elastic

HackerOneView on HackerOne
RawAI Enhanced
34
In Scope
39
Out of Scope
In-Scope Assets (34)
AssetCategoryBountyQuick Links
*.ela.stWILDCARDYes
*.elastic.coWILDCARDYes
*.elastic.devWILDCARDYes
*.elastic.wtfWILDCARDYes
*.elasticacademy.comWILDCARDYes
*.elasticaccelerationzone.coWILDCARDYes
*.elasticapm.coWILDCARDYes
*.elasticbeats.wtfWILDCARDYes
*.elasticcloud.wtfWILDCARDYes
*.elasticgov.comWILDCARDYes
*.elasticloud.wtfWILDCARDYes
*.elasticnet.coWILDCARDYes
*.elasticon.coWILDCARDYes
*.elasticon.comWILDCARDYes
*.elasticpartneracademy.comWILDCARDYes
*.elasticps.coWILDCARDYes
*.elasticsearch.comWILDCARDYes
*.elasticsearch.frWILDCARDYes
*.elasticsearch.jpWILDCARDYes
*.elasticsearch.orgWILDCARDYes
*.elasticsearch.wtfWILDCARDYes
*.elstc.coWILDCARDYes
*.eops.nlWILDCARDYes
*.estccdn.comWILDCARDYes
*.found.ioWILDCARDYes
*.insight.ioWILDCARDYes
*.kibana.wtfWILDCARDYes
*.logstash.netWILDCARDYes
*.logstash.wtfWILDCARDYes
*.prelert.comWILDCARDYes
*.theelasticast.comWILDCARDYes
Elastic credentialsOTHERYes-
Software Supply ChainOTHERYes-
Subdomain takeoverOTHERYes-
Out-of-Scope Assets (39)
AssetCategoryBounty
*.es.ioWILDCARDNo
*.jina.aiWILDCARDNo
*.kbndev.coWILDCARDNo
*.keephq.devWILDCARDNo
*.swiftype.comWILDCARDNo
BeatsBINARYNo
Beats - AuditbeatBINARYNo
Beats - FilebeatBINARYNo
Beats - HeartbeatBINARYNo
Beats - MetricbeatBINARYNo
Beats - OsquerybeatBINARYNo
Beats - PacketbeatBINARYNo
Beats - WinlogbeatBINARYNo
Elastic AgentBINARYNo
Elastic ClientsOTHERNo
Elastic Cloud Enterprise (ECE)BINARYNo
Elastic Cloud on Kubernetes (ECK)BINARYNo
Elastic DefendBINARYNo
Elastic Distributions of OpenTelemetry (EDOT)BINARYNo
Elastic Enterprise SearchBINARYNo
Elastic Maps ServerBINARYNo
Elastic Package RegistryOTHERNo
Elastic Synthetics MonitoringOTHERNo
ElasticsearchBINARYNo
Fleet ServerBINARYNo
KibanaBINARYNo
LogstashBINARYNo
Observability - APM AgentsBINARYNo
Observability - APM ServerBINARYNo
OtherOTHERNo
cloud.elastic.coURLNo
community.elastic.coURLNo
discuss.elastic.coURLNo
https://github.com/elastic/*/wikiWILDCARDNo
https://github.com/swiftype/*/wikiWILDCARDNo
learn.elastic.coURLNo
link.email.elastic.coURLNo
sendgrid.elastic.coURLNo
track.email.elastic.coURLNo
Scope Changes (355)
Sep 23, 2026
ChangeAssetCategoryScopeTime
RemovedotherOTHEROut of Scope13:04
Sep 21, 2026
ChangeAssetCategoryScopeTime
Removedbeats - osquerybeatBINARYOut of Scope17:05
Removedelastic distributions of opentelemetry (edot)BINARYOut of Scope17:05
Removedcloud.elastic.coURLOut of Scope17:05
Removed*.swiftype.comWILDCARDOut of Scope17:05
Removedelastic package registryOTHEROut of Scope17:05
Removedelastic synthetics monitoringOTHEROut of Scope17:05
Removedbeats - auditbeatBINARYOut of Scope17:05
Removedbeats - filebeatBINARYOut of Scope17:05
Removedbeats - heartbeatBINARYOut of Scope17:05
Removedbeats - metricbeatBINARYOut of Scope17:05
Removedbeats - packetbeatBINARYOut of Scope17:05
Removedbeats - winlogbeatBINARYOut of Scope17:05
Removedelastic agentBINARYOut of Scope17:05
Removedelastic cloud enterprise (ece)BINARYOut of Scope17:05
Removedelastic cloud on kubernetes (eck)BINARYOut of Scope17:05
Removedelastic enterprise searchBINARYOut of Scope17:05
Removedelastic maps serverBINARYOut of Scope17:05
RemovedelasticsearchBINARYOut of Scope17:05
RemovedlogstashBINARYOut of Scope17:05
Removedobservability - apm agentsBINARYOut of Scope17:05
Removedobservability - apm serverBINARYOut of Scope17:05
Removedfleet serverBINARYOut of Scope17:05
RemovedkibanaBINARYOut of Scope17:05
RemovedbeatsBINARYOut of Scope17:05
Removedelastic clientsOTHEROut of Scope17:05
Removedelastic defendBINARYOut of Scope17:05
RemovedkibanaBINARYIn Scope12:49
Removedcloud.elastic.coURLIn Scope12:49
Removed*.swiftype.comWILDCARDIn Scope12:49
Removedelastic package registryOTHERIn Scope12:49
Removedelastic synthetics monitoringOTHERIn Scope12:49
Removedbeats - auditbeatBINARYIn Scope12:49
Removedbeats - filebeatBINARYIn Scope12:49
Removedbeats - heartbeatBINARYIn Scope12:49
Removedbeats - metricbeatBINARYIn Scope12:49
Removedbeats - packetbeatBINARYIn Scope12:49
Removedbeats - winlogbeatBINARYIn Scope12:49
Removedelastic agentBINARYIn Scope12:49
Removedelastic cloud enterprise (ece)BINARYIn Scope12:49
Removedelastic cloud on kubernetes (eck)BINARYIn Scope12:49
Removedelastic enterprise searchBINARYIn Scope12:49
Removedelastic maps serverBINARYIn Scope12:49
RemovedelasticsearchBINARYIn Scope12:49
RemovedlogstashBINARYIn Scope12:49
Removedobservability - apm agentsBINARYIn Scope12:49
Removedobservability - apm serverBINARYIn Scope12:49
Removedfleet serverBINARYIn Scope12:49
RemovedbeatsBINARYIn Scope12:49
Removedelastic clientsOTHERIn Scope12:49
Removedelastic defendBINARYIn Scope12:49
Removedbeats - osquerybeatBINARYIn Scope12:49
Removedelastic distributions of opentelemetry (edot)BINARYIn Scope12:49
Jul 18, 2026
ChangeAssetCategoryScopeTime
Addedsubdomain takeoverOTHERIn Scope21:28
Addedsubdomain takeoverOTHERIn Scope21:28
May 25, 2026
ChangeAssetCategoryScopeTime
Removedelastic credentialsOTHERIn Scope16:26
Addedelastic credentialsOTHERIn Scope15:26
Addedelastic credentialsOTHERIn Scope15:26
Removedelastic.co credentialsOTHERIn Scope15:26
Apr 19, 2026
ChangeAssetCategoryScopeTime
Added*.jina.aiWILDCARDOut of Scope14:21
Added*.jina.aiWILDCARDOut of Scope14:21
Mar 1, 2026
ChangeAssetCategoryScopeTime
Removed*.es.ioWILDCARDOut of Scope20:45
Removed*.ip.es.ioWILDCARDOut of Scope20:45
Feb 25, 2026
ChangeAssetCategoryScopeTime
Added*.logstash.netWILDCARDIn Scope19:10
Addedbeats - filebeatURLIn Scope19:10
Addedbeats - filebeatURLIn Scope19:10
Addedelastic agentURLIn Scope19:10
Addedelastic agentURLIn Scope19:10
Addedelastic agentURLIn Scope19:10
Addedelastic maps serverURLIn Scope19:10
Addedsoftware supply chainOTHERIn Scope19:10
Addedsendgrid.elastic.coURLOut of Scope19:10
Added*.es.ioWILDCARDIn Scope19:10
Addedbeats - auditbeatURLIn Scope19:10
Addedbeats - auditbeatURLIn Scope19:10
Addedbeats - auditbeatURLIn Scope19:10
Addedbeats - winlogbeatURLIn Scope19:10
Addedbeats - winlogbeatURLIn Scope19:10
Addedobservability - apm serverURLIn Scope19:10
Addedobservability - apm serverURLIn Scope19:10
Addedobservability - apm serverURLIn Scope19:10
AddedbeatsURLIn Scope19:10
Addedcommunity.elastic.coURLOut of Scope19:10
Addedcloud.elastic.coURLIn Scope19:10
Added*.elastic.coWILDCARDIn Scope19:10
AddedotherOTHERIn Scope19:10
Added*.elasticaccelerationzone.coWILDCARDIn Scope19:10
Addedlearn.elastic.coURLOut of Scope19:10
Added*.elstc.coWILDCARDIn Scope19:10
Addedbeats - metricbeatURLIn Scope19:10
Addedbeats - metricbeatURLIn Scope19:10
Addedbeats - metricbeatURLIn Scope19:10
Added*.kbndev.coWILDCARDOut of Scope19:10
AddedlogstashURLIn Scope19:10
AddedlogstashURLIn Scope19:10
AddedlogstashURLIn Scope19:10
AddedkibanaURLIn Scope19:10
AddedkibanaURLIn Scope19:10
AddedkibanaURLIn Scope19:10
AddedkibanaURLIn Scope19:10
Added*.logstash.wtfWILDCARDIn Scope19:10
Added*.theelasticast.comWILDCARDIn Scope19:10
Addeddiscuss.elastic.coURLOut of Scope19:10
Added*.elasticnet.coWILDCARDIn Scope19:10
Addedfleet serverURLIn Scope19:10
Addedfleet serverURLIn Scope19:10
Added*.estccdn.comWILDCARDIn Scope19:10
Addedhttps://github.com/elastic/*/wikiWILDCARDOut of Scope19:10
Added*.elasticloud.wtfWILDCARDIn Scope19:10
Added*.elasticon.comWILDCARDIn Scope19:10
Added*.elasticpartneracademy.comWILDCARDIn Scope19:10
Added*.elasticps.coWILDCARDIn Scope19:10
Added*.prelert.comWILDCARDIn Scope19:10
Addedhttps://github.com/swiftype/*/wikiWILDCARDOut of Scope19:10
Added*.swiftype.comWILDCARDIn Scope19:10
Addedelastic package registryOTHERIn Scope19:10
Added*.elasticsearch.jpWILDCARDIn Scope19:10
Added*.ip.es.ioWILDCARDOut of Scope19:10
Added*.elasticsearch.frWILDCARDIn Scope19:10
AddedelasticsearchURLIn Scope19:10
AddedelasticsearchURLIn Scope19:10
AddedelasticsearchURLIn Scope19:10
AddedelasticsearchURLIn Scope19:10
Addedelastic defendOTHERIn Scope19:10
Added*.elastic.wtfWILDCARDIn Scope19:10
Added*.elasticbeats.wtfWILDCARDIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedobservability - apm agentsURLIn Scope19:10
Addedelastic distributions of opentelemetry (edot)OTHERIn Scope19:10
Added*.ela.stWILDCARDIn Scope19:10
Added*.elasticcloud.wtfWILDCARDIn Scope19:10
Addedlink.email.elastic.coURLOut of Scope19:10
Addedbeats - heartbeatURLIn Scope19:10
Addedbeats - heartbeatURLIn Scope19:10
Addedbeats - heartbeatURLIn Scope19:10
Addedelastic cloud on kubernetes (eck)URLIn Scope19:10
Addedbeats - osquerybeatOTHERIn Scope19:10
Added*.elasticacademy.comWILDCARDIn Scope19:10
Added*.insight.ioWILDCARDIn Scope19:10
Addedtrack.email.elastic.coURLOut of Scope19:10
Added*.eops.nlWILDCARDIn Scope19:10
Addedelastic cloud enterprise (ece)URLIn Scope19:10
Added*.elasticapm.coWILDCARDIn Scope19:10
Added*.elasticsearch.comWILDCARDIn Scope19:10
Added*.keephq.devWILDCARDOut of Scope19:10
AddedbeatsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Addedelastic clientsURLIn Scope19:10
Added*.elastic.devWILDCARDIn Scope19:10
Added*.elasticgov.comWILDCARDIn Scope19:10
Added*.elasticsearch.orgWILDCARDIn Scope19:10
Addedelastic.co credentialsOTHERIn Scope19:10
Addedelastic enterprise searchURLIn Scope19:10
Addedelastic enterprise searchURLIn Scope19:10
Addedelastic enterprise searchURLIn Scope19:10
Added*.elasticon.coWILDCARDIn Scope19:10
Added*.elasticsearch.wtfWILDCARDIn Scope19:10
Addedbeats - packetbeatURLIn Scope19:10
Addedbeats - packetbeatURLIn Scope19:10
Addedbeats - packetbeatURLIn Scope19:10
Added*.kibana.wtfWILDCARDIn Scope19:10
Added*.found.ioWILDCARDIn Scope19:10
Addedelastic synthetics monitoringOTHERIn Scope19:10
Addedbeats - filebeatURLIn Scope19:10
Feb 24, 2026
ChangeAssetCategoryScopeTime
Added*.elastic.wtfWILDCARDIn Scope16:16
Added*.elasticacademy.comWILDCARDIn Scope16:16
Added*.elasticaccelerationzone.coWILDCARDIn Scope16:16
Added*.elasticapm.coWILDCARDIn Scope16:16
Added*.elasticbeats.wtfWILDCARDIn Scope16:16
Added*.elasticcloud.wtfWILDCARDIn Scope16:16
Added*.elasticgov.comWILDCARDIn Scope16:16
Added*.elasticloud.wtfWILDCARDIn Scope16:16
Added*.elasticon.coWILDCARDIn Scope16:16
Added*.elasticon.comWILDCARDIn Scope16:16
Added*.elasticpartneracademy.comWILDCARDIn Scope16:16
Added*.elasticps.coWILDCARDIn Scope16:16
Added*.elasticsearch.comWILDCARDIn Scope16:16
Added*.elasticsearch.frWILDCARDIn Scope16:16
Added*.elasticsearch.jpWILDCARDIn Scope16:16
Added*.elasticsearch.orgWILDCARDIn Scope16:16
Added*.elasticsearch.wtfWILDCARDIn Scope16:16
Added*.es.ioWILDCARDIn Scope16:16
Added*.estccdn.comWILDCARDIn Scope16:16
Added*.insight.ioWILDCARDIn Scope16:16
Added*.kibana.wtfWILDCARDIn Scope16:16
Added*.logstash.netWILDCARDIn Scope16:16
Added*.logstash.wtfWILDCARDIn Scope16:16
Added*.prelert.comWILDCARDIn Scope16:16
Added*.theelasticast.comWILDCARDIn Scope16:16
Added*.ip.es.ioWILDCARDOut of Scope16:16
Removed*.elasticsearch.cnWILDCARDOut of Scope16:16
Added*.elasticon.coWILDCARDIn Scope16:16
Added*.elasticgov.comWILDCARDIn Scope16:16
Added*.elasticloud.wtfWILDCARDIn Scope16:16
Added*.elasticsearch.frWILDCARDIn Scope16:16
Added*.es.ioWILDCARDIn Scope16:16
Added*.elasticapm.coWILDCARDIn Scope16:16
Added*.estccdn.comWILDCARDIn Scope16:16
Added*.elasticcloud.wtfWILDCARDIn Scope16:16
Added*.elasticbeats.wtfWILDCARDIn Scope16:16
Added*.elasticsearch.comWILDCARDIn Scope16:16
Added*.elasticsearch.orgWILDCARDIn Scope16:16
Added*.elastic.wtfWILDCARDIn Scope16:16
Added*.elasticpartneracademy.comWILDCARDIn Scope16:16
Added*.elasticsearch.wtfWILDCARDIn Scope16:16
Added*.elasticacademy.comWILDCARDIn Scope16:16
Added*.elasticps.coWILDCARDIn Scope16:16
Added*.logstash.netWILDCARDIn Scope16:16
Added*.elasticon.comWILDCARDIn Scope16:16
Added*.theelasticast.comWILDCARDIn Scope16:16
Added*.ip.es.ioWILDCARDOut of Scope16:16
Added*.elasticaccelerationzone.coWILDCARDIn Scope16:16
Added*.elasticsearch.jpWILDCARDIn Scope16:16
Added*.kibana.wtfWILDCARDIn Scope16:16
Added*.logstash.wtfWILDCARDIn Scope16:16
Added*.prelert.comWILDCARDIn Scope16:16
Added*.insight.ioWILDCARDIn Scope16:16
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedobservability - apm agentsURLIn Scope00:41
AddedkibanaURLIn Scope00:41
AddedkibanaURLIn Scope00:41
AddedkibanaURLIn Scope00:41
AddedkibanaURLIn Scope00:41
Addedhttps://github.com/swiftype/*/wikiWILDCARDOut of Scope00:41
Addedbeats - packetbeatURLIn Scope00:41
Addedbeats - packetbeatURLIn Scope00:41
Addedbeats - packetbeatURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Addedelastic clientsURLIn Scope00:41
Added*.swiftype.comWILDCARDIn Scope00:41
Addedelastic defendBINARYIn Scope00:41
Addedhttps://github.com/elastic/*/wikiWILDCARDOut of Scope00:41
Addedsendgrid.elastic.coURLOut of Scope00:41
Addedcloud.elastic.coURLIn Scope00:41
Added*.elastic.coWILDCARDIn Scope00:41
Addedelastic.co credentialsOTHERIn Scope00:41
AddedlogstashURLIn Scope00:41
AddedlogstashURLIn Scope00:41
AddedlogstashURLIn Scope00:41
Addedobservability - apm serverURLIn Scope00:41
Addedobservability - apm serverURLIn Scope00:41
Addedobservability - apm serverURLIn Scope00:41
Addedfleet serverURLIn Scope00:41
Addedfleet serverURLIn Scope00:41
Addedbeats - winlogbeatURLIn Scope00:41
Addedbeats - winlogbeatURLIn Scope00:41
Addedsoftware supply chainOTHERIn Scope00:41
Added*.found.ioWILDCARDIn Scope00:41
AddedotherOTHERIn Scope00:41
Added*.elastic.devWILDCARDIn Scope00:41
Added*.elasticsearch.cnWILDCARDOut of Scope00:41
Addedlink.email.elastic.coURLOut of Scope00:41
Added*.keephq.devWILDCARDOut of Scope00:41
Addedbeats - metricbeatURLIn Scope00:41
Addedbeats - metricbeatURLIn Scope00:41
Addedbeats - metricbeatURLIn Scope00:41
Added*.ela.stWILDCARDIn Scope00:41
Added*.elasticnet.coWILDCARDIn Scope00:41
Added*.eops.nlWILDCARDIn Scope00:41
Addedbeats - filebeatURLIn Scope00:41
Addedbeats - filebeatURLIn Scope00:41
Addedbeats - filebeatURLIn Scope00:41
Addedelastic agentURLIn Scope00:41
Addedelastic agentURLIn Scope00:41
Addedelastic agentURLIn Scope00:41
Addedelastic cloud on kubernetes (eck)URLIn Scope00:41
AddedelasticsearchURLIn Scope00:41
AddedelasticsearchURLIn Scope00:41
AddedelasticsearchURLIn Scope00:41
AddedelasticsearchURLIn Scope00:41
Addedelastic package registryOTHERIn Scope00:41
Addedbeats - osquerybeatBINARYIn Scope00:41
Added*.elstc.coWILDCARDIn Scope00:41
Addedelastic enterprise searchURLIn Scope00:41
Addedelastic enterprise searchURLIn Scope00:41
Addedelastic enterprise searchURLIn Scope00:41
Addedelastic maps serverURLIn Scope00:41
AddedbeatsURLIn Scope00:41
AddedbeatsURLIn Scope00:41
Addedelastic distributions of opentelemetry (edot)BINARYIn Scope00:41
Addedlearn.elastic.coURLOut of Scope00:41
Addedtrack.email.elastic.coURLOut of Scope00:41
Addedcommunity.elastic.coURLOut of Scope00:41
Addedbeats - auditbeatURLIn Scope00:41
Addedbeats - auditbeatURLIn Scope00:41
Addedbeats - auditbeatURLIn Scope00:41
Addedbeats - heartbeatURLIn Scope00:41
Addedbeats - heartbeatURLIn Scope00:41
Addedbeats - heartbeatURLIn Scope00:41
Addedelastic cloud enterprise (ece)URLIn Scope00:41
Addeddiscuss.elastic.coURLOut of Scope00:41
Added*.kbndev.coWILDCARDOut of Scope00:41
Addedelastic synthetics monitoringOTHERIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Addedobservability - apm agentsURLIn Scope00:41
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedelastic synthetics monitoringOTHERIn Scope21:38
Removed*.elstc.coWILDCARDIn Scope21:38
Removed*.elasticnet.coWILDCARDIn Scope21:38
Removed*.eops.nlWILDCARDIn Scope21:38
Removedelastic.co credentialsOTHERIn Scope21:38
Removedbeats - auditbeatBINARYIn Scope21:38
Removedbeats - filebeatBINARYIn Scope21:38
Removedbeats - heartbeatBINARYIn Scope21:38
Removedbeats - metricbeatBINARYIn Scope21:38
Removedbeats - packetbeatBINARYIn Scope21:38
Removedbeats - winlogbeatBINARYIn Scope21:38
Removedelastic agentBINARYIn Scope21:38
Removedelastic cloud enterprise (ece)BINARYIn Scope21:38
Removedelastic cloud on kubernetes (eck)BINARYIn Scope21:38
Removedelastic enterprise searchBINARYIn Scope21:38
Removedelastic maps serverBINARYIn Scope21:38
RemovedelasticsearchBINARYIn Scope21:38
RemovedlogstashBINARYIn Scope21:38
Removedobservability - apm agentsBINARYIn Scope21:38
Removedobservability - apm serverBINARYIn Scope21:38
Removedfleet serverBINARYIn Scope21:38
RemovedkibanaBINARYIn Scope21:38
RemovedbeatsBINARYIn Scope21:38
Removedsoftware supply chainOTHERIn Scope21:38
Removedelastic clientsOTHERIn Scope21:38
Removedcloud.elastic.coURLIn Scope21:38
Removed*.elastic.coWILDCARDIn Scope21:38
Removed*.found.ioWILDCARDIn Scope21:38
Removed*.swiftype.comWILDCARDIn Scope21:38
RemovedotherOTHERIn Scope21:38
Removedelastic package registryOTHERIn Scope21:38
Removedelastic defendBINARYIn Scope21:38
Removedbeats - osquerybeatBINARYIn Scope21:38
Removedelastic distributions of opentelemetry (edot)BINARYIn Scope21:38
Removed*.elastic.devWILDCARDIn Scope21:38
Removed*.ela.stWILDCARDIn Scope21:38