Epic Games

Epic Games

Top 1K site
Bounty Swag

Program Details

Handle
epicgames
Managed
Yes

Response Metrics

Response Time
29 days
Bounty Time
269 days
Response Efficiency
78%

Scope (85 targets)

web: 69 mobile: 2 other: 14

Bounty splitting: Yes

In Scope

  • *.3lateral.com web bounty-eligible
  • *.amplitude-game.com web bounty-eligible
  • *.artstation.com web bounty-eligible
  • *.audicagame.com web bounty-eligible
  • *.cubicmotion.com web bounty-eligible
  • *.dancecentral.com web bounty-eligible
  • *.dropmix.com web bounty-eligible
  • *.easy.ac web bounty-eligible
  • *.epicgames.com web bounty-eligible
  • *.epicgames.dev web bounty-eligible
  • *.epicgames.dev web bounty-eligible
  • *.fallguys.com web bounty-eligible
  • *.fortnite.com web bounty-eligible
  • *.harmonixmusic.com web bounty-eligible
  • *.hmxservices.com web bounty-eligible
  • *.hmxwebservices.com web bounty-eligible
  • *.mediatonic.co.uk web bounty-eligible
  • *.oncatapult.com web bounty-eligible
  • *.psynet.gg web bounty-eligible
  • *.psyonix.com web bounty-eligible
  • and 65 more targets

Out of Scope

*.bandcamp.com, *.bandcamp.com, *.bcbits.com, *.bcbits.com, *.jellychat.com, *.popjam.com, *.rukkaz.com, *.superawesome.com, *.superawesome.tv, *.superbeatsports.com, Adobe Flash related submissions, FortniteClient-Mac-Shipping.app, Popjam Android application, Recent Acquisitions, Rukkaz Android application, admin-dev.harmonixmusic.com, admin.harmonixmusic.com, answers.unrealengine.com, app.playwonderbox.com, artportal.epicgames.com, audica-live-admin.hmxwebservices.com, audica-prod-admin.hmxwebservices.com, audica-prod-api.hmxwebservices.com, autodiscover.harmonixmusic.com, azure-int-proxy.hmxservices.com, communities.unrealengine.com, communityportal.epicgames.com, confluence.harmonixmusic.com, damascushelp.epicgames.com, dcvr-live-admin.hmxwebservices.com, dcvr-prod-admin.hmxwebservices.com, detroitlabs.epicgames.com, docs.superawesome.tv, docs.unrealengine.com, dropmix-dev-admin.hmxwebservices.com, dropmix-prod-admin.hmxwebservices.com, eoshelp.epicgames.com, epicsupport.force.com, epicswag.com, facebook.aquiris.com.br, forums.unrealengine.com, fuser-admin-dev-external.hmxservices.com, fuser-admin-live-external.hmxservices.com, http://brand.epicgames.com, http://superawesome.com/contact-us/, https://github.com/EpicGames/UnrealTournament, hype-dev-admin.hmxwebservices.com, isitbandcampfriday.com, issues.unrealengine.com, jira.harmonixmusic.com, learn.unrealengine.com, locustus.harmonixmusic.com, login.epicgames.com, logstash-shipper-azure.hmxservices.com, looneytuneswom.com, maestro.io, mail.harmonixmusic.com, marketplacehelp.epicgames.com, mediaspace.unrealengine.com, merch.fortnite.com, mithrilhelp.epicgames.com, mon.hmxservices.com, msoid.harmonixmusic.com, msoid.hmxservices.com, news.capturingreality.com, public-web-swarm-cluster.hmxservices.com, rb4-admin.hmxservices.com, rb4ca-prod-admin.hmxwebservices.com, rb4ca-staging-admin.hmxwebservices.com, senior.aquiris.com.br, skookum.chat, sompmgr-admin.hmxservices.com, sompmgr-dev-proxy-aws.hmxservices.com, sompmgr-dev-proxy-azure.hmxservices.com, sompmgr-dev.hmxservices.com, sompmgr-frontend.hmxservices.com, sompmgr-int-dev.hmxservices.com, sompmgr-int.hmxservices.com, sompmgr-proxy-ext-dev.hmxservices.com, sompmgr-proxy-ext.hmxservices.com, sompmgr-proxy-int-dev.hmxservices.com, sompmgr-proxy-int.hmxservices.com, sompmgr.hmxservices.com, songsdb.harmonixmusic.com, stadiahelp.epicgames.com, start.gg, support.capturingreality.com, support.harmonixmusic.com, swarm-monitoring-node-01.hmxservices.com, swarm.harmonixmusic.com, tableau.harmonixmusic.com, teamcity-external.harmonixmusic.com, teamcity.hmxservices.com, twinmotionhelp.epicgames.com, udn.unrealengine.com, unrealfest.unrealengine.com, vimeo.aquiris.com.br, watch.fortnite.com, web-admin.harmonixmusic.com, webinars.unrealengine.com, www-api.hmxservices.com

security.txt expired

Contact
mailto:[email protected]
Policy
https://hackerone.com/epicgames
Acknowledgments
https://hackerone.com/epicgames/thanks
Languages
en
Expires
Jan 10, 2026
View raw security.txt →