PentestingHere
Log in Join

Epic Games VDP

Epic Games VDP on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: No, this is a VDP
  • Swag: No
  • Managed by the platform: Yes
  • Average first response: 0 days
  • Average time to resolution: Not published

In scope

  • *.3lateral.com
  • *.amplitude-game.com
  • *.artstation.com
  • *.audicagame.com
  • *.bcbits.com
  • *.cubicmotion.com
  • *.dancecentral.com
  • *.dropmix.com
  • *.easy.ac
  • *.epicgames.com
  • *.epicgames.dev
  • *.fallguys.com
  • *.fortnite.com
  • *.harmonixmusic.com
  • *.hmxservices.com
  • *.hmxwebservices.com
  • *.hostman.prod.adad.live.use1a.on.epicgames.com
  • *.jellychat.com
  • *.mediatonic.co.uk
  • *.oncatapult.com
  • *.psynet.gg
  • *.psyonix.com
  • *.quixel.com
  • *.rockbandvr.com
  • *.rocketleague.com
  • *.singspacegame.com
  • *.sketchfab.com
  • *.superbeatsports.com
  • *.twinmotion.com
  • *.unrealengine.com
  • *.unrealtournament.com
  • Adobe Flash related submissions
  • Any other Epic games owned asset not listed in the out of scope section
  • Artstation marketplace
  • Compass POST ​/compass​/v1​/namespace​/fortnite​/new_island_offer_report
  • Compass POST ​/compass​/v1​/namespace​/fortnite​/new_island_purchase_report
  • EOS C# SDK
  • EOS SDK
  • Easy Anti-Cheat Bypasses
  • EpicGames/UnrealEngine_v5.2

48 more assets on the official page.

Out of scope

  • *.bandcamp.com
  • *.corp.bandcamp.com
  • *.popjam.com
  • *.rukkaz.com
  • *.superawesome.com
  • *.superawesome.tv
  • Popjam Android application
  • Rukkaz Android application

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback