14 |
| auth.apps.ace.gov.sgauth | In scope | 2026-11-14 |
| cd.apps.ace.gov.sg | In scope | 2026-11-14 |
| cr.apps.ace.gov.sg | In scope | 2026-11-14 |
| dev-gate-llm-gw.apps.ace.gov.sgdev | In scope | 2026-11-14 |
| dh.apps.ace.gov.sg | In scope | 2026-11-14 |
| eds-mlink.apps.ace.gov.sg | In scope | 2026-11-14 |
| eds-test.apps.ace.gov.sgtest | In scope | 2026-11-14 |
| es.apps.ace.gov.sg | In scope | 2026-11-14 |
| gitlab.apps.ace.gov.sggit | In scope | 2026-11-14 |
| gitlab-registry.apps.ace.gov.sggit, tools | In scope | 2026-11-14 |
| io.apps.ace.gov.sg | In scope | 2026-11-14 |
| mcc-test-a.apps.ace.gov.sgtest | In scope | 2026-11-14 |
| mcc-test-b.apps.ace.gov.sgtest | In scope | 2026-11-14 |
| mlink.apps.ace.gov.sg | In scope | 2026-11-14 |
| mlink-a.apps.ace.gov.sg | In scope | 2026-11-14 |
| mlink-b.apps.ace.gov.sg | In scope | 2026-11-14 |
| morpheus.apps.ace.gov.sg | In scope | 2026-11-14 |
| ms.apps.ace.gov.sg | In scope | 2026-11-14 |
| om.apps.ace.gov.sg | In scope | 2026-11-14 |
| onboarding.apps.ace.gov.sg | In scope | 2026-11-14 |
| pages.apps.ace.gov.sg | In scope | 2026-11-14 |
| registry-gitlab.apps.ace.gov.sggit, tools | In scope | 2026-11-14 |
| rise-dev.apps.ace.gov.sgdev | In scope | 2026-11-14 |
| rise-sandbox.apps.ace.gov.sgtest | In scope | 2026-11-14 |
| safeguardian-dev.apps.ace.gov.sgdev | In scope | 2026-11-14 |
| scrmt.apps.ace.gov.sgNew | In scope | 2026-11-15 |
| scrmt-dev.apps.ace.gov.sgNewdev | In scope | 2026-11-15 |
| test-app-a.apps.ace.gov.sgtest | In scope | 2026-11-14 |
| test-app-b.apps.ace.gov.sgtest | In scope | 2026-11-14 |
| test-app-c.apps.ace.gov.sgtest | In scope | 2026-11-14 |
| xyz.apps.ace.gov.sg | In scope | 2026-11-14 |
| portal.ace.gov.sg | In scope | 2026-11-14 |
| recruit.ace.gov.sg | In scope | 2026-11-14 |
| spubj.ace.gov.sg | In scope | 2026-11-14 |
| acm.gov.sg | In scope | 2026-11-14 |
| adventureswithsolo.acm.gov.sg | In scope | 2026-11-14 |
| adventureswithsolo-stg.acm.gov.sgstaging | In scope | 2026-11-14 |
| agn.acm.gov.sg | In scope | 2026-11-14 |
| agn-stg.acm.gov.sgstaging | In scope | 2026-11-14 |
| galleon.acm.gov.sg | In scope | 2026-11-14 |
| galleon-stg.acm.gov.sgstaging | In scope | 2026-11-14 |
| ticketing.acm.gov.sg | In scope | 2026-11-14 |
| www.acm.gov.sg | In scope | 2026-11-14 |
| acra.gov.sg | In scope | 2026-11-14 |
| api.acra.gov.sgapi | In scope | 2026-11-14 |
| apimall.acra.gov.sg | In scope | 2026-11-14 |
| apimall-sandbox.acra.gov.sgtest | In scope | 2026-11-14 |
| www.apimall-sandbox.acra.gov.sgtest | In scope | 2026-11-14 |
| apimall-uat.acra.gov.sgtest | In scope | 2026-11-14 |
| www.apimall-uat.acra.gov.sgtest | In scope | 2026-11-14 |
| www.apimall.acra.gov.sg | In scope | 2026-11-14 |
| appiqs.acra.gov.sg | In scope | 2026-11-14 |
| asc.acra.gov.sg | In scope | 2026-11-14 |
| beta.acra.gov.sgstaging | In scope | 2026-11-14 |
| beta-asc.acra.gov.sgstaging | In scope | 2026-11-14 |
| bizfile-internet-api.acra.gov.sgapi | In scope | 2026-11-14 |
| www.bizfile-internet-api.acra.gov.sgapi | In scope | 2026-11-14 |
| bizfile-uat-internet-api.acra.gov.sgapi, test | In scope | 2026-11-14 |
| www.bizfile-uat-internet-api.acra.gov.sgapi, test | In scope | 2026-11-14 |
| chat-dev.acra.gov.sgdev | In scope | 2026-11-14 |
| chat-uat.acra.gov.sgtest | In scope | 2026-11-14 |
| clair.acra.gov.sg | In scope | 2026-11-14 |
| crms.acra.gov.sg | In scope | 2026-11-14 |
| crms-uat.acra.gov.sgtest | In scope | 2026-11-14 |
21,712 names are covered by the program's own scope; 16 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.