vulns.co
/
GKData.io MCP

HackerOne · 4 min read

8x8

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 221; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 117 published rows
AssetTypeGroup / eligibility
*.chalet.8x8.comWILDCARDBounty eligible: Yes
vcc-*.8x8.comWILDCARDBounty eligible: Yes
https://*.chalet.8x8.com/ws/v1WILDCARDBounty eligible: Yes
http://*.packet8.netWILDCARDBounty eligible: Yes
*.8x8cloud.netWILDCARDBounty eligible: Yes
*.p8t.usWILDCARDBounty eligible: Yes
platform.8x8pilot.comURLBounty eligible: Yes
uc.8x8pilot.comURLBounty eligible: Yes
sso.8x8pilot.comURLBounty eligible: Yes
work-staging.8x8.comURLBounty eligible: Yes
user-profile-staging.8x8.comURLBounty eligible: Yes
sso.8x8.comURLBounty eligible: Yes
platform.8x8.comURLBounty eligible: Yes
work.8x8.comURLBounty eligible: Yes
user-profile.8x8.comURLBounty eligible: Yes
https://webrtc.8x8.com/URLBounty eligible: Yes
pay.8x8.comURLBounty eligible: Yes
admin.8x8.comURLBounty eligible: Yes
apps.8x8.comURLBounty eligible: Yes
Intellectual Property on Public DomainsOTHERBounty eligible: Yes
*.8x8.vcWILDCARDBounty eligible: No
*.jit.siWILDCARDBounty eligible: No
*.jitsi.netWILDCARDBounty eligible: No
*.8x8staging.comWILDCARDBounty eligible: No
*.8x8.idWILDCARDBounty eligible: No
*.wavecell.comWILDCARDBounty eligible: No
qm-*.8x8.comWILDCARDBounty eligible: No
*.thinkingphones.comWILDCARDBounty eligible: No
*.thinkingphones.netWILDCARDBounty eligible: No
analytics-*.8x8.comWILDCARDBounty eligible: No
*.8x8.comWILDCARDBounty eligible: No
*.8x8.co.ukWILDCARDBounty eligible: No
*.8x8.ukWILDCARDBounty eligible: No
*.8x8e2e.comWILDCARDBounty eligible: No
*.ucverse.comWILDCARDBounty eligible: No
*.prod.cloud.8x8.comWILDCARDBounty eligible: No
*.in2tel.ieWILDCARDBounty eligible: No
*.call-control.ieWILDCARDBounty eligible: No
*.8x8.cloudWILDCARDBounty eligible: No
*.8x8.engineeringWILDCARDBounty eligible: No
*.acceptance.cloud.8x8.comWILDCARDBounty eligible: No
*.ociadmin.cloud.8x8.comWILDCARDBounty eligible: No
*-vpn.8x8.comWILDCARDBounty eligible: No
*.labs.8x8.comWILDCARDBounty eligible: No
*.rekap.8x8.comWILDCARDBounty eligible: No
*.8x8pilot.comWILDCARDBounty eligible: No
*.cceng.8x8.comWILDCARDBounty eligible: No
*.staging.cloud.8x8.comWILDCARDBounty eligible: No
*.8x8testa.comWILDCARDBounty eligible: No
*.8x8testb.comWILDCARDBounty eligible: No
*.packet8-pilot.netWILDCARDBounty eligible: No
*.8x8hosts.internalWILDCARDBounty eligible: No
*.8x8hosts.pilotWILDCARDBounty eligible: No
*.unreal-agents.jitsi.netWILDCARDBounty eligible: No
*.unreal-agents.comWILDCARDBounty eligible: No
*.ai.8x8.vcWILDCARDBounty eligible: No
*.preview.8x8.vcWILDCARDBounty eligible: No
*.8x8.studioWILDCARDBounty eligible: No
*.fuze.siteWILDCARDBounty eligible: No
*.fuze.comWILDCARDBounty eligible: No
*.mavenlab.comWILDCARDBounty eligible: No
*.moobidesk.comWILDCARDBounty eligible: No
*.moobicast.comWILDCARDBounty eligible: No
connect.8x8.comURLBounty eligible: No
voapi.8x8.comURLBounty eligible: No
https://8x8.vc/xmpp-websocketURLBounty eligible: No
cloud8.8x8.comURLBounty eligible: No
api.8x8.comURLBounty eligible: No
dashboard.qa.ai.8x8.comURLBounty eligible: No
vcc-ce.8x8.comURLBounty eligible: No
vap.8x8.comURLBounty eligible: No
callroute.comURLBounty eligible: No
callroute.ioURLBounty eligible: No
sipsynergy.co.ukURLBounty eligible: No
mcp.8x8.comURLBounty eligible: No
maestro.8x8.cloudURLBounty eligible: No
map.8x8.comURLBounty eligible: No
bridge.8x8.comURLBounty eligible: No
8x8.my.site.comURLBounty eligible: No
community.8x8.comURLBounty eligible: No
video-agent.8x8.comURLBounty eligible: No
developer.8x8.comURLBounty eligible: No
resolve.8x8.comURLBounty eligible: No
admin-resolve.8x8.comURLBounty eligible: No
pubtools.private.8x8cloud.netURLBounty eligible: No
support-portal.8x8.comURLBounty eligible: No
debug.8x8.comURLBounty eligible: No
converse.8x8.comURLBounty eligible: No
unreal-agents.8x8pilot.comURLBounty eligible: No
eg.htURLBounty eligible: No
www.fuzemeeting.comURLBounty eligible: No
fuze.meURLBounty eligible: No
https://github.com/jitsiSOURCE_CODEBounty eligible: No
Cloud MisconfigurationsOTHERBounty eligible: No
ASN: AS32308OTHERBounty eligible: No
ASN: AS44965OTHERBounty eligible: No
ASN: AS46680OTHERBounty eligible: No
ASN: AS49856OTHERBounty eligible: No
ASN: AS62306OTHERBounty eligible: No
ASN: AS62876OTHERBounty eligible: No
ASN: AS133144OTHERBounty eligible: No
ASN: AS198554OTHERBounty eligible: No
ASN: AS395362OTHERBounty eligible: No
ASN: AS398067OTHERBounty eligible: No
ASN: AS199687OTHERBounty eligible: No
ASN: AS206422OTHERBounty eligible: No
8x8 Partner PortalOTHERBounty eligible: No
Third Party ApplicationOTHERBounty eligible: No
Discovered Leaked CredentialsOTHERBounty eligible: No
https://www.npmjs.com/package/@8x8/pui-partner-commOTHERBounty eligible: No
ASN: AS14294OTHERBounty eligible: No
ASN: AS13896OTHERBounty eligible: No
ASN: AS10976OTHERBounty eligible: No
org.vom8x8.sipuaGOOGLE_PLAY_APP_IDBounty eligible: No
Virtual Office DesktopDOWNLOADABLE_EXECUTABLESBounty eligible: No
8x8-workAPPLE_STORE_APP_IDBounty eligible: No
8x8 Communication APIsAPIBounty eligible: No
Out of scope · 23 published rows
AssetTypeGroup / eligibility
http://*.callstats.ioWILDCARDBounty eligible: No
http://*.contactnow.8x8.comWILDCARDBounty eligible: No
http://*.sameroom.ioWILDCARDBounty eligible: No
http://*.jitsi.orgWILDCARDBounty eligible: No
*.msteams.8x8.comWILDCARDBounty eligible: No
*.bell.caWILDCARDBounty eligible: No
express.8x8.comURLBounty eligible: No
accountmanager.8x8.comURLBounty eligible: No
investors.8x8.comURLBounty eligible: No
vm.8x8.comURLBounty eligible: No
supersite.8x8.comURLBounty eligible: No
mobileidentity.8x8.comURLBounty eligible: No
www.8x8.comURLBounty eligible: No
www.wavecell.comURLBounty eligible: No
support.8x8.comURLBounty eligible: No
get8x8.comURLBounty eligible: No
feedback.wavecell.comURLBounty eligible: No
8x8.wavecell.comURLBounty eligible: No
com.spot8x8.spotGOOGLE_PLAY_APP_IDBounty eligible: No
org.jitsi.meetGOOGLE_PLAY_APP_IDBounty eligible: No
Jitsi Meet DesktopDOWNLOADABLE_EXECUTABLESBounty eligible: No
com.atlassian.JitsiMeet.iosAPPLE_STORE_APP_IDBounty eligible: No
8x8-meeting-roomsAPPLE_STORE_APP_IDBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software