bounty.index

Programs Scope lookupScope New

/to search

☰menu

// sync across devices

Watchlist
Compare

Platform

Asset type

Min reward

Program

Sort

bounty.index

The bug bounty market, live-indexed. Every public program across five platforms, filterable in one view.

☕buy me a coffee

Product

Programs
Compare
Watchlist
Scope lookup
New programs
RSS feed

Platforms

HackerOne
Bugcrowd
Intigriti
YesWeHack
federacyFederacy

Resources

How it works
Data source
Hacktivity
Writeups
disclose.io

data · arkadiyt/bounty-targets-data·MIT licensed·updated daily

Elastic Bug Bounty Program on Hackerone

programs/HackerOne/elastic

Elastic

HackerOne·61 in-scope · 12 out·updated 1d ago

open program

bountymanagedopen

In scope

061

wildcards32

+*.ela.st· critical
+*.elastic.co· critical
+*.elastic.dev· critical

History

1 event

2026-08-06
first indexed
1d ago · 61 in-scope assets

// only one snapshot on record — changes appear from the next ingest onward

+*.elastic.wtf· critical

+*.elasticacademy.com· critical

+*.elasticaccelerationzone.co· critical

+*.elasticapm.co· critical

+*.elasticbeats.wtf· critical

+*.elasticcloud.wtf· critical

+*.elasticgov.com· critical

+*.elasticloud.wtf· critical

+*.elasticnet.co· critical

+*.elasticon.co· critical

+*.elasticon.com· critical

+*.elasticpartneracademy.com· critical

+*.elasticps.co· critical

+*.elasticsearch.com· critical

+*.elasticsearch.fr· critical

+*.elasticsearch.jp· critical

+*.elasticsearch.org· critical

+*.elasticsearch.wtf· critical

+*.elstc.co· critical

+*.eops.nl· critical

+*.estccdn.com· critical

+*.found.io· critical

+*.insight.io· critical

+*.kibana.wtf· critical

+*.logstash.net· critical

+*.logstash.wtf· critical

+*.prelert.com· critical

+*.swiftype.com· critical

+*.theelasticast.com· critical

urls01

+cloud.elastic.co· critical

other28

+Beats· critical
+Beats - Auditbeat· critical
+Beats - Filebeat· critical
+Beats - Heartbeat· critical
+Beats - Metricbeat· critical
+Beats - Osquerybeat· critical
+Beats - Packetbeat· critical
+Beats - Winlogbeat· critical
+Elastic Agent· critical
+Elastic Clients· critical
+Elastic Cloud Enterprise (ECE)· critical
+Elastic Cloud on Kubernetes (ECK)· critical
+Elastic Credentials· high
+Elastic Defend· critical
+Elastic Distributions of OpenTelemetry (EDOT)· critical
+Elastic Enterprise Search· critical
+Elastic Maps Server· critical
+Elastic Package Registry· critical
+Elastic Synthetics Monitoring· critical
+Elasticsearch· critical
+Fleet Server· critical
+Kibana· critical
+Logstash· critical
+Observability - APM Agents· critical
+Observability - APM Server· critical
+Other· critical
+Software Supply Chain· critical
+Subdomain takeover· low

Out of scope

012

wildcards06

−*.es.io
−*.jina.ai
−*.kbndev.co
−*.keephq.dev
−https://github.com/elastic/*/wiki
−https://github.com/swiftype/*/wiki

urls06

−learn.elastic.co
−link.email.elastic.co
−sendgrid.elastic.co
−track.email.elastic.co

−community.elastic.co

−discuss.elastic.co