Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

epicgames-vdp

HackerOneView on HackerOne
RawAI Enhanced
100
In Scope
0
Out of Scope
In-Scope Assets (100)
AssetCategoryBountyQuick Links
*.3lateral.comOTHERNo-
*.amplitude-game.comOTHERNo-
*.artstation.comOTHERNo-
*.audicagame.comOTHERNo-
*.bandcamp.comOTHERNo-
*.bandcamp.comWILDCARDNo
*.bcbits.comWILDCARDNo
*.bcbits.comOTHERNo-
*.corp.bandcamp.comOTHERNo-
*.cubicmotion.comOTHERNo-
*.dancecentral.comOTHERNo-
*.dropmix.comOTHERNo-
*.easy.acOTHERNo-
*.epicgames.comOTHERNo-
*.epicgames.devOTHERNo-
*.epicgames.devWILDCARDNo
*.fallguys.comOTHERNo-
*.fallguys.comWILDCARDNo
*.fortnite.comOTHERNo-
*.harmonixmusic.comOTHERNo-
*.hmxservices.comOTHERNo-
*.hmxwebservices.comOTHERNo-
*.hostman.prod.adad.live.use1a.on.epicgames.comOTHERNo-
*.jellychat.comOTHERNo-
*.mediatonic.co.ukOTHERNo-
*.oncatapult.comOTHERNo-
*.popjam.comOTHERNo-
*.psynet.ggOTHERNo-
*.psyonix.comOTHERNo-
*.quixel.comOTHERNo-
*.rockbandvr.comOTHERNo-
*.rocketleague.comOTHERNo-
*.rukkaz.comOTHERNo-
*.singspacegame.comOTHERNo-
*.sketchfab.comOTHERNo-
*.superawesome.comOTHERNo-
*.superawesome.tvOTHERNo-
*.superbeatsports.comOTHERNo-
*.twinmotion.comWILDCARDNo
*.unrealengine.comOTHERNo-
*.unrealtournament.comOTHERNo-
Adobe Flash related submissionsOTHERNo-
Any other Epic games owned asset not listed in the out of scope sectionOTHERNo-
Artstation marketplaceOTHERNo-
Compass POST ​/compass​/v1​/namespace​/fortnite​/new_island_offer_report OTHERNo-
Compass POST ​/compass​/v1​/namespace​/fortnite​/new_island_purchase_reportOTHERNo-
EOS C# SDKBINARYNo-
EOS SDKCODENo-
Easy Anti-Cheat BypassesOTHERNo-
EpicGames/UnrealEngine_v5.2CODENo-
EpicGamesLauncher.exe BINARYNo-
EpicOnlineServicesOTHERNo-
Fallguys GameBINARYNo-
Fortnite In-Island TransactionsOTHERNo-
Fortnite Mobile appOTHERNo-
Fortnite cheatsOTHERNo-
FortniteClient-Android-Shipping-arm64-es2.apkANDROIDNo
FortniteClient-Mac-Shipping.appBINARYNo-
FortniteClient-Win64-Shipping.exeBINARYNo-
FortniteClient-Win64-Shipping_BE.exeBINARYNo-
FortniteClient-Win64-Shipping_EAC.exeBINARYNo-
FortniteLauncher-Win64-Shipping.exeBINARYNo-
FortniteLauncher-Win64-Shipping_BE.exeBINARYNo-
FortniteLauncher-Win64-Shipping_EAC.exeBINARYNo-
FortniteLauncher.exeBINARYNo-
In-Island Transaction Offer Report FlowOTHERNo-
In-Island purchase report form from account managementOTHERNo-
KWSOTHERNo-
Miscellaneous ResearchOTHERNo-
Other Fortnite AssetsOTHERNo-
Player Support ChatbotAINo-
Popjam Android applicationOTHERNo-
Recent AcquisitionsOTHERNo-
Rukkaz Android applicationOTHERNo-
Sketchfab Store (paid asset marketplace)OTHERNo-
Sketchfab ripping" 3D model / mesh / texture / etc. content out of the 3D web viewerOTHERNo-
Third-party games or apps distributed through the mobile storesOTHERNo-
Third-party services not managed by EpicgamesOTHERNo-
TwinmotionOTHERNo-
UEFNBINARYNo-
UnrealEditorFortnite-Win64-Shipping.exeBINARYNo-
UnrealEditorFortnite.exeBINARYNo-
UnrealEngineOTHERNo-
Verse Coding languageOTHERNo-
Web ShopsOTHERNo-
admin-dev.harmonixmusic.comURLNo
admin.harmonixmusic.comURLNo
answers.unrealengine.comURLNo
api.epicgames.devURLNo
app.playwonderbox.comIOSNo-
apple.co/-HorizonChase2IOSNo-
aqtooling.comURLNo
aquiris.com.brURLNo
aquiris.studioURLNo
aquiristech.comURLNo
artportal.epicgames.comURLNo
audica-live-admin.hmxwebservices.comURLNo
audica-prod-admin.hmxwebservices.comURLNo
audica-prod-api.hmxwebservices.comURLNo
autodiscover.harmonixmusic.comURLNo
Scope Changes (200)
Jun 10, 2026
ChangeAssetCategoryScopeTime
Added*.quixel.comOTHERIn Scope19:28
Added*.3lateral.comOTHERIn Scope19:28
Added*.amplitude-game.comOTHERIn Scope19:28
Added*.artstation.comOTHERIn Scope19:28
Added*.audicagame.comOTHERIn Scope19:28
Added*.bandcamp.comOTHERIn Scope19:28
Added*.bandcamp.comWILDCARDIn Scope19:28
Added*.bcbits.comOTHERIn Scope19:28
Added*.bcbits.comWILDCARDIn Scope19:28
Added*.corp.bandcamp.comOTHERIn Scope19:28
Added*.cubicmotion.comOTHERIn Scope19:28
Added*.dancecentral.comOTHERIn Scope19:28
Added*.dropmix.comOTHERIn Scope19:28
Added*.easy.acOTHERIn Scope19:28
Added*.epicgames.comOTHERIn Scope19:28
Added*.epicgames.devWILDCARDIn Scope19:28
Added*.epicgames.devOTHERIn Scope19:28
Added*.fallguys.comOTHERIn Scope19:28
Added*.fallguys.comWILDCARDIn Scope19:28
Added*.fortnite.comOTHERIn Scope19:28
Added*.harmonixmusic.comOTHERIn Scope19:28
Added*.hmxservices.comOTHERIn Scope19:28
Added*.hmxwebservices.comOTHERIn Scope19:28
Added*.hostman.prod.adad.live.use1a.on.epicgames.comOTHERIn Scope19:28
Added*.jellychat.comOTHERIn Scope19:28
Added*.mediatonic.co.ukOTHERIn Scope19:28
Added*.oncatapult.comOTHERIn Scope19:28
Added*.popjam.comOTHERIn Scope19:28
Added*.psynet.ggOTHERIn Scope19:28
Added*.psyonix.comOTHERIn Scope19:28
Added*.rockbandvr.comOTHERIn Scope19:28
Added*.rocketleague.comOTHERIn Scope19:28
Added*.rukkaz.comOTHERIn Scope19:28
Added*.singspacegame.comOTHERIn Scope19:28
Added*.sketchfab.comOTHERIn Scope19:28
Added*.superawesome.comOTHERIn Scope19:28
Added*.superawesome.tvOTHERIn Scope19:28
Added*.superbeatsports.comOTHERIn Scope19:28
Added*.twinmotion.comWILDCARDIn Scope19:28
Added*.unrealengine.comOTHERIn Scope19:28
Added*.unrealtournament.comOTHERIn Scope19:28
Addedadobe flash related submissionsOTHERIn Scope19:28
Addedany other epic games owned asset not listed in the out of scope sectionOTHERIn Scope19:28
Addedartstation marketplaceOTHERIn Scope19:28
Addedcompass post ​/compass​/v1​/namespace​/fortnite​/new_island_offer_reportOTHERIn Scope19:28
Addedcompass post ​/compass​/v1​/namespace​/fortnite​/new_island_purchase_reportOTHERIn Scope19:28
Addedeos c# sdkBINARYIn Scope19:28
Addedeos sdkCODEIn Scope19:28
Addedeasy anti-cheat bypassesOTHERIn Scope19:28
Addedepicgames/unrealengine_v5.2CODEIn Scope19:28
Addedepicgameslauncher.exeBINARYIn Scope19:28
AddedepiconlineservicesOTHERIn Scope19:28
Addedfallguys gameBINARYIn Scope19:28
Addedfortnite in-island transactionsOTHERIn Scope19:28
Addedfortnite mobile appOTHERIn Scope19:28
Addedfortnite cheatsOTHERIn Scope19:28
Addedfortniteclient-android-shipping-arm64-es2.apkANDROIDIn Scope19:28
Addedfortniteclient-mac-shipping.appBINARYIn Scope19:28
Addedfortniteclient-win64-shipping.exeBINARYIn Scope19:28
Addedfortniteclient-win64-shipping_be.exeBINARYIn Scope19:28
Addedfortniteclient-win64-shipping_eac.exeBINARYIn Scope19:28
Addedfortnitelauncher-win64-shipping.exeBINARYIn Scope19:28
Addedfortnitelauncher-win64-shipping_be.exeBINARYIn Scope19:28
Addedfortnitelauncher-win64-shipping_eac.exeBINARYIn Scope19:28
Addedfortnitelauncher.exeBINARYIn Scope19:28
Addedin-island transaction offer report flowOTHERIn Scope19:28
Addedin-island purchase report form from account managementOTHERIn Scope19:28
AddedkwsOTHERIn Scope19:28
Addedmiscellaneous researchOTHERIn Scope19:28
Addedother fortnite assetsOTHERIn Scope19:28
Addedplayer support chatbotAIIn Scope19:28
Addedpopjam android applicationOTHERIn Scope19:28
Addedrecent acquisitionsOTHERIn Scope19:28
Addedrukkaz android applicationOTHERIn Scope19:28
Addedsketchfab store (paid asset marketplace)OTHERIn Scope19:28
Addedsketchfab ripping" 3d model / mesh / texture / etc. content out of the 3d web viewerOTHERIn Scope19:28
Addedthird-party games or apps distributed through the mobile storesOTHERIn Scope19:28
Addedthird-party services not managed by epicgamesOTHERIn Scope19:28
AddedtwinmotionOTHERIn Scope19:28
AddeduefnBINARYIn Scope19:28
Addedunrealeditorfortnite-win64-shipping.exeBINARYIn Scope19:28
Addedunrealeditorfortnite.exeBINARYIn Scope19:28
AddedunrealengineOTHERIn Scope19:28
Addedverse coding languageOTHERIn Scope19:28
Addedweb shopsOTHERIn Scope19:28
Addedadmin-dev.harmonixmusic.comURLIn Scope19:28
Addedadmin.harmonixmusic.comURLIn Scope19:28
Addedanswers.unrealengine.comURLIn Scope19:28
Addedapi.epicgames.devURLIn Scope19:28
Addedapp.playwonderbox.comIOSIn Scope19:28
Addedapple.co/-horizonchase2IOSIn Scope19:28
Addedaqtooling.comURLIn Scope19:28
Addedaquiris.com.brURLIn Scope19:28
Addedaquiris.studioURLIn Scope19:28
Addedaquiristech.comURLIn Scope19:28
Addedartportal.epicgames.comURLIn Scope19:28
Addedaudica-live-admin.hmxwebservices.comURLIn Scope19:28
Addedaudica-prod-admin.hmxwebservices.comURLIn Scope19:28
Addedaudica-prod-api.hmxwebservices.comURLIn Scope19:28
Addedautodiscover.harmonixmusic.comURLIn Scope19:28
Added*.epicgames.devWILDCARDIn Scope19:28
Added*.harmonixmusic.comWILDCARDIn Scope19:28
Added*.superawesome.tvWILDCARDIn Scope19:28
Addedartstation marketplaceOTHERIn Scope19:28
Addedeos sdkOTHERIn Scope19:28
Addedin-island purchase report form from account managementOTHERIn Scope19:28
Addedsketchfab store (paid asset marketplace)OTHERIn Scope19:28
Addedaquiris.com.brURLIn Scope19:28
Added*.unrealtournament.comWILDCARDIn Scope19:28
Addedfortnite mobile appIOSIn Scope19:28
Addedfortniteclient-mac-shipping.appBINARYIn Scope19:28
Addedrukkaz android applicationANDROIDIn Scope19:28
Addedunrealeditorfortnite.exeBINARYIn Scope19:28
Addedaudica-prod-api.hmxwebservices.comURLIn Scope19:28
Addedepicgameslauncher.exeBINARYIn Scope19:28
Added*.audicagame.comWILDCARDIn Scope19:28
Addedin-island transaction offer report flowOTHERIn Scope19:28
Addedpopjam android applicationANDROIDIn Scope19:28
Addedsketchfab ripping" 3d model / mesh / texture / etc. content out of the 3d web viewerOTHERIn Scope19:28
AddeduefnOTHERIn Scope19:28
Addedunrealeditorfortnite-win64-shipping.exeBINARYIn Scope19:28
Addedapi.epicgames.devURLIn Scope19:28
Added*.epicgames.comWILDCARDIn Scope19:28
Added*.rukkaz.comWILDCARDIn Scope19:28
Added*.superawesome.comWILDCARDIn Scope19:28
Added*.unrealengine.comWILDCARDIn Scope19:28
Addedthird-party games or apps distributed through the mobile storesOTHERIn Scope19:28
AddedtwinmotionOTHERIn Scope19:28
AddedunrealengineOTHERIn Scope19:28
Addedadmin.harmonixmusic.comURLIn Scope19:28
Added*.bcbits.comWILDCARDIn Scope19:28
Added*.oncatapult.comWILDCARDIn Scope19:28
Addedadobe flash related submissionsOTHERIn Scope19:28
Addedany other epic games owned asset not listed in the out of scope sectionOTHERIn Scope19:28
Addedfortnitelauncher-win64-shipping_be.exeBINARYIn Scope19:28
Addedaqtooling.comURLIn Scope19:28
Added*.hmxwebservices.comWILDCARDIn Scope19:28
Added*.psynet.ggWILDCARDIn Scope19:28
Added*.rocketleague.comWILDCARDIn Scope19:28
Addedeasy anti-cheat bypassesOTHERIn Scope19:28
Addedfortniteclient-android-shipping-arm64-es2.apkANDROIDIn Scope19:28
Addedverse coding languageOTHERIn Scope19:28
Addedapp.playwonderbox.comANDROIDIn Scope19:28
Addedapple.co/-horizonchase2IOSIn Scope19:28
Added*.quixel.comWILDCARDIn Scope19:28
AddedepiconlineservicesOTHERIn Scope19:28
Addedfortniteclient-win64-shipping.exeBINARYIn Scope19:28
Addedfortnitelauncher-win64-shipping_eac.exeBINARYIn Scope19:28
Addedaquiris.studioURLIn Scope19:28
Added*.artstation.comWILDCARDIn Scope19:28
Added*.easy.acWILDCARDIn Scope19:28
Added*.epicgames.devWILDCARDIn Scope19:28
Added*.fortnite.comWILDCARDIn Scope19:28
Added*.hostman.prod.adad.live.use1a.on.epicgames.comWILDCARDIn Scope19:28
Added*.psyonix.comWILDCARDIn Scope19:28
Added*.rockbandvr.comWILDCARDIn Scope19:28
Addedfortnite cheatsOTHERIn Scope19:28
Addedplayer support chatbotAIIn Scope19:28
Addedanswers.unrealengine.comURLIn Scope19:28
Addedartportal.epicgames.comURLIn Scope19:28
Addedaudica-prod-admin.hmxwebservices.comURLIn Scope19:28
Added*.bandcamp.comWILDCARDIn Scope19:28
Added*.mediatonic.co.ukWILDCARDIn Scope19:28
Addedeos c# sdkOTHERIn Scope19:28
Added*.bcbits.comWILDCARDIn Scope19:28
Added*.cubicmotion.comWILDCARDIn Scope19:28
Added*.fallguys.comWILDCARDIn Scope19:28
Added*.singspacegame.comWILDCARDIn Scope19:28
Added*.superbeatsports.comWILDCARDIn Scope19:28
Addedcompass post ​/compass​/v1​/namespace​/fortnite​/new_island_offer_reportOTHERIn Scope19:28
Addedcompass post ​/compass​/v1​/namespace​/fortnite​/new_island_purchase_reportOTHERIn Scope19:28
Added*.amplitude-game.comWILDCARDIn Scope19:28
Added*.dropmix.comWILDCARDIn Scope19:28
Addedmiscellaneous researchOTHERIn Scope19:28
Addedother fortnite assetsOTHERIn Scope19:28
Added*.dancecentral.comWILDCARDIn Scope19:28
AddedkwsOTHERIn Scope19:28
Addedaudica-live-admin.hmxwebservices.comURLIn Scope19:28
Added*.3lateral.comWILDCARDIn Scope19:28
Added*.bandcamp.comWILDCARDIn Scope19:28
Added*.corp.bandcamp.comWILDCARDIn Scope19:28
Added*.popjam.comWILDCARDIn Scope19:28
Addedfortniteclient-win64-shipping_eac.exeBINARYIn Scope19:28
Addedfortnitelauncher.exeBINARYIn Scope19:28
Addedweb shopsOTHERIn Scope19:28
Addedadmin-dev.harmonixmusic.comURLIn Scope19:28
Added*.fallguys.comWILDCARDIn Scope19:28
Addedepicgames/unrealengine_v5.2OTHERIn Scope19:28
Addedfortniteclient-win64-shipping_be.exeBINARYIn Scope19:28
Addedrecent acquisitionsOTHERIn Scope19:28
Addedthird-party services not managed by epicgamesOTHERIn Scope19:28
Addedaquiristech.comURLIn Scope19:28
Added*.hmxservices.comWILDCARDIn Scope19:28
Added*.jellychat.comWILDCARDIn Scope19:28
Added*.sketchfab.comWILDCARDIn Scope19:28
Added*.twinmotion.comWILDCARDIn Scope19:28
Addedfallguys gameBINARYIn Scope19:28
Addedfortnite in-island transactionsOTHERIn Scope19:28
Addedfortnitelauncher-win64-shipping.exeBINARYIn Scope19:28
Addedautodiscover.harmonixmusic.comURLIn Scope19:28