vuln·telMCP serverToolsNew in scopeGuidesField notesGet a key

New in bug bounty scope: week 34, 2026

Aug 17 to Aug 23, 2026 · published 2026-11-03

100 assets newly entered public bug-bounty scope in week 34 of 2026 (Aug 17 to Aug 23, 2026) on 14 programs: X / xAI, Crypto.com, OST Consulting SRL Marketplace Managed Bug Bounty Engagement, VFS Global Bug Bounty Program and 10 more. Each asset was checked against its program's own scope history: 35 raw additions that week were assets put back after a removal and 8 were renames, so they are not listed. Only assets still in scope when this digest was published (2026-11-03) are shown. This is the weekly record: new programs and domains draw a rush within days, so for time-sensitive hunting use the feed or new_in_scope live.

New programs

OST Consulting SRL Marketplace Managed Bug Bounty Engagement

Bugcrowd · up to $1,500 · 4 new assets

  • https://atlassian.ost-consulting.be · api · since 2026-08-20
  • 3 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1230344/issue-templates-for-jira-cloud?hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1233398/easy-clone-for-jira-cloud-free?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1235901/html-macro-pro-for-confluence?hosting=cloud&tab=overview · url

Accxia Marketplace Bug Bounty

Bugcrowd · up to $1,500 · 2 new assets

  • 2 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1225449/intelligent-user-manager-ium-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1235944/intelligent-user-manager-ium-for-confluence-cloud?hosting=cloud&tab=overview · other

BrowserStack Inc. Marketplace Managed Bug Bounty Engagement

Bugcrowd · up to $1,500 · 4 new assets

  • 4 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=datacenter · url
    • https://marketplace.atlassian.com/apps/1230699/browserstack-test-management-webapp-integration-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1741353933/browserstack-test-management-for-jira?hosting=cloud&tab=overview · url

DevSamurai

Bugcrowd · up to $1,500 · 16 new assets

  • 16 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1221853/enterprise-social-networking-polls-votes-for-confluence?tab=overview&hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1222309/agile-user-story-mapping-board-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1223423/teamboard-resource-management-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1223793/confluence-whiteboard-process-workflow-visualization?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224087/whiteboard-process-workflow-visualization-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224383/agile-user-story-mapping-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224759/agile-scrum-planning-poker-for-jira?hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1224927/time-tracking-timesheet-cost-tracker-resource-management?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1225654/ui-wireframes-mockup-prototype-diagrams-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1226280/ui-wireframes-mockup-prototype-diagrams-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1228080/agile-roadmaps-timeline-product-discovery-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1228867/assetit-it-asset-management-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1230085/agile-test-management-ad-hoc-test-qa-checklist-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1232398/roadmaps-timeline-gantt-chart-structure-for-confluence?tab=overview&hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1236175/spreadsheet-structure-table-gantt-chart-on-forge-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/856555290/salesforge-crm-leads-deals-customers-management-for-jira?hosting=cloud&tab=overview · url

Litew8 GmbH - Marketplace Bug Bounty

Bugcrowd · up to $1,500 · 2 new assets

  • 2 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1230303/project-templates-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1235430/space-templates-for-confluence?tab=overview&hosting=cloud · url

Move Work Forward

Bugcrowd · up to $1,500 · 10 new assets

  • 10 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1216106/github-links-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1216325/microsoft-teams-jira-connector?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1216348/microsoft-teams-confluence-connector?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1217566/github-links-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1222079/microsoftteams-confluence-connector-lite?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1223149/azure-devops-confluence-connector?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1231122/azure-devops-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1233491/google-chat-for-jira?tab=overview&hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1236139/capybara-github-azure-devops-for-jira-service-management?hosting=cloud&tab=overview · url

RadBee Ltd.

Bugcrowd · up to $1,500 · 4 new assets

  • 4 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1222932/speedy-pdf-sign-offs-for-jira-cloud?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1225123/jira-snapshots-time-stamped-baselines-into-confluence?tab=overview&hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1228815?tab=overview&hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1229545/access-agent-for-jira-snapshots-for-confluence?tab=overview&hosting=cloud · url

Raley Apps

Bugcrowd · up to $1,500 · 1 new asset

  • 1 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1214045/raley-email-notifications-for-jira-jsm?hosting=cloud&tab=overview · url

Resolution

Bugcrowd · up to $1,500 · 47 new assets

  • 47 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1211109/user-management-and-license-optimizer-for-jira-confluence?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-saml-sso-bamboo?hosting=datacenter&tab=overview · url
    • https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-sso-bamboo?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1218305/out-of-office-assistant-for-jira-cloud?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1219932/language-translation-jira-service-desk?hosting=cloud · other
    • https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=datacenter&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221629/license-user-deactivator-for-bitbucket?hosting=datacenter&tab=overview · url
    • https://marketplace.atlassian.com/apps/1221629/user-deactivator-for-bitbucket?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1221738/user-sync-users-provisioning-sync-groups-sync-bamboo?hosting=datacenter&tab=overview · url
    • https://marketplace.atlassian.com/apps/1221738/users-sync-groups-sync-bamboo?hosting=server&tab=overview · other
    • https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=datacenter&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=server&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224142/monday-com-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224457/aws-load-balancer-authentication-cognito-compatible-jira?hosting=server · url
    • https://marketplace.atlassian.com/apps/1224457/aws-sso-alb-amazon-cognito-authentication-for-jira?hosting=datacenter&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224459/aws-alb-and-amazon-cognito-authentication-for-confluence?hosting=server · url
    • https://marketplace.atlassian.com/apps/1224459/aws-sso-alb-amazon-cognito-authentication-for-confluence?hosting=datacenter&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224678/monday-com-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1225346/hubspot-crm-for-confluence-hubspot-integration?hosting=cloud&tab=overview · other
    • https://marketplace.atlassian.com/apps/1226752/google-translation-automation-for-jira-issue-language?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1228240/hubspot-jira-crm-issue-link-integration-collaboration?hosting=cloud&tab=reviews · url
    • https://marketplace.atlassian.com/apps/1231965/structure-your-jira-scrum-nasa-not-another-standup-app?hosting=cloud&tab=overview · url

ToolsPlus

Bugcrowd · up to $1,500 · 1 new asset

  • 1 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1217371/intercom-for-jira?hosting=cloud · other

New assets on existing programs

X / xAI

HackerOne · 4 new assets · 250 publicly disclosed reports, most often: Cross-site Scripting (XSS) - Generic (34), Improper Authentication - Generic (31), Information Disclosure (23)

  • pscp.tv · url · max severity critical · since 2026-08-20
  • x.ai · url · max severity critical · since 2026-08-20
  • 1 named under *.x.com, already in scope
    • console.x.com · url
  • 1 scope item described in words
    • X Pixel Helper (Chrome Extension) · other

VFS Global Bug Bounty Program

YesWeHack · up to $ 1,500 · 1 new asset

  • https://www.visaforkorea-sl.com/ · url · since 2026-08-17

Monash University Bug Bounty

Bugcrowd · up to $7,500 · 2 new assets

  • 2 listed on apps.apple.com, play.google.com
    • https://apps.apple.com/ky/app/m-space/id6761056432 · mobile
    • https://play.google.com/store/apps/details?id=com.monashuniversity.mspace.android&pcampaignid=web_share · mobile

Crypto.com

HackerOne · 2 new assets

  • 2 named under *.crypto.com, already in scope
    • experiences.crypto.com · url
    • tickets.crypto.com · url

← previous week · all weeks · next week →

An AI agent can get this live, with each host's fingerprinted stack and the published advisories for newly added code repositories, through the vulntel MCP server: new_in_scope(days=7). See the tools.