New in bug bounty scope: week 23, 2026
33 assets newly entered public bug-bounty scope in week 23 of 2026 (Jun 1 to Jun 7, 2026) on 9 programs: REA Group | realestate.com.au, realcommercial.com.au, property.com.au, KHealth, LaunchDarkly Managed Bug Bounty Engagement, Infomaniak Bug Bounty program and 5 more. Each asset was checked against its program's own scope history: 33 raw additions that week were assets put back after a removal and 5 were renames, so they are not listed. Only assets still in scope when this digest was published (2026-11-03) are shown. This is the weekly record: new programs and domains draw a rush within days, so for time-sensitive hunting use the feed or new_in_scope live.
New programs
LaunchDarkly Managed Bug Bounty Engagement
app.launchdarkly.com· url · since 2026-06-03docs.launchdarkly.com· url · since 2026-06-03events.launchdarkly.com· url · since 2026-06-03https://launchdarkly.com/docs· url · since 2026-06-03stream.launchdarkly.com· url · since 2026-06-031 scope item described in words
LaunchDarkly Open Source SDKs· other
DevAcrobats
1 listed on marketplace.atlassian.com
https://marketplace.atlassian.com/apps/1234873/user-activity-timeline-history-for-jira?hosting=cloud&tab=overview· url
Inprowiser Bug Bounty
1 listed on marketplace.atlassian.com
https://marketplace.atlassian.com/apps/1218151/capacity-tracker?hosting=cloud&tab=overview· url
Release Management (by Y2 ENGR)
7 listed on marketplace.atlassian.com
https://marketplace.atlassian.com/apps/1221946/release-management-roadmap-jira-cloud?hosting=cloud&tab=overview· urlhttps://marketplace.atlassian.com/apps/1222474/work-status-time-tracking-calendar-for-jira?tab=overview&hosting=cloud· urlhttps://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=cloud&tab=overview· urlhttps://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=datacenter&tab=overview· urlhttps://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=server&tab=overview· urlhttps://marketplace.atlassian.com/apps/1223877/advanced-agile-boards?hosting=cloud&tab=overview· urlhttps://marketplace.atlassian.com/apps/1228657/easy-peasy-roadmap-for-jira?hosting=cloud&tab=overview· url
New assets on existing programs
REA Group | realestate.com.au, realcommercial.com.au, property.com.au
*.demo.bp.mortgagechoice.com.au· url · since 2026-06-01*.mclead.com.au· api · since 2026-06-01*.mortgagechoice.com.au· url · since 2026-06-01*.smartline.com.au· url · since 2026-06-01https://agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e· api · since 2026-06-01https://www.developersites.com.au/testing-2505-houston/· url · since 2026-06-01https://www.developersites.com.au/testing-2505-lms/· url · since 2026-06-01scripts.developersites.com.au· url · since 2026-06-01sftp://ftp.developersites.com.au:45875· ip · since 2026-06-01
KHealth
*.csconnect.org· wildcard · max severity critical · since 2026-06-05*.mgbcareconnect.org· wildcard · max severity critical · since 2026-06-05*.northwellprimarycarenow.com· wildcard · max severity critical · since 2026-06-05*.novanthealthvirtualprimarycare.org· wildcard · max severity critical · since 2026-06-05*.pennmedicine.connect-visit.com· wildcard · max severity critical · since 2026-06-05*.primarycareondemand.mayoclinic.org· wildcard · max severity critical · since 2026-06-05
Infomaniak Bug Bounty program
hosting-ik.com· url · since 2026-06-02
Flutter UK&I
*.ppb.com· wildcard · max severity critical · since 2026-06-02
Shopify
1 scope item described in words
Authentication & ATO· other
← previous week · all weeks · next week →
An AI agent can get this live, with each host's fingerprinted stack and the published advisories for newly added code repositories, through the vulntel MCP server: new_in_scope(days=7). See the tools.