What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory row 143; Active program checkbox checked; Bounties minimum displayed $50. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
*.nflxext.com | WILDCARD | Bounty eligible: Yes |
api*.netflix.com | WILDCARD | Bounty eligible: Yes |
*.prod.ftl.netflix.com | WILDCARD | Bounty eligible: Yes |
*.prod.cloud.netflix.com | WILDCARD | Bounty eligible: Yes |
*.nflxvideo.net | WILDCARD | Bounty eligible: Yes |
*.prod.dradis.netflix.com | WILDCARD | Bounty eligible: Yes |
*.nflximg.net | WILDCARD | Bounty eligible: Yes |
*.nflxso.net | WILDCARD | Bounty eligible: Yes |
www.netflix.com | URL | Bounty eligible: Yes |
beacon.netflix.com | URL | Bounty eligible: Yes |
customerevents.netflix.com | URL | Bounty eligible: Yes |
secure.netflix.com | URL | Bounty eligible: Yes |
help.netflix.com | URL | Bounty eligible: Yes |
ichnaea.netflix.com | URL | Bounty eligible: Yes |
presentationtracking.netflix.com | URL | Bounty eligible: Yes |
nmtracking.netflix.com | URL | Bounty eligible: Yes |
meechum.netflix.com | URL | Bounty eligible: Yes |
Open Source - Atlas | SOURCE_CODE | Bounty eligible: Yes |
Corporate Assets | OTHER | Bounty eligible: Yes |
Open Source - Zuul | OTHER | Bounty eligible: Yes |
Microsites | OTHER | Bounty eligible: Yes |
Open Source - Spectator | OTHER | Bounty eligible: Yes |
Secondary Assets | OTHER | Bounty eligible: Yes |
Content Authorization Targets | OTHER | Bounty eligible: Yes |
Netflix Mobile Application for Android | GOOGLE_PLAY_APP_ID | Bounty eligible: Yes |
Netflix Mobile Application for iOS | APPLE_STORE_APP_ID | Bounty eligible: Yes |
Affiliates or entities such as recently acquired companies | OTHER | Bounty eligible: No |
Content authorization vulnerabilities affecting only the in-browser player | OTHER | Bounty eligible: No |
Low impact, individually exposed Google Docs with no common root cause (see “Publicly accessible Google Document or Drive Links” in the “Corporate Targets” section) | OTHER | Bounty eligible: No |
Netflix Gaming Target | OTHER | Bounty eligible: No |
| Asset | Type | Group / eligibility |
|---|---|---|
ir.netflix.com | URL | Bounty eligible: No |
ir.netflix.net | URL | Bounty eligible: No |
netflixinvestor.com | URL | Bounty eligible: No |
Open Source - Consoleme | OTHER | Bounty eligible: No |
Open Source - Weep | OTHER | Bounty eligible: No |
Open Source - Dispatch | OTHER | Bounty eligible: No |
Third party websites or systems hosted by non-Netflix entities Out of Scope | OTHER | Bounty eligible: No |
Set-top-boxes, smart TVs, streaming sticks Out of Scope | OTHER | Bounty eligible: No |
Assets associated with ReadyPlayerMe | OTHER | Bounty eligible: No |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.