vulns.co
/
GKData.io MCP

HackerOne · 5 min read

Epic Games

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 287; Active program checkbox checked; Bounties minimum displayed $200. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 85 published rows
AssetTypeGroup / eligibility
*.epicgames.devWILDCARDBounty eligible: Yes
*.twinmotion.comWILDCARDBounty eligible: Yes
dev.epicgames.com/*WILDCARDBounty eligible: Yes
*.rocketleague.comURLBounty eligible: Yes
*.psynet.ggURLBounty eligible: Yes
*.unrealtournament.comURLBounty eligible: Yes
*.epicgames.comURLBounty eligible: Yes
*.unrealengine.comURLBounty eligible: Yes
*.fortnite.comURLBounty eligible: Yes
*.epicgames.devURLBounty eligible: Yes
metahuman.unrealengine.comURLBounty eligible: Yes
twinmotion.unrealengine.comURLBounty eligible: Yes
*.psyonix.comURLBounty eligible: Yes
*.3lateral.comURLBounty eligible: Yes
*.cubicmotion.comURLBounty eligible: Yes
*.oncatapult.comURLBounty eligible: Yes
*.mediatonic.co.ukURLBounty eligible: Yes
*.artstation.comURLBounty eligible: Yes
*.easy.acURLBounty eligible: Yes
*.sketchfab.comURLBounty eligible: Yes
*.quixel.comURLBounty eligible: Yes
*.amplitude-game.comURLBounty eligible: Yes
*.audicagame.comURLBounty eligible: Yes
*.dancecentral.comURLBounty eligible: Yes
*.dropmix.comURLBounty eligible: Yes
*.singspacegame.comURLBounty eligible: Yes
*.harmonixmusic.comURLBounty eligible: Yes
*.hmxservices.comURLBounty eligible: Yes
*.hmxwebservices.comURLBounty eligible: Yes
fortnite.comURLBounty eligible: Yes
hmxservices.comURLBounty eligible: Yes
harmonixmusic.comURLBounty eligible: Yes
aqtooling.comURLBounty eligible: Yes
aquiristech.comURLBounty eligible: Yes
buckingfuggy.comURLBounty eligible: Yes
hc2services.comURLBounty eligible: Yes
hc2tooling.comURLBounty eligible: Yes
wonderboxapi.comURLBounty eligible: Yes
wonderboxdev.comURLBounty eligible: Yes
capturingreality.comURLBounty eligible: Yes
fab.comURLBounty eligible: Yes
innersloth.kidswebservices.comURLBounty eligible: Yes
kidswebservices.comURLBounty eligible: Yes
niantic.kidswebservices.comURLBounty eligible: Yes
staging.kidswebservices.comURLBounty eligible: Yes
competitive.fortnite.comURLBounty eligible: Yes
create.fortnite.comURLBounty eligible: Yes
content-service.bfda.live.use1a.on.epicgames.comURLBounty eligible: Yes
content-service-live-testing.bfda.live.use1a.on.epicgames.comURLBounty eligible: Yes
http://urc-uefn.live.ucs.on.epicgames.comURLBounty eligible: Yes
http://nexus.live.ucs.on.epicgames.com/URLBounty eligible: Yes
http://urc-auth-uefn.live.ucs.on.epicgames.com/URLBounty eligible: Yes
https://fngw-svc-gc-livefn.ol.epicgames.net/api/magpieURLBounty eligible: Yes
https://fngw-svc-ds-livefn.ol.epicgames.net/api/magpieURLBounty eligible: Yes
https://fn-commerce-live.eeef.live.use1a.on.epicgames.com/api/fn-commerce/URLBounty eligible: Yes
cosmo.fdeb.live.use1a.on.epicgames.comURLBounty eligible: Yes
https://communities.epicgames.comURLBounty eligible: Yes
*.fallguys.comURLBounty eligible: Yes
aquiris.com.brURLBounty eligible: Yes
aquiris.studioURLBounty eligible: Yes
ballistic.comURLBounty eligible: Yes
ballistic.com.brURLBounty eligible: Yes
horizonchase.com.brURLBounty eligible: Yes
horizonchase.comURLBounty eligible: Yes
horizonchaseturbo.comURLBounty eligible: Yes
playwonderbox.com.brURLBounty eligible: Yes
playwonderbox.comURLBounty eligible: Yes
FortniteClient-Android-Shipping-arm64-es2.apkOTHER_APKBounty eligible: Yes
Any other Epic games owned asset not listed in the out of scope sectionOTHERBounty eligible: Yes
EpicOnlineServicesOTHERBounty eligible: Yes
v1staging.kidswebservices.comOTHERBounty eligible: Yes
v1. kidswebservices.comOTHERBounty eligible: Yes
FortniteClient-Win64-Shipping.exeDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
FortniteLauncher-Win64-Shipping.exeDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
FortniteLauncher-Win64-Shipping_BE.exeDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
FortniteLauncher-Win64-Shipping_EAC.exeDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
FortniteLauncher.exeDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
EOS C# SDKDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
UnrealEditorFortnite-Win64-Shipping.exeDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
EpicGamesLauncher.exeDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
UEFNDOWNLOADABLE_EXECUTABLESBounty eligible: Yes
id1520720139APPLE_STORE_APP_IDBounty eligible: Yes
id1534920947APPLE_STORE_APP_IDBounty eligible: Yes
help.sketchfab.comURLBounty eligible: No
forum.sketchfab.comURLBounty eligible: No
Out of scope · 101 published rows
AssetTypeGroup / eligibility
*.bandcamp.comWILDCARDBounty eligible: No
*.bcbits.comWILDCARDBounty eligible: No
epicsupport.force.comURLBounty eligible: No
learn.unrealengine.comURLBounty eligible: No
docs.unrealengine.comURLBounty eligible: No
udn.unrealengine.comURLBounty eligible: No
watch.fortnite.comURLBounty eligible: No
merch.fortnite.comURLBounty eligible: No
eoshelp.epicgames.comURLBounty eligible: No
answers.unrealengine.comURLBounty eligible: No
communityportal.epicgames.comURLBounty eligible: No
marketplacehelp.epicgames.comURLBounty eligible: No
twinmotionhelp.epicgames.comURLBounty eligible: No
issues.unrealengine.comURLBounty eligible: No
damascushelp.epicgames.comURLBounty eligible: No
mithrilhelp.epicgames.comURLBounty eligible: No
stadiahelp.epicgames.comURLBounty eligible: No
artportal.epicgames.comURLBounty eligible: No
communities.unrealengine.comURLBounty eligible: No
login.epicgames.comURLBounty eligible: No
forums.unrealengine.comURLBounty eligible: No
webinars.unrealengine.comURLBounty eligible: No
skookum.chatURLBounty eligible: No
mediaspace.unrealengine.comURLBounty eligible: No
*.popjam.comURLBounty eligible: No
*.rukkaz.comURLBounty eligible: No
*.jellychat.comURLBounty eligible: No
http://superawesome.com/contact-us/URLBounty eligible: No
detroitlabs.epicgames.comURLBounty eligible: No
isitbandcampfriday.comURLBounty eligible: No
*.bcbits.comURLBounty eligible: No
*.superbeatsports.comURLBounty eligible: No
admin.harmonixmusic.comURLBounty eligible: No
support.harmonixmusic.comURLBounty eligible: No
admin-dev.harmonixmusic.comURLBounty eligible: No
web-admin.harmonixmusic.comURLBounty eligible: No
teamcity-external.harmonixmusic.comURLBounty eligible: No
tableau.harmonixmusic.comURLBounty eligible: No
mail.harmonixmusic.comURLBounty eligible: No
locustus.harmonixmusic.comURLBounty eligible: No
jira.harmonixmusic.comURLBounty eligible: No
confluence.harmonixmusic.comURLBounty eligible: No
autodiscover.harmonixmusic.comURLBounty eligible: No
swarm.harmonixmusic.comURLBounty eligible: No
songsdb.harmonixmusic.comURLBounty eligible: No
sompmgr-frontend.hmxservices.comURLBounty eligible: No
sompmgr.hmxservices.comURLBounty eligible: No
msoid.hmxservices.comURLBounty eligible: No
fuser-admin-live-external.hmxservices.comURLBounty eligible: No
fuser-admin-dev-external.hmxservices.comURLBounty eligible: No
teamcity.hmxservices.comURLBounty eligible: No
swarm-monitoring-node-01.hmxservices.comURLBounty eligible: No
mon.hmxservices.comURLBounty eligible: No
public-web-swarm-cluster.hmxservices.comURLBounty eligible: No
www-api.hmxservices.comURLBounty eligible: No
sompmgr-proxy-int.hmxservices.comURLBounty eligible: No
sompmgr-dev-proxy-azure.hmxservices.comURLBounty eligible: No
azure-int-proxy.hmxservices.comURLBounty eligible: No
sompmgr-proxy-int-dev.hmxservices.comURLBounty eligible: No
logstash-shipper-azure.hmxservices.comURLBounty eligible: No
rb4-admin.hmxservices.comURLBounty eligible: No
sompmgr-admin.hmxservices.comURLBounty eligible: No
sompmgr-proxy-ext.hmxservices.comURLBounty eligible: No
sompmgr-dev.hmxservices.comURLBounty eligible: No
sompmgr-int-dev.hmxservices.comURLBounty eligible: No
sompmgr-int.hmxservices.comURLBounty eligible: No
sompmgr-dev-proxy-aws.hmxservices.comURLBounty eligible: No
sompmgr-proxy-ext-dev.hmxservices.comURLBounty eligible: No
audica-live-admin.hmxwebservices.comURLBounty eligible: No
audica-prod-admin.hmxwebservices.comURLBounty eligible: No
audica-prod-api.hmxwebservices.comURLBounty eligible: No
dcvr-live-admin.hmxwebservices.comURLBounty eligible: No
dcvr-prod-admin.hmxwebservices.comURLBounty eligible: No
dropmix-dev-admin.hmxwebservices.comURLBounty eligible: No
dropmix-prod-admin.hmxwebservices.comURLBounty eligible: No
hype-dev-admin.hmxwebservices.comURLBounty eligible: No
rb4ca-prod-admin.hmxwebservices.comURLBounty eligible: No
rb4ca-staging-admin.hmxwebservices.comURLBounty eligible: No
docs.superawesome.tvURLBounty eligible: No
msoid.harmonixmusic.comURLBounty eligible: No
facebook.aquiris.com.brURLBounty eligible: No
senior.aquiris.com.brURLBounty eligible: No
vimeo.aquiris.com.brURLBounty eligible: No
looneytuneswom.comURLBounty eligible: No
support.capturingreality.comURLBounty eligible: No
news.capturingreality.comURLBounty eligible: No
epicswag.comURLBounty eligible: No
http://brand.epicgames.comURLBounty eligible: No
start.ggURLBounty eligible: No
unrealfest.unrealengine.comURLBounty eligible: No
https://github.com/EpicGames/UnrealTournamentSOURCE_CODEBounty eligible: No
Adobe Flash related submissionsOTHERBounty eligible: No
*.superawesome.tvOTHERBounty eligible: No
*.superawesome.comOTHERBounty eligible: No
Popjam Android applicationOTHERBounty eligible: No
Rukkaz Android applicationOTHERBounty eligible: No
*.bandcamp.comOTHERBounty eligible: No
maestro.ioOTHERBounty eligible: No
Recent AcquisitionsOTHERBounty eligible: No
FortniteClient-Mac-Shipping.appDOWNLOADABLE_EXECUTABLESBounty eligible: No
app.playwonderbox.comAPPLE_STORE_APP_IDBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software