New in bug bounty scope
Every week, the assets that newly entered the scope of a public bug-bounty program on HackerOne, Bugcrowd, Intigriti or YesWeHack. What a program added this week has had the least time to be hunted. Raw scope changes are mostly not new: an asset put back after a removal, or a rename. Each one here was checked against its program's own scope history, so those are left out.
Last week: week 44, 2026
18 assets newly entered public bug-bounty scope in week 44 of 2026 (Oct 26 to Nov 1, 2026) on 10 programs: 1win, OpenAI, Moneytree KK, Majid Al Futtaim Lifestyle and 6 more.
| Program | Platform | Max bounty | New assets |
|---|---|---|---|
| 1win | HackerOne | 3 | |
| OpenAI | Bugcrowd | $30,000 | 1 |
| Moneytree KK | Bugcrowd | $5,000 | 1 |
| Majid Al Futtaim Lifestyle | Bugcrowd | $3,500 | 1 |
| Cloudflare Public Bug Bounty | HackerOne | 1 | |
| Ubiquiti Inc. | HackerOne | 1 | |
| Vercel | HackerOne | 1 | |
| Visa | HackerOne | 1 | |
| Thales Cyber Security Products Bug Bounty | Bugcrowd | $2,500 | 0 (+1 described) |
| StonikByte | Bugcrowd | $1,500 | 0 (+7 listed) |
This week so far (week 45): 73 new assets.
All weeks
- Week 45, 2026
- Week 44, 2026
- Week 43, 2026
- Week 42, 2026
- Week 41, 2026
- Week 40, 2026
- Week 39, 2026
- Week 38, 2026
- Week 37, 2026
- Week 36, 2026
- Week 35, 2026
- Week 34, 2026
- Week 33, 2026
- Week 32, 2026
- Week 31, 2026
- Week 30, 2026
- Week 29, 2026
- Week 28, 2026
- Week 27, 2026
- Week 26, 2026
- Week 25, 2026
- Week 24, 2026
- Week 23, 2026
- Week 22, 2026
- Week 21, 2026
- Week 20, 2026
- Week 19, 2026
- Week 18, 2026
- Week 17, 2026
- Week 16, 2026
- Week 15, 2026
- Week 14, 2026
- Week 13, 2026
- Week 12, 2026
- Week 11, 2026
- Week 10, 2026
- Week 9, 2026
- Week 8, 2026
- Week 7, 2026
- Week 6, 2026
- Week 5, 2026
- Week 4, 2026
- Week 3, 2026
- Week 2, 2026
- Week 1, 2026
Also as an RSS feed. An AI agent can query it live, with stacks and advisories, through the vulntel MCP server (new_in_scope).