Elastic
HackerOne live webBug bounty program on HackerOne. Official listing: https://hackerone.com/elastic. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$9K
Starts
2017-12-11
In-scope assets
33
Last updated
2026-06-16
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| web | *.ela.st | |
| web | *.elastic.co | |
| web | *.elastic.dev | |
| web | *.elastic.wtf | |
| web | *.elasticacademy.com | |
| web | *.elasticaccelerationzone.co | |
| web | *.elasticapm.co | |
| web | *.elasticbeats.wtf | |
| web | *.elasticcloud.wtf | |
| web | *.elasticgov.com | |
| web | *.elasticloud.wtf | |
| web | *.elasticnet.co | |
| web | *.elasticon.co | |
| web | *.elasticon.com | |
| web | *.elasticpartneracademy.com | |
| web | *.elasticps.co | |
| web | *.elasticsearch.com | |
| web | *.elasticsearch.fr | |
| web | *.elasticsearch.jp | |
| web | *.elasticsearch.org | |
| web | *.elasticsearch.wtf | |
| web | *.elstc.co | |
| web | *.eops.nl | |
| web | *.estccdn.com | |
| web | *.found.io | |
| web | *.insight.io | |
| web | *.kibana.wtf | |
| web | *.logstash.net | |
| web | *.logstash.wtf | |
| web | *.prelert.com | |
| web | *.swiftype.com | |
| web | *.theelasticast.com | |
| web | cloud.elastic.co |
Watching Elastic? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program