Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
9 in-scope
*.rockstargames.comscope· criticalcircolocorecords.com/· mediumprod.ros.rockstargames.com· criticalrockstarnorth.com· mediumsocialclub.rockstargames.com· criticalstore.rockstargames.com· criticalsupport.rockstargames.com· criticalwww.rockstargames.com· criticalRockstar Games Launcher· criticalfirst indexed
91d ago · 9 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Rockstar Games.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/rockstargames",
"name": "Rockstar Games",
"handle": "rockstargames",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "Some subdomains excluded. See the rest of the scope table below.",
"max_severity": "critical",
"asset_identifier": "*.rockstargames.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "Rockstar Games Launcher",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "medium",
"asset_identifier": "circolocorecords.com/",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "prod.ros.rockstargames.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "medium",
"asset_identifier": "rockstarnorth.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "socialclub.rockstargames.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Please note that the checkout/payment process go through the Xsolla platform. If you believe you have found a vulnerability in the checkout/payment process, please confirm first whether the vulnerability is in the general Xsolla platform, or our specific implementation.",
"max_severity": "critical",
"asset_identifier": "store.rockstargames.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "Vulnerability reports for support.rockstargames.com may not be awarded bounties if it is discovered that the root vulnerability lies in Zendesk's code. Hackers are encouraged to submit such reports to [Zendesk's bug bounty program](https://hackerone.com/zendesk).",
"max_severity": "critical",
"asset_identifier": "support.rockstargames.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.rockstargames.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
],
"out_of_scope": [
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "anomotion.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "Any subdomain that does NOT contain its own valid content and instead redirects to 'rockstargames.com/?domain-check-failed', UNLESS you can demonstrate an impact to a valid domain or subdomain.",
"max_severity": "none",
"asset_identifier": "any-invalid-domains.rockstargames.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "This subdomain is ineligible for bounty at this time.",
"max_severity": "none",
"asset_identifier": "bomgar.rockstargames.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "We do not have direct control over this subdomain and will not be accepting submissions for it.",
"max_severity": "none",
"asset_identifier": "emailcontent.rockstargames.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "faspex.rockstargames.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "lifeinvader.com",
"eligible_for_bounty": false,
"integrity_requirement": "low",
"eligible_for_submission": false,
"availability_requirement": "low",
"confidentiality_requirement": "low"
}
]
},
"website": "http://www.rockstargames.com/",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 0,
"response_efficiency_percentage": 78,
"average_time_to_report_resolved": null,
"average_time_to_first_program_response": 10
}