elastic

HackerOneView on HackerOne
RawAI Enhanced
60
In Scope
11
Out of Scope
In-Scope Assets (60)
AssetCategoryBountyQuick Links
*.ela.stWILDCARDYes
*.elastic.coWILDCARDYes
*.elastic.devWILDCARDYes
*.elastic.wtfWILDCARDYes
*.elasticacademy.comWILDCARDYes
*.elasticaccelerationzone.coWILDCARDYes
*.elasticapm.coWILDCARDYes
*.elasticbeats.wtfWILDCARDYes
*.elasticcloud.wtfWILDCARDYes
*.elasticgov.comWILDCARDYes
*.elasticloud.wtfWILDCARDYes
*.elasticnet.coWILDCARDYes
*.elasticon.coWILDCARDYes
*.elasticon.comWILDCARDYes
*.elasticpartneracademy.comWILDCARDYes
*.elasticps.coWILDCARDYes
*.elasticsearch.comWILDCARDYes
*.elasticsearch.frWILDCARDYes
*.elasticsearch.jpWILDCARDYes
*.elasticsearch.orgWILDCARDYes
*.elasticsearch.wtfWILDCARDYes
*.elstc.coWILDCARDYes
*.eops.nlWILDCARDYes
*.estccdn.comWILDCARDYes
*.found.ioWILDCARDYes
*.insight.ioWILDCARDYes
*.kibana.wtfWILDCARDYes
*.logstash.netWILDCARDYes
*.logstash.wtfWILDCARDYes
*.prelert.comWILDCARDYes
*.swiftype.comWILDCARDYes
*.theelasticast.comWILDCARDYes
BeatsBINARYYes-
Beats - AuditbeatBINARYYes-
Beats - FilebeatBINARYYes-
Beats - HeartbeatBINARYYes-
Beats - MetricbeatBINARYYes-
Beats - OsquerybeatBINARYYes-
Beats - PacketbeatBINARYYes-
Beats - WinlogbeatBINARYYes-
Elastic AgentBINARYYes-
Elastic ClientsOTHERYes-
Elastic Cloud Enterprise (ECE)BINARYYes-
Elastic Cloud on Kubernetes (ECK)BINARYYes-
Elastic DefendBINARYYes-
Elastic Distributions of OpenTelemetry (EDOT)BINARYYes-
Elastic Enterprise SearchBINARYYes-
Elastic Maps ServerBINARYYes-
Elastic Package RegistryOTHERYes-
Elastic Synthetics MonitoringOTHERYes-
ElasticsearchBINARYYes-
Fleet ServerBINARYYes-
KibanaBINARYYes-
LogstashBINARYYes-
Observability - APM AgentsBINARYYes-
Observability - APM ServerBINARYYes-
OtherOTHERYes-
Software Supply ChainOTHERYes-
cloud.elastic.coURLYes
elastic.co credentialsOTHERYes-
Out-of-Scope Assets (11)
AssetCategoryBounty
*.es.ioWILDCARDNo
*.kbndev.coWILDCARDNo
*.keephq.devWILDCARDNo
community.elastic.coURLNo
discuss.elastic.coURLNo
https://github.com/elastic/*/wikiWILDCARDNo
https://github.com/swiftype/*/wikiWILDCARDNo
learn.elastic.coURLNo
link.email.elastic.coURLNo
sendgrid.elastic.coURLNo
track.email.elastic.coURLNo
Scope Changes (294)
Mar 1, 2026
ChangeAssetCategoryScopeTime
Removed*.ip.es.ioWILDCARDOut of Scope20:45
Removed*.es.ioWILDCARDOut of Scope20:45
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedelastic maps serverURLIn Scope19:10
Addedsoftware supply chainOTHERIn Scope19:10
Addedsendgrid.elastic.coURLOut of Scope19:10
Added*.es.ioWILDCARDIn Scope19:10
Addedbeats - auditbeatURLIn Scope19:10
Addedbeats - auditbeatURLIn Scope19:10
Addedbeats - auditbeatURLIn Scope19:10
Addedbeats - winlogbeatURLIn Scope19:10
Addedbeats - winlogbeatURLIn Scope19:10
Addedobservability - apm serverURLIn Scope19:10
Addedobservability - apm serverURLIn Scope19:10
Addedobservability - apm serverURLIn Scope19:10
AddedbeatsURLIn Scope19:10
Addedcommunity.elastic.coURLOut of Scope19:10
Addedcloud.elastic.coURLIn Scope19:10
Added*.elastic.coWILDCARDIn Scope19:10
AddedotherOTHERIn Scope19:10
Added*.elasticaccelerationzone.coWILDCARDIn Scope19:10
Addedlearn.elastic.coURLOut of Scope19:10
Added*.elstc.coWILDCARDIn Scope19:10
Addedbeats - metricbeatURLIn Scope19:10
Addedbeats - metricbeatURLIn Scope19:10
Addedbeats - metricbeatURLIn Scope19:10
Added*.kbndev.coWILDCARDOut of Scope19:10
AddedlogstashURLIn Scope19:10
AddedlogstashURLIn Scope19:10
AddedlogstashURLIn Scope19:10
AddedkibanaURLIn Scope19:10
AddedkibanaURLIn Scope19:10
AddedkibanaURLIn Scope19:10
AddedkibanaURLIn Scope19:10
Added*.logstash.wtfWILDCARDIn Scope19:10
Added*.theelasticast.comWILDCARDIn Scope19:10
Addeddiscuss.elastic.coURLOut of Scope19:10
Added*.elasticnet.coWILDCARDIn Scope19:10
Addedfleet serverURLIn Scope19:10
Addedfleet serverURLIn Scope19:10
Added*.estccdn.comWILDCARDIn Scope19:10
Addedhttps://github.com/elastic/*/wikiWILDCARDOut of Scope19:10
Added*.elasticloud.wtfWILDCARDIn Scope19:10
Added*.elasticon.comWILDCARDIn Scope19:10
Added*.elasticpartneracademy.comWILDCARDIn Scope19:10
Added*.elasticps.coWILDCARDIn Scope19:10
Added*.prelert.comWILDCARDIn Scope19:10
Addedhttps://github.com/swiftype/*/wikiWILDCARDOut of Scope19:10
Added*.swiftype.comWILDCARDIn Scope19:10
Addedelastic package registryOTHERIn Scope19:10
Added*.elasticsearch.jpWILDCARDIn Scope19:10
Added*.logstash.netWILDCARDIn Scope19:10
Added*.ip.es.ioWILDCARDOut of Scope19:10
Added*.elasticsearch.frWILDCARDIn Scope19:10
AddedelasticsearchURLIn Scope19:10
AddedelasticsearchURLIn Scope19:10
AddedelasticsearchURLIn Scope19:10
AddedelasticsearchURLIn Scope19:10
Addedelastic defendOTHERIn Scope19:10
Added*.elastic.wtfWILDCARDIn Scope19:10
Added*.elasticbeats.wtfWILDCARDIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedelastic distributions of opentelemetry (edot)OTHERIn Scope19:10
Added*.ela.stWILDCARDIn Scope19:10
Added*.elasticcloud.wtfWILDCARDIn Scope19:10
Addedlink.email.elastic.coURLOut of Scope19:10
Addedbeats - heartbeatURLIn Scope19:10
Addedbeats - heartbeatURLIn Scope19:10
Addedbeats - heartbeatURLIn Scope19:10
Addedelastic cloud on kubernetes (eck)URLIn Scope19:10
Addedbeats - osquerybeatOTHERIn Scope19:10
Added*.elasticacademy.comWILDCARDIn Scope19:10
Added*.insight.ioWILDCARDIn Scope19:10
Addedtrack.email.elastic.coURLOut of Scope19:10
Added*.eops.nlWILDCARDIn Scope19:10
Addedelastic cloud enterprise (ece)URLIn Scope19:10
Added*.elasticapm.coWILDCARDIn Scope19:10
Added*.elasticsearch.comWILDCARDIn Scope19:10
Added*.keephq.devWILDCARDOut of Scope19:10
AddedbeatsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Added*.elastic.devWILDCARDIn Scope19:10
Added*.elasticgov.comWILDCARDIn Scope19:10
Added*.elasticsearch.orgWILDCARDIn Scope19:10
Addedelastic.co credentialsOTHERIn Scope19:10
Addedelastic enterprise searchURLIn Scope19:10
Addedelastic enterprise searchURLIn Scope19:10
Addedelastic enterprise searchURLIn Scope19:10
Added*.elasticon.coWILDCARDIn Scope19:10
Added*.elasticsearch.wtfWILDCARDIn Scope19:10
Addedbeats - packetbeatURLIn Scope19:10
Addedbeats - packetbeatURLIn Scope19:10
Addedbeats - packetbeatURLIn Scope19:10
Added*.kibana.wtfWILDCARDIn Scope19:10
Added*.found.ioWILDCARDIn Scope19:10
Addedelastic synthetics monitoringOTHERIn Scope19:10
Addedbeats - filebeatURLIn Scope19:10
Addedbeats - filebeatURLIn Scope19:10
Addedbeats - filebeatURLIn Scope19:10
Addedelastic agentURLIn Scope19:10
Addedelastic agentURLIn Scope19:10
Addedelastic agentURLIn Scope19:10
Feb 24, 2026
ChangeAssetCategoryScopeTime
Added*.elasticbeats.wtfWILDCARDIn Scope16:16
Added*.elastic.wtfWILDCARDIn Scope16:16
Added*.elasticacademy.comWILDCARDIn Scope16:16
Added*.elasticaccelerationzone.coWILDCARDIn Scope16:16
Added*.elasticapm.coWILDCARDIn Scope16:16
Added*.elasticbeats.wtfWILDCARDIn Scope16:16
Added*.elasticcloud.wtfWILDCARDIn Scope16:16
Added*.elasticgov.comWILDCARDIn Scope16:16
Added*.elasticloud.wtfWILDCARDIn Scope16:16
Added*.elasticon.coWILDCARDIn Scope16:16
Added*.elasticon.comWILDCARDIn Scope16:16
Added*.elasticpartneracademy.comWILDCARDIn Scope16:16
Added*.elasticps.coWILDCARDIn Scope16:16
Added*.elasticsearch.comWILDCARDIn Scope16:16
Added*.elasticsearch.frWILDCARDIn Scope16:16
Added*.elasticsearch.jpWILDCARDIn Scope16:16
Added*.elasticsearch.orgWILDCARDIn Scope16:16
Added*.elasticsearch.wtfWILDCARDIn Scope16:16
Added*.es.ioWILDCARDIn Scope16:16
Added*.estccdn.comWILDCARDIn Scope16:16
Added*.insight.ioWILDCARDIn Scope16:16
Added*.kibana.wtfWILDCARDIn Scope16:16
Added*.logstash.netWILDCARDIn Scope16:16
Added*.logstash.wtfWILDCARDIn Scope16:16
Added*.prelert.comWILDCARDIn Scope16:16
Added*.theelasticast.comWILDCARDIn Scope16:16
Added*.ip.es.ioWILDCARDOut of Scope16:16
Removed*.elasticsearch.cnWILDCARDOut of Scope16:16
Added*.elasticon.coWILDCARDIn Scope16:16
Added*.elasticgov.comWILDCARDIn Scope16:16
Added*.elasticloud.wtfWILDCARDIn Scope16:16
Added*.elasticsearch.frWILDCARDIn Scope16:16
Added*.es.ioWILDCARDIn Scope16:16
Added*.elasticapm.coWILDCARDIn Scope16:16
Added*.estccdn.comWILDCARDIn Scope16:16
Added*.elasticcloud.wtfWILDCARDIn Scope16:16
Added*.insight.ioWILDCARDIn Scope16:16
Added*.elasticsearch.comWILDCARDIn Scope16:16
Added*.elasticsearch.orgWILDCARDIn Scope16:16
Added*.elastic.wtfWILDCARDIn Scope16:16
Added*.elasticpartneracademy.comWILDCARDIn Scope16:16
Added*.elasticsearch.wtfWILDCARDIn Scope16:16
Added*.elasticacademy.comWILDCARDIn Scope16:16
Added*.elasticps.coWILDCARDIn Scope16:16
Added*.logstash.netWILDCARDIn Scope16:16
Added*.elasticon.comWILDCARDIn Scope16:16
Added*.theelasticast.comWILDCARDIn Scope16:16
Added*.ip.es.ioWILDCARDOut of Scope16:16
Added*.elasticaccelerationzone.coWILDCARDIn Scope16:16
Added*.elasticsearch.jpWILDCARDIn Scope16:16
Added*.kibana.wtfWILDCARDIn Scope16:16
Added*.logstash.wtfWILDCARDIn Scope16:16
Added*.prelert.comWILDCARDIn Scope16:16
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.kbndev.coWILDCARDOut of Scope00:41
Addedbeats - metricbeatURLIn Scope00:41
Added*.ela.stWILDCARDIn Scope00:41
Added*.elasticnet.coWILDCARDIn Scope00:41
Added*.eops.nlWILDCARDIn Scope00:41
Addedbeats - filebeatURLIn Scope00:41
Addedbeats - filebeatURLIn Scope00:41
Addedbeats - filebeatURLIn Scope00:41
Addedelastic agentURLIn Scope00:41
Addedelastic agentURLIn Scope00:41
Addedelastic agentURLIn Scope00:41
Addedelastic cloud on kubernetes (eck)URLIn Scope00:41
AddedelasticsearchURLIn Scope00:41
AddedelasticsearchURLIn Scope00:41
AddedelasticsearchURLIn Scope00:41
AddedelasticsearchURLIn Scope00:41
Addedelastic package registryOTHERIn Scope00:41
Addedbeats - osquerybeatBINARYIn Scope00:41
Added*.elstc.coWILDCARDIn Scope00:41
Addedelastic enterprise searchURLIn Scope00:41
Addedelastic enterprise searchURLIn Scope00:41
Addedelastic enterprise searchURLIn Scope00:41
Addedelastic maps serverURLIn Scope00:41
AddedbeatsURLIn Scope00:41
AddedbeatsURLIn Scope00:41
Addedelastic distributions of opentelemetry (edot)BINARYIn Scope00:41
Addedlearn.elastic.coURLOut of Scope00:41
Addedtrack.email.elastic.coURLOut of Scope00:41
Addedcommunity.elastic.coURLOut of Scope00:41
Addedbeats - auditbeatURLIn Scope00:41
Addedbeats - auditbeatURLIn Scope00:41
Addedbeats - auditbeatURLIn Scope00:41
Addedbeats - heartbeatURLIn Scope00:41
Addedbeats - heartbeatURLIn Scope00:41
Addedbeats - heartbeatURLIn Scope00:41
Addedelastic cloud enterprise (ece)URLIn Scope00:41
Addeddiscuss.elastic.coURLOut of Scope00:41
Addedelastic synthetics monitoringOTHERIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
AddedkibanaURLIn Scope00:41
AddedkibanaURLIn Scope00:41
AddedkibanaURLIn Scope00:41
AddedkibanaURLIn Scope00:41
Addedhttps://github.com/swiftype/*/wikiWILDCARDOut of Scope00:41
Addedbeats - packetbeatURLIn Scope00:41
Addedbeats - packetbeatURLIn Scope00:41
Addedbeats - packetbeatURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Added*.swiftype.comWILDCARDIn Scope00:41
Addedelastic defendBINARYIn Scope00:41
Addedhttps://github.com/elastic/*/wikiWILDCARDOut of Scope00:41
Addedsendgrid.elastic.coURLOut of Scope00:41
Addedcloud.elastic.coURLIn Scope00:41
Added*.elastic.coWILDCARDIn Scope00:41
Addedelastic.co credentialsOTHERIn Scope00:41
AddedlogstashURLIn Scope00:41
AddedlogstashURLIn Scope00:41
AddedlogstashURLIn Scope00:41
Addedobservability - apm serverURLIn Scope00:41
Addedobservability - apm serverURLIn Scope00:41
Addedobservability - apm serverURLIn Scope00:41
Addedfleet serverURLIn Scope00:41
Addedfleet serverURLIn Scope00:41
Addedbeats - winlogbeatURLIn Scope00:41
Addedbeats - winlogbeatURLIn Scope00:41
Addedsoftware supply chainOTHERIn Scope00:41
Added*.found.ioWILDCARDIn Scope00:41
AddedotherOTHERIn Scope00:41
Added*.elastic.devWILDCARDIn Scope00:41
Added*.elasticsearch.cnWILDCARDOut of Scope00:41
Addedlink.email.elastic.coURLOut of Scope00:41
Added*.keephq.devWILDCARDOut of Scope00:41
Addedbeats - metricbeatURLIn Scope00:41
Addedbeats - metricbeatURLIn Scope00:41
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removed*.elstc.coWILDCARDIn Scope21:38
Removed*.elasticnet.coWILDCARDIn Scope21:38
Removed*.eops.nlWILDCARDIn Scope21:38
Removedelastic.co credentialsOTHERIn Scope21:38
Removedbeats - auditbeatBINARYIn Scope21:38
Removedbeats - filebeatBINARYIn Scope21:38
Removedbeats - heartbeatBINARYIn Scope21:38
Removedbeats - metricbeatBINARYIn Scope21:38
Removedbeats - packetbeatBINARYIn Scope21:38
Removedbeats - winlogbeatBINARYIn Scope21:38
Removedelastic agentBINARYIn Scope21:38
Removedelastic cloud enterprise (ece)BINARYIn Scope21:38
Removedelastic cloud on kubernetes (eck)BINARYIn Scope21:38
Removedelastic enterprise searchBINARYIn Scope21:38
Removedelastic maps serverBINARYIn Scope21:38
RemovedelasticsearchBINARYIn Scope21:38
RemovedlogstashBINARYIn Scope21:38
Removedobservability - apm agentsBINARYIn Scope21:38
Removedobservability - apm serverBINARYIn Scope21:38
Removedfleet serverBINARYIn Scope21:38
RemovedkibanaBINARYIn Scope21:38
RemovedbeatsBINARYIn Scope21:38
Removedsoftware supply chainOTHERIn Scope21:38
Removedelastic clientsOTHERIn Scope21:38
Removedcloud.elastic.coURLIn Scope21:38
Removed*.elastic.coWILDCARDIn Scope21:38
Removed*.found.ioWILDCARDIn Scope21:38
Removed*.swiftype.comWILDCARDIn Scope21:38
RemovedotherOTHERIn Scope21:38
Removedelastic package registryOTHERIn Scope21:38
Removedelastic defendBINARYIn Scope21:38
Removedbeats - osquerybeatBINARYIn Scope21:38
Removedelastic distributions of opentelemetry (edot)BINARYIn Scope21:38
Removed*.elastic.devWILDCARDIn Scope21:38
Removed*.ela.stWILDCARDIn Scope21:38
Removedelastic synthetics monitoringOTHERIn Scope21:38