csg-public

HackerOneView on HackerOne
RawAI Enhanced
17
In Scope
16
Out of Scope
In-Scope Assets (17)
AssetCategoryBountyQuick Links
*.citrixworkspacesapi.netURLYes
*developer.cloud.comURLNo
Citrix End Point Analysis (EPA) client for LinuxOTHERYes-
Citrix End Point Analysis (EPA) client for WindowsOTHERYes-
Citrix Secure Access client for AndroidANDROIDYes-
Citrix Secure Access client for LinuxOTHERYes-
Citrix Secure Access client for WindowsOTHERYes-
Citrix Secure Access client for iOSOTHERYes-
Citrix Secure Access client for macOSIOSYes-
accounts.cloud.comURLYes
adm.cloud.comURLYes
ap-s.cloud.comURLYes
api.adm.cloud.comURLYes
eu.cloud.comURLYes
onboarding-*.cloud.comURLYes
onboarding.cloud.comURLYes
us.cloud.comURLYes
Out-of-Scope Assets (16)
Scope Changes (83)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Added(yoursubdomain).us.iws.cloud.comURLOut of Scope19:13
Added*.citrix*.comWILDCARDOut of Scope19:13
Addedadm.cloud.comURLIn Scope19:13
Addedapi.adm.cloud.comURLIn Scope19:13
Added*.xmqa.cloud.comWILDCARDOut of Scope19:13
Addedonboarding.cloud.comURLIn Scope19:13
Addedcitrix secure access client for macosIOSIn Scope19:13
Addedcitrix secure access client for iosOTHERIn Scope19:13
Added*.xmtest.cloud.comWILDCARDOut of Scope19:13
Addedwww.cloud.comURLOut of Scope19:13
Added*.xmdev.cloud.comWILDCARDOut of Scope19:13
Added*.cloudburrito.comWILDCARDOut of Scope19:13
Added(yoursubdomain).eu.iws.cloud.comURLOut of Scope19:13
Added(youriwssubdomain).cloud.comURLOut of Scope19:13
Addedonboarding-*.cloud.comWILDCARDIn Scope19:13
Added*developer.cloud.comWILDCARDOut of Scope19:13
Added(yoursubdomain).ap.iws.cloud.comURLOut of Scope19:13
Added*.browser.cloud.comWILDCARDOut of Scope19:13
Addedlaunch.cloud.comURLOut of Scope19:13
Addedap-s.cloud.comURLIn Scope19:13
Addedeu.cloud.comURLIn Scope19:13
Addedcitrix secure access client for androidANDROIDIn Scope19:13
Addedcitrix secure access client for linuxOTHERIn Scope19:13
Addedcitrix end point analysis (epa) client for linuxOTHERIn Scope19:13
Addedcitrix.cloud.comURLOut of Scope19:13
Addedaccounts.cloud.comURLIn Scope19:13
Addedcitrix secure access client for windowsOTHERIn Scope19:13
Added*.securevdr.comWILDCARDOut of Scope19:13
Added*.podio.comWILDCARDOut of Scope19:13
Addedcitrix end point analysis (epa) client for windowsOTHERIn Scope19:13
Addedus.cloud.comURLIn Scope19:13
Added*.citrixworkspacesapi.netWILDCARDIn Scope19:13
Addedaccounts-internal.cloud.comURLOut of Scope19:13
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedadm.cloud.comURLIn Scope02:41
Addedap-s.cloud.comURLIn Scope02:41
Addedonboarding.cloud.comURLIn Scope02:41
Addedus.cloud.comURLIn Scope02:41
Addedeu.cloud.comURLIn Scope02:41
Addedaccounts.cloud.comURLIn Scope02:41
Addedapi.adm.cloud.comURLIn Scope02:41
Addedcitrix secure access client for linuxOTHERIn Scope01:12
Addedcitrix secure access client for windowsOTHERIn Scope01:12
Addedcitrix end point analysis (epa) client for windowsOTHERIn Scope01:12
Addedcitrix end point analysis (epa) client for linuxOTHERIn Scope01:12
Addedcitrix secure access client for iosIOSIn Scope00:59
Added*.citrix*.comWILDCARDOut of Scope00:43
Added*.cloudburrito.comWILDCARDOut of Scope00:43
Added(yoursubdomain).ap.iws.cloud.comWILDCARDOut of Scope00:43
Added*.xmqa.cloud.comWILDCARDOut of Scope00:43
Addedcitrix.cloud.comURLOut of Scope00:43
Added*.podio.comWILDCARDOut of Scope00:43
Added(yoursubdomain).us.iws.cloud.comWILDCARDOut of Scope00:43
Added*developer.cloud.comWILDCARDOut of Scope00:43
Addedcitrix secure access client for macosIOSIn Scope00:43
Added*.securevdr.comWILDCARDOut of Scope00:43
Added*.citrixworkspacesapi.netWILDCARDIn Scope00:43
Addedaccounts-internal.cloud.comURLOut of Scope00:43
Addedonboarding-*.cloud.comWILDCARDIn Scope00:43
Added(youriwssubdomain).cloud.comWILDCARDOut of Scope00:43
Addedwww.cloud.comURLOut of Scope00:43
Added*.browser.cloud.comWILDCARDOut of Scope00:43
Added*.xmtest.cloud.comWILDCARDOut of Scope00:43
Added*.xmdev.cloud.comWILDCARDOut of Scope00:43
Added(yoursubdomain).eu.iws.cloud.comWILDCARDOut of Scope00:43
Addedcitrix secure access client for androidANDROIDIn Scope00:43
Addedlaunch.cloud.comURLOut of Scope00:43
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedonboarding.cloud.comURLIn Scope21:38
Removedonboarding-*.cloud.comURLIn Scope21:38
Removedaccounts.cloud.comURLIn Scope21:38
Removedadm.cloud.comURLIn Scope21:38
Removedapi.adm.cloud.comURLIn Scope21:38
Removedcitrix secure access client for windowsOTHERIn Scope21:38
Removedap-s.cloud.comURLIn Scope21:38
Removedcitrix secure access client for iosOTHERIn Scope21:38
Removedcitrix secure access client for androidANDROIDIn Scope21:38
Removedcitrix secure access client for linuxOTHERIn Scope21:38
Removedcitrix end point analysis (epa) client for linuxOTHERIn Scope21:38
Removedcitrix end point analysis (epa) client for windowsOTHERIn Scope21:38
Removedcitrix secure access client for macosIOSIn Scope21:38
Removedeu.cloud.comURLIn Scope21:38
Removedus.cloud.comURLIn Scope21:38
Removed*.citrixworkspacesapi.netURLIn Scope21:38
Added*developer.cloud.comURLIn Scope19:12