vuln·telMCP serverToolsNew in scopeGuidesField notesGet a key

New in bug bounty scope: week 20, 2026

May 11 to May 17, 2026 · published 2026-11-03

31 assets newly entered public bug-bounty scope in week 20 of 2026 (May 11 to May 17, 2026) on 9 programs: PlayStation, SEEK, Opera Public Bug Bounty, Keeper Security Public Bounty Program and 5 more. Each asset was checked against its program's own scope history: 8 raw additions that week were assets put back after a removal and 1 were renames, so they are not listed. Only assets still in scope when this digest was published (2026-11-03) are shown. This is the weekly record: new programs and domains draw a rush within days, so for time-sensitive hunting use the feed or new_in_scope live.

New programs

Agilis LT Bug Bounty

Bugcrowd · up to $1,500 · 8 new assets

  • 8 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1218888/simple-custom-reports-charts-time-in-status-for-jira?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219429/status-progress-report-structure-jira-dashboard-gadget?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219487/simple-timesheet-worklog-dashboard-gadget-for-jira?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219703/time-tracking-estimation-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219761/individual-velocity-report-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219872/advanced-burndown-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/1230997/time-in-status-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/3747688267/simple-gantt-roadmap-timeline-dashboard-gadget-for-jira?hosting=cloud&tab=overview · other

Elements

Bugcrowd · up to $1,500 · 8 new assets

  • 8 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1211111/elements-copy-sync-jira-issue-sync?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/1212486/elements-spreadsheet-for-confluence?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/1225519/elements-publish-to-confluence-create-pages-from-jira?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/1226102/elements-publish-to-confluence-jira-helper-app?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/1229459/elements-overview-custom-display-for-related-issues?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/1232142/elements-connect-helper-app?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/1234289/elements-pulse-customer-experience-insights-for-jsm?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/23337/elements-connect-external-data-fields?hosting=cloud · other

New assets on existing programs

PlayStation

HackerOne · 5 new assets · 20 publicly disclosed reports, most often: Use After Free (3), Missing Authorization (2), Privilege Escalation (2)

  • compete.playstation.com · url · max severity critical · since 2026-05-15
  • profile.playstation.com · url · max severity critical · since 2026-05-15
  • session-share.playstation.com · url · max severity critical · since 2026-05-15
  • web.np.playstation.com · url · max severity critical · since 2026-05-15
  • www.playstation.com · url · max severity critical · since 2026-05-15

SEEK

Bugcrowd · up to $10,000 · 4 new assets

  • https://*.employer.seek.com · url · since 2026-05-14
  • https://*.jobsdb.com · url · since 2026-05-14
  • https://*.jobstreet.com · url · since 2026-05-14
  • https://*.myseek.xyz · url · since 2026-05-14

Opera Public Bug Bounty

Bugcrowd · up to $5,000 · 2 new assets

  • https://www.opera.com/computer/thanks?ni=opera_air&os=windows · other · since 2026-05-11
  • https://www.operaneon.com · other · since 2026-05-11

Keeper Security Public Bounty Program

Bugcrowd · up to $10,000 · 1 new asset

  • https://www.keepersecurity.com/download.html?t=db · other · since 2026-05-17

Faraday, Inc.

HackerOne · 1 new asset

  • row.pro · url · max severity critical · since 2026-05-13

Visa

HackerOne · 1 new asset

  • releasor.payworks.com/ · url · max severity critical · since 2026-05-14

OpenAI

Bugcrowd · up to $30,000 · 1 new asset

  • 1 scope item described in words
    • Codex Desktop · other

← previous week · all weeks · next week →

An AI agent can get this live, with each host's fingerprinted stack and the published advisories for newly added code repositories, through the vulntel MCP server: new_in_scope(days=7). See the tools.