Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
epicgames-vdp
100
In Scope
0
Out of Scope
In-Scope Assets (100)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.3lateral.com | OTHER | No | - | |
| *.amplitude-game.com | OTHER | No | - | |
| *.artstation.com | OTHER | No | - | |
| *.audicagame.com | OTHER | No | - | |
| *.bandcamp.com | OTHER | No | - | |
| *.bandcamp.com | WILDCARD | No | ||
| *.bcbits.com | WILDCARD | No | ||
| *.bcbits.com | OTHER | No | - | |
| *.corp.bandcamp.com | OTHER | No | - | |
| *.cubicmotion.com | OTHER | No | - | |
| *.dancecentral.com | OTHER | No | - | |
| *.dropmix.com | OTHER | No | - | |
| *.easy.ac | OTHER | No | - | |
| *.epicgames.com | OTHER | No | - | |
| *.epicgames.dev | OTHER | No | - | |
| *.epicgames.dev | WILDCARD | No | ||
| *.fallguys.com | OTHER | No | - | |
| *.fallguys.com | WILDCARD | No | ||
| *.fortnite.com | OTHER | No | - | |
| *.harmonixmusic.com | OTHER | No | - | |
| *.hmxservices.com | OTHER | No | - | |
| *.hmxwebservices.com | OTHER | No | - | |
| *.hostman.prod.adad.live.use1a.on.epicgames.com | OTHER | No | - | |
| *.jellychat.com | OTHER | No | - | |
| *.mediatonic.co.uk | OTHER | No | - | |
| *.oncatapult.com | OTHER | No | - | |
| *.popjam.com | OTHER | No | - | |
| *.psynet.gg | OTHER | No | - | |
| *.psyonix.com | OTHER | No | - | |
| *.quixel.com | OTHER | No | - | |
| *.rockbandvr.com | OTHER | No | - | |
| *.rocketleague.com | OTHER | No | - | |
| *.rukkaz.com | OTHER | No | - | |
| *.singspacegame.com | OTHER | No | - | |
| *.sketchfab.com | OTHER | No | - | |
| *.superawesome.com | OTHER | No | - | |
| *.superawesome.tv | OTHER | No | - | |
| *.superbeatsports.com | OTHER | No | - | |
| *.twinmotion.com | WILDCARD | No | ||
| *.unrealengine.com | OTHER | No | - | |
| *.unrealtournament.com | OTHER | No | - | |
| Adobe Flash related submissions | OTHER | No | - | |
| Any other Epic games owned asset not listed in the out of scope section | OTHER | No | - | |
| Artstation marketplace | OTHER | No | - | |
| Compass POST /compass/v1/namespace/fortnite/new_island_offer_report | OTHER | No | - | |
| Compass POST /compass/v1/namespace/fortnite/new_island_purchase_report | OTHER | No | - | |
| EOS C# SDK | BINARY | No | - | |
| EOS SDK | CODE | No | - | |
| Easy Anti-Cheat Bypasses | OTHER | No | - | |
| EpicGames/UnrealEngine_v5.2 | CODE | No | - | |
| EpicGamesLauncher.exe | BINARY | No | - | |
| EpicOnlineServices | OTHER | No | - | |
| Fallguys Game | BINARY | No | - | |
| Fortnite In-Island Transactions | OTHER | No | - | |
| Fortnite Mobile app | OTHER | No | - | |
| Fortnite cheats | OTHER | No | - | |
| FortniteClient-Android-Shipping-arm64-es2.apk | ANDROID | No | ||
| FortniteClient-Mac-Shipping.app | BINARY | No | - | |
| FortniteClient-Win64-Shipping.exe | BINARY | No | - | |
| FortniteClient-Win64-Shipping_BE.exe | BINARY | No | - | |
| FortniteClient-Win64-Shipping_EAC.exe | BINARY | No | - | |
| FortniteLauncher-Win64-Shipping.exe | BINARY | No | - | |
| FortniteLauncher-Win64-Shipping_BE.exe | BINARY | No | - | |
| FortniteLauncher-Win64-Shipping_EAC.exe | BINARY | No | - | |
| FortniteLauncher.exe | BINARY | No | - | |
| In-Island Transaction Offer Report Flow | OTHER | No | - | |
| In-Island purchase report form from account management | OTHER | No | - | |
| KWS | OTHER | No | - | |
| Miscellaneous Research | OTHER | No | - | |
| Other Fortnite Assets | OTHER | No | - | |
| Player Support Chatbot | AI | No | - | |
| Popjam Android application | OTHER | No | - | |
| Recent Acquisitions | OTHER | No | - | |
| Rukkaz Android application | OTHER | No | - | |
| Sketchfab Store (paid asset marketplace) | OTHER | No | - | |
| Sketchfab ripping" 3D model / mesh / texture / etc. content out of the 3D web viewer | OTHER | No | - | |
| Third-party games or apps distributed through the mobile stores | OTHER | No | - | |
| Third-party services not managed by Epicgames | OTHER | No | - | |
| Twinmotion | OTHER | No | - | |
| UEFN | BINARY | No | - | |
| UnrealEditorFortnite-Win64-Shipping.exe | BINARY | No | - | |
| UnrealEditorFortnite.exe | BINARY | No | - | |
| UnrealEngine | OTHER | No | - | |
| Verse Coding language | OTHER | No | - | |
| Web Shops | OTHER | No | - | |
| admin-dev.harmonixmusic.com | URL | No | ||
| admin.harmonixmusic.com | URL | No | ||
| answers.unrealengine.com | URL | No | ||
| api.epicgames.dev | URL | No | ||
| app.playwonderbox.com | IOS | No | - | |
| apple.co/-HorizonChase2 | IOS | No | - | |
| aqtooling.com | URL | No | ||
| aquiris.com.br | URL | No | ||
| aquiris.studio | URL | No | ||
| aquiristech.com | URL | No | ||
| artportal.epicgames.com | URL | No | ||
| audica-live-admin.hmxwebservices.com | URL | No | ||
| audica-prod-admin.hmxwebservices.com | URL | No | ||
| audica-prod-api.hmxwebservices.com | URL | No | ||
| autodiscover.harmonixmusic.com | URL | No |
Scope Changes (200)
Jun 10, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.quixel.com | OTHER | In Scope | 19:28 |
| Added | *.3lateral.com | OTHER | In Scope | 19:28 |
| Added | *.amplitude-game.com | OTHER | In Scope | 19:28 |
| Added | *.artstation.com | OTHER | In Scope | 19:28 |
| Added | *.audicagame.com | OTHER | In Scope | 19:28 |
| Added | *.bandcamp.com | OTHER | In Scope | 19:28 |
| Added | *.bandcamp.com | WILDCARD | In Scope | 19:28 |
| Added | *.bcbits.com | OTHER | In Scope | 19:28 |
| Added | *.bcbits.com | WILDCARD | In Scope | 19:28 |
| Added | *.corp.bandcamp.com | OTHER | In Scope | 19:28 |
| Added | *.cubicmotion.com | OTHER | In Scope | 19:28 |
| Added | *.dancecentral.com | OTHER | In Scope | 19:28 |
| Added | *.dropmix.com | OTHER | In Scope | 19:28 |
| Added | *.easy.ac | OTHER | In Scope | 19:28 |
| Added | *.epicgames.com | OTHER | In Scope | 19:28 |
| Added | *.epicgames.dev | WILDCARD | In Scope | 19:28 |
| Added | *.epicgames.dev | OTHER | In Scope | 19:28 |
| Added | *.fallguys.com | OTHER | In Scope | 19:28 |
| Added | *.fallguys.com | WILDCARD | In Scope | 19:28 |
| Added | *.fortnite.com | OTHER | In Scope | 19:28 |
| Added | *.harmonixmusic.com | OTHER | In Scope | 19:28 |
| Added | *.hmxservices.com | OTHER | In Scope | 19:28 |
| Added | *.hmxwebservices.com | OTHER | In Scope | 19:28 |
| Added | *.hostman.prod.adad.live.use1a.on.epicgames.com | OTHER | In Scope | 19:28 |
| Added | *.jellychat.com | OTHER | In Scope | 19:28 |
| Added | *.mediatonic.co.uk | OTHER | In Scope | 19:28 |
| Added | *.oncatapult.com | OTHER | In Scope | 19:28 |
| Added | *.popjam.com | OTHER | In Scope | 19:28 |
| Added | *.psynet.gg | OTHER | In Scope | 19:28 |
| Added | *.psyonix.com | OTHER | In Scope | 19:28 |
| Added | *.rockbandvr.com | OTHER | In Scope | 19:28 |
| Added | *.rocketleague.com | OTHER | In Scope | 19:28 |
| Added | *.rukkaz.com | OTHER | In Scope | 19:28 |
| Added | *.singspacegame.com | OTHER | In Scope | 19:28 |
| Added | *.sketchfab.com | OTHER | In Scope | 19:28 |
| Added | *.superawesome.com | OTHER | In Scope | 19:28 |
| Added | *.superawesome.tv | OTHER | In Scope | 19:28 |
| Added | *.superbeatsports.com | OTHER | In Scope | 19:28 |
| Added | *.twinmotion.com | WILDCARD | In Scope | 19:28 |
| Added | *.unrealengine.com | OTHER | In Scope | 19:28 |
| Added | *.unrealtournament.com | OTHER | In Scope | 19:28 |
| Added | adobe flash related submissions | OTHER | In Scope | 19:28 |
| Added | any other epic games owned asset not listed in the out of scope section | OTHER | In Scope | 19:28 |
| Added | artstation marketplace | OTHER | In Scope | 19:28 |
| Added | compass post /compass/v1/namespace/fortnite/new_island_offer_report | OTHER | In Scope | 19:28 |
| Added | compass post /compass/v1/namespace/fortnite/new_island_purchase_report | OTHER | In Scope | 19:28 |
| Added | eos c# sdk | BINARY | In Scope | 19:28 |
| Added | eos sdk | CODE | In Scope | 19:28 |
| Added | easy anti-cheat bypasses | OTHER | In Scope | 19:28 |
| Added | epicgames/unrealengine_v5.2 | CODE | In Scope | 19:28 |
| Added | epicgameslauncher.exe | BINARY | In Scope | 19:28 |
| Added | epiconlineservices | OTHER | In Scope | 19:28 |
| Added | fallguys game | BINARY | In Scope | 19:28 |
| Added | fortnite in-island transactions | OTHER | In Scope | 19:28 |
| Added | fortnite mobile app | OTHER | In Scope | 19:28 |
| Added | fortnite cheats | OTHER | In Scope | 19:28 |
| Added | fortniteclient-android-shipping-arm64-es2.apk | ANDROID | In Scope | 19:28 |
| Added | fortniteclient-mac-shipping.app | BINARY | In Scope | 19:28 |
| Added | fortniteclient-win64-shipping.exe | BINARY | In Scope | 19:28 |
| Added | fortniteclient-win64-shipping_be.exe | BINARY | In Scope | 19:28 |
| Added | fortniteclient-win64-shipping_eac.exe | BINARY | In Scope | 19:28 |
| Added | fortnitelauncher-win64-shipping.exe | BINARY | In Scope | 19:28 |
| Added | fortnitelauncher-win64-shipping_be.exe | BINARY | In Scope | 19:28 |
| Added | fortnitelauncher-win64-shipping_eac.exe | BINARY | In Scope | 19:28 |
| Added | fortnitelauncher.exe | BINARY | In Scope | 19:28 |
| Added | in-island transaction offer report flow | OTHER | In Scope | 19:28 |
| Added | in-island purchase report form from account management | OTHER | In Scope | 19:28 |
| Added | kws | OTHER | In Scope | 19:28 |
| Added | miscellaneous research | OTHER | In Scope | 19:28 |
| Added | other fortnite assets | OTHER | In Scope | 19:28 |
| Added | player support chatbot | AI | In Scope | 19:28 |
| Added | popjam android application | OTHER | In Scope | 19:28 |
| Added | recent acquisitions | OTHER | In Scope | 19:28 |
| Added | rukkaz android application | OTHER | In Scope | 19:28 |
| Added | sketchfab store (paid asset marketplace) | OTHER | In Scope | 19:28 |
| Added | sketchfab ripping" 3d model / mesh / texture / etc. content out of the 3d web viewer | OTHER | In Scope | 19:28 |
| Added | third-party games or apps distributed through the mobile stores | OTHER | In Scope | 19:28 |
| Added | third-party services not managed by epicgames | OTHER | In Scope | 19:28 |
| Added | twinmotion | OTHER | In Scope | 19:28 |
| Added | uefn | BINARY | In Scope | 19:28 |
| Added | unrealeditorfortnite-win64-shipping.exe | BINARY | In Scope | 19:28 |
| Added | unrealeditorfortnite.exe | BINARY | In Scope | 19:28 |
| Added | unrealengine | OTHER | In Scope | 19:28 |
| Added | verse coding language | OTHER | In Scope | 19:28 |
| Added | web shops | OTHER | In Scope | 19:28 |
| Added | admin-dev.harmonixmusic.com | URL | In Scope | 19:28 |
| Added | admin.harmonixmusic.com | URL | In Scope | 19:28 |
| Added | answers.unrealengine.com | URL | In Scope | 19:28 |
| Added | api.epicgames.dev | URL | In Scope | 19:28 |
| Added | app.playwonderbox.com | IOS | In Scope | 19:28 |
| Added | apple.co/-horizonchase2 | IOS | In Scope | 19:28 |
| Added | aqtooling.com | URL | In Scope | 19:28 |
| Added | aquiris.com.br | URL | In Scope | 19:28 |
| Added | aquiris.studio | URL | In Scope | 19:28 |
| Added | aquiristech.com | URL | In Scope | 19:28 |
| Added | artportal.epicgames.com | URL | In Scope | 19:28 |
| Added | audica-live-admin.hmxwebservices.com | URL | In Scope | 19:28 |
| Added | audica-prod-admin.hmxwebservices.com | URL | In Scope | 19:28 |
| Added | audica-prod-api.hmxwebservices.com | URL | In Scope | 19:28 |
| Added | autodiscover.harmonixmusic.com | URL | In Scope | 19:28 |
| Added | *.epicgames.dev | WILDCARD | In Scope | 19:28 |
| Added | *.harmonixmusic.com | WILDCARD | In Scope | 19:28 |
| Added | *.superawesome.tv | WILDCARD | In Scope | 19:28 |
| Added | artstation marketplace | OTHER | In Scope | 19:28 |
| Added | eos sdk | OTHER | In Scope | 19:28 |
| Added | in-island purchase report form from account management | OTHER | In Scope | 19:28 |
| Added | sketchfab store (paid asset marketplace) | OTHER | In Scope | 19:28 |
| Added | aquiris.com.br | URL | In Scope | 19:28 |
| Added | *.unrealtournament.com | WILDCARD | In Scope | 19:28 |
| Added | fortnite mobile app | IOS | In Scope | 19:28 |
| Added | fortniteclient-mac-shipping.app | BINARY | In Scope | 19:28 |
| Added | rukkaz android application | ANDROID | In Scope | 19:28 |
| Added | unrealeditorfortnite.exe | BINARY | In Scope | 19:28 |
| Added | audica-prod-api.hmxwebservices.com | URL | In Scope | 19:28 |
| Added | epicgameslauncher.exe | BINARY | In Scope | 19:28 |
| Added | *.audicagame.com | WILDCARD | In Scope | 19:28 |
| Added | in-island transaction offer report flow | OTHER | In Scope | 19:28 |
| Added | popjam android application | ANDROID | In Scope | 19:28 |
| Added | sketchfab ripping" 3d model / mesh / texture / etc. content out of the 3d web viewer | OTHER | In Scope | 19:28 |
| Added | uefn | OTHER | In Scope | 19:28 |
| Added | unrealeditorfortnite-win64-shipping.exe | BINARY | In Scope | 19:28 |
| Added | api.epicgames.dev | URL | In Scope | 19:28 |
| Added | *.epicgames.com | WILDCARD | In Scope | 19:28 |
| Added | *.rukkaz.com | WILDCARD | In Scope | 19:28 |
| Added | *.superawesome.com | WILDCARD | In Scope | 19:28 |
| Added | *.unrealengine.com | WILDCARD | In Scope | 19:28 |
| Added | third-party games or apps distributed through the mobile stores | OTHER | In Scope | 19:28 |
| Added | twinmotion | OTHER | In Scope | 19:28 |
| Added | unrealengine | OTHER | In Scope | 19:28 |
| Added | admin.harmonixmusic.com | URL | In Scope | 19:28 |
| Added | *.bcbits.com | WILDCARD | In Scope | 19:28 |
| Added | *.oncatapult.com | WILDCARD | In Scope | 19:28 |
| Added | adobe flash related submissions | OTHER | In Scope | 19:28 |
| Added | any other epic games owned asset not listed in the out of scope section | OTHER | In Scope | 19:28 |
| Added | fortnitelauncher-win64-shipping_be.exe | BINARY | In Scope | 19:28 |
| Added | aqtooling.com | URL | In Scope | 19:28 |
| Added | *.hmxwebservices.com | WILDCARD | In Scope | 19:28 |
| Added | *.psynet.gg | WILDCARD | In Scope | 19:28 |
| Added | *.rocketleague.com | WILDCARD | In Scope | 19:28 |
| Added | easy anti-cheat bypasses | OTHER | In Scope | 19:28 |
| Added | fortniteclient-android-shipping-arm64-es2.apk | ANDROID | In Scope | 19:28 |
| Added | verse coding language | OTHER | In Scope | 19:28 |
| Added | app.playwonderbox.com | ANDROID | In Scope | 19:28 |
| Added | apple.co/-horizonchase2 | IOS | In Scope | 19:28 |
| Added | *.quixel.com | WILDCARD | In Scope | 19:28 |
| Added | epiconlineservices | OTHER | In Scope | 19:28 |
| Added | fortniteclient-win64-shipping.exe | BINARY | In Scope | 19:28 |
| Added | fortnitelauncher-win64-shipping_eac.exe | BINARY | In Scope | 19:28 |
| Added | aquiris.studio | URL | In Scope | 19:28 |
| Added | *.artstation.com | WILDCARD | In Scope | 19:28 |
| Added | *.easy.ac | WILDCARD | In Scope | 19:28 |
| Added | *.epicgames.dev | WILDCARD | In Scope | 19:28 |
| Added | *.fortnite.com | WILDCARD | In Scope | 19:28 |
| Added | *.hostman.prod.adad.live.use1a.on.epicgames.com | WILDCARD | In Scope | 19:28 |
| Added | *.psyonix.com | WILDCARD | In Scope | 19:28 |
| Added | *.rockbandvr.com | WILDCARD | In Scope | 19:28 |
| Added | fortnite cheats | OTHER | In Scope | 19:28 |
| Added | player support chatbot | AI | In Scope | 19:28 |
| Added | answers.unrealengine.com | URL | In Scope | 19:28 |
| Added | artportal.epicgames.com | URL | In Scope | 19:28 |
| Added | audica-prod-admin.hmxwebservices.com | URL | In Scope | 19:28 |
| Added | *.bandcamp.com | WILDCARD | In Scope | 19:28 |
| Added | *.mediatonic.co.uk | WILDCARD | In Scope | 19:28 |
| Added | eos c# sdk | OTHER | In Scope | 19:28 |
| Added | *.bcbits.com | WILDCARD | In Scope | 19:28 |
| Added | *.cubicmotion.com | WILDCARD | In Scope | 19:28 |
| Added | *.fallguys.com | WILDCARD | In Scope | 19:28 |
| Added | *.singspacegame.com | WILDCARD | In Scope | 19:28 |
| Added | *.superbeatsports.com | WILDCARD | In Scope | 19:28 |
| Added | compass post /compass/v1/namespace/fortnite/new_island_offer_report | OTHER | In Scope | 19:28 |
| Added | compass post /compass/v1/namespace/fortnite/new_island_purchase_report | OTHER | In Scope | 19:28 |
| Added | *.amplitude-game.com | WILDCARD | In Scope | 19:28 |
| Added | *.dropmix.com | WILDCARD | In Scope | 19:28 |
| Added | miscellaneous research | OTHER | In Scope | 19:28 |
| Added | other fortnite assets | OTHER | In Scope | 19:28 |
| Added | *.dancecentral.com | WILDCARD | In Scope | 19:28 |
| Added | kws | OTHER | In Scope | 19:28 |
| Added | audica-live-admin.hmxwebservices.com | URL | In Scope | 19:28 |
| Added | *.3lateral.com | WILDCARD | In Scope | 19:28 |
| Added | *.bandcamp.com | WILDCARD | In Scope | 19:28 |
| Added | *.corp.bandcamp.com | WILDCARD | In Scope | 19:28 |
| Added | *.popjam.com | WILDCARD | In Scope | 19:28 |
| Added | fortniteclient-win64-shipping_eac.exe | BINARY | In Scope | 19:28 |
| Added | fortnitelauncher.exe | BINARY | In Scope | 19:28 |
| Added | web shops | OTHER | In Scope | 19:28 |
| Added | admin-dev.harmonixmusic.com | URL | In Scope | 19:28 |
| Added | *.fallguys.com | WILDCARD | In Scope | 19:28 |
| Added | epicgames/unrealengine_v5.2 | OTHER | In Scope | 19:28 |
| Added | fortniteclient-win64-shipping_be.exe | BINARY | In Scope | 19:28 |
| Added | recent acquisitions | OTHER | In Scope | 19:28 |
| Added | third-party services not managed by epicgames | OTHER | In Scope | 19:28 |
| Added | aquiristech.com | URL | In Scope | 19:28 |
| Added | *.hmxservices.com | WILDCARD | In Scope | 19:28 |
| Added | *.jellychat.com | WILDCARD | In Scope | 19:28 |
| Added | *.sketchfab.com | WILDCARD | In Scope | 19:28 |
| Added | *.twinmotion.com | WILDCARD | In Scope | 19:28 |
| Added | fallguys game | BINARY | In Scope | 19:28 |
| Added | fortnite in-island transactions | OTHER | In Scope | 19:28 |
| Added | fortnitelauncher-win64-shipping.exe | BINARY | In Scope | 19:28 |
| Added | autodiscover.harmonixmusic.com | URL | In Scope | 19:28 |