BountyHunt
Log in Get started free

Epic Games

HackerOne live webgit_repo

Bug bounty program on HackerOne. Official listing: https://hackerone.com/epicgames. Scope and rules are controlled by the program — always verify against the official listing before testing.

Max bounty
$25K
Starts
2017-10-03
In-scope assets
68
Last updated
2026-06-16

In-scope assets

TypeAssetDetail
web *.3lateral.com
web *.amplitude-game.com
web *.artstation.com
web *.audicagame.com
web *.cubicmotion.com
web *.dancecentral.com
web *.dropmix.com
web *.easy.ac
web *.epicgames.com
web *.epicgames.dev
web *.fallguys.com
web *.fortnite.com
web *.harmonixmusic.com
web *.hmxservices.com
web *.hmxwebservices.com
web *.mediatonic.co.uk
web *.oncatapult.com
web *.psynet.gg
web *.psyonix.com
web *.quixel.com
web *.rocketleague.com
web *.singspacegame.com
web *.sketchfab.com
web *.twinmotion.com
web *.unrealengine.com
web *.unrealtournament.com
web aqtooling.com
web aquiris.com.br
web aquiris.studio
web aquiristech.com
web ballistic.com
web ballistic.com.br
web buckingfuggy.com
web capturingreality.com
web competitive.fortnite.com
web content-service-live-testing.bfda.live.use1a.on.epicgames.com
web content-service.bfda.live.use1a.on.epicgames.com
web cosmo.fdeb.live.use1a.on.epicgames.com
web create.fortnite.com
web dev.epicgames.com/*
web fab.com
web fortnite.com
web forum.sketchfab.com
web harmonixmusic.com
web hc2services.com
web hc2tooling.com
web help.sketchfab.com
web hmxservices.com
web horizonchase.com
web horizonchase.com.br
web horizonchaseturbo.com
web http://nexus.live.ucs.on.epicgames.com/
web http://urc-auth-uefn.live.ucs.on.epicgames.com/
web http://urc-uefn.live.ucs.on.epicgames.com
web https://communities.epicgames.com
web https://fn-commerce-live.eeef.live.use1a.on.epicgames.com/api/fn-commerce/
web https://fngw-svc-ds-livefn.ol.epicgames.net/api/magpie
web https://fngw-svc-gc-livefn.ol.epicgames.net/api/magpie
web innersloth.kidswebservices.com
web kidswebservices.com
web metahuman.unrealengine.com
web niantic.kidswebservices.com
web playwonderbox.com
web playwonderbox.com.br
web staging.kidswebservices.com
web twinmotion.unrealengine.com
web wonderboxapi.com
web wonderboxdev.com

Watching Epic Games? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.

Track this program