vulns.co
/
GKData.io MCP

HackerOne · 3 min read

Elastic

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 291; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 34 published rows
AssetTypeGroup / eligibility
*.elastic.coWILDCARDBounty eligible: Yes
*.found.ioWILDCARDBounty eligible: Yes
*.elstc.coWILDCARDBounty eligible: Yes
*.elasticnet.coWILDCARDBounty eligible: Yes
*.eops.nlWILDCARDBounty eligible: Yes
*.elastic.devWILDCARDBounty eligible: Yes
*.ela.stWILDCARDBounty eligible: Yes
*.elastic.wtfWILDCARDBounty eligible: Yes
*.elasticacademy.comWILDCARDBounty eligible: Yes
*.elasticaccelerationzone.coWILDCARDBounty eligible: Yes
*.elasticapm.coWILDCARDBounty eligible: Yes
*.elasticbeats.wtfWILDCARDBounty eligible: Yes
*.elasticcloud.wtfWILDCARDBounty eligible: Yes
*.elasticgov.comWILDCARDBounty eligible: Yes
*.elasticloud.wtfWILDCARDBounty eligible: Yes
*.elasticon.coWILDCARDBounty eligible: Yes
*.elasticon.comWILDCARDBounty eligible: Yes
*.elasticpartneracademy.comWILDCARDBounty eligible: Yes
*.elasticps.coWILDCARDBounty eligible: Yes
*.elasticsearch.comWILDCARDBounty eligible: Yes
*.elasticsearch.frWILDCARDBounty eligible: Yes
*.elasticsearch.jpWILDCARDBounty eligible: Yes
*.elasticsearch.orgWILDCARDBounty eligible: Yes
*.elasticsearch.wtfWILDCARDBounty eligible: Yes
*.estccdn.comWILDCARDBounty eligible: Yes
*.insight.ioWILDCARDBounty eligible: Yes
*.kibana.wtfWILDCARDBounty eligible: Yes
*.logstash.netWILDCARDBounty eligible: Yes
*.logstash.wtfWILDCARDBounty eligible: Yes
*.prelert.comWILDCARDBounty eligible: Yes
*.theelasticast.comWILDCARDBounty eligible: Yes
Software Supply ChainOTHERBounty eligible: Yes
Elastic CredentialsOTHERBounty eligible: Yes
Subdomain takeoverOTHERBounty eligible: Yes
Out of scope · 39 published rows
AssetTypeGroup / eligibility
*.swiftype.comWILDCARDBounty eligible: No
https://github.com/elastic/*/wikiWILDCARDBounty eligible: No
https://github.com/swiftype/*/wikiWILDCARDBounty eligible: No
*.es.ioWILDCARDBounty eligible: No
*.jina.aiWILDCARDBounty eligible: No
*.keephq.devWILDCARDBounty eligible: No
*.kbndev.coWILDCARDBounty eligible: No
learn.elastic.coURLBounty eligible: No
link.email.elastic.coURLBounty eligible: No
track.email.elastic.coURLBounty eligible: No
sendgrid.elastic.coURLBounty eligible: No
cloud.elastic.coURLBounty eligible: No
community.elastic.coURLBounty eligible: No
discuss.elastic.coURLBounty eligible: No
OtherOTHERBounty eligible: No
Elastic Package RegistryOTHERBounty eligible: No
Elastic Synthetics MonitoringOTHERBounty eligible: No
Elastic ClientsOTHERBounty eligible: No
Beats - AuditbeatDOWNLOADABLE_EXECUTABLESBounty eligible: No
Beats - FilebeatDOWNLOADABLE_EXECUTABLESBounty eligible: No
Beats - HeartbeatDOWNLOADABLE_EXECUTABLESBounty eligible: No
Beats - MetricbeatDOWNLOADABLE_EXECUTABLESBounty eligible: No
Beats - PacketbeatDOWNLOADABLE_EXECUTABLESBounty eligible: No
Beats - WinlogbeatDOWNLOADABLE_EXECUTABLESBounty eligible: No
Elastic AgentDOWNLOADABLE_EXECUTABLESBounty eligible: No
Elastic Cloud Enterprise (ECE)DOWNLOADABLE_EXECUTABLESBounty eligible: No
Elastic Cloud on Kubernetes (ECK)DOWNLOADABLE_EXECUTABLESBounty eligible: No
Elastic Enterprise SearchDOWNLOADABLE_EXECUTABLESBounty eligible: No
Elastic Maps ServerDOWNLOADABLE_EXECUTABLESBounty eligible: No
ElasticsearchDOWNLOADABLE_EXECUTABLESBounty eligible: No
LogstashDOWNLOADABLE_EXECUTABLESBounty eligible: No
Observability - APM AgentsDOWNLOADABLE_EXECUTABLESBounty eligible: No
Observability - APM ServerDOWNLOADABLE_EXECUTABLESBounty eligible: No
Fleet ServerDOWNLOADABLE_EXECUTABLESBounty eligible: No
KibanaDOWNLOADABLE_EXECUTABLESBounty eligible: No
BeatsDOWNLOADABLE_EXECUTABLESBounty eligible: No
Elastic DefendDOWNLOADABLE_EXECUTABLESBounty eligible: No
Beats - OsquerybeatDOWNLOADABLE_EXECUTABLESBounty eligible: No
Elastic Distributions of OpenTelemetry (EDOT)DOWNLOADABLE_EXECUTABLESBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software