gitlab

HackerOneView on HackerOne
RawAI Enhanced
20
In Scope
24
Out of Scope
In-Scope Assets (20)
AssetCategoryBountyQuick Links
*.gitlab.netWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.gitlab.orgWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.gitlap.comWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
GitLab for Jira CloudOTHERYes-
Other non-production infrastructureOTHERYes-
Your Own GitLab InstanceOTHERYes-
about.gitlab.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
advisories.gitlab.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
customers.gitlab.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
design.gitlab.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
docs.gitlab.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
gitlab.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://gitlab.com/gitlab-org/gitalyCODEYes-
https://gitlab.com/gitlab-org/gitlabCODEYes-
https://gitlab.com/gitlab-org/gitlab-pagesCODEYes-
https://gitlab.com/gitlab-org/gitlab-runnerCODEYes-
https://gitlab.com/gitlab-org/gitlab-shellCODEYes-
https://gitlab.com/gitlab-org/gitlab-vscode-extensionCODEYes-
https://gitlab.com/gitlab-org/opstrace/opstraceCODEYes-
registry.gitlab.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (24)
AssetCategoryBounty
*.gitlab-private.orgWILDCARDNo
*.gitlab.cnWILDCARDNo
*.runway.gitlab.netWILDCARDNo
*.service-now.comWILDCARDNo
alerts.gitlab.comURLNo
aptly.gitlab.comURLNo
dashboards.gitlab.comURLNo
federal-support.gitlab.comURLNo
forum.gitlab.comURLNo
gitlab.biterg.ioURLNo
gitlabdemo.cloudURLNo
gitlabsandbox.netURLNo
gitlabtraining.cloudURLNo
https://gitlab.com/gitlab-org/cli/CODENo
https://gitlab.com/gitlab-org/opstrace/opstrace-uiCODENo
ir.gitlab.comURLNo
levelup.gitlab.comURLNo
packages.gitlab.comURLNo
partners.gitlab.comURLNo
shop.gitlab.comURLNo
status.gitlab.comURLNo
support.gitlab.comURLNo
translate.gitlab.comURLNo
us-federal-gitlab.comURLNo
Scope Changes (108)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedcustomers.gitlab.comURLOut of Scope19:08
Addedother non-production infrastructureOTHERIn Scope19:08
Addedabout.gitlab.comURLIn Scope19:08
Addedyour own gitlab instanceOTHERIn Scope19:08
Addedhttps://gitlab.com/gitlab-org/gitlabCODEIn Scope19:08
Addedhttps://gitlab.com/gitlab-org/gitalyCODEIn Scope19:08
Addeddashboards.gitlab.comURLOut of Scope19:08
Addedforum.gitlab.comURLOut of Scope19:08
Addedpartners.gitlab.comURLOut of Scope19:08
Added*.gitlap.comWILDCARDIn Scope19:08
Addedhttps://gitlab.com/gitlab-org/gitlab-shellCODEIn Scope19:08
Addedhttps://gitlab.com/gitlab-org/gitlab-vscode-extensionCODEIn Scope19:08
Addedlevelup.gitlab.comURLOut of Scope19:08
Addedgitlabtraining.cloudURLOut of Scope19:08
Addedaptly.gitlab.comURLOut of Scope19:08
Addedus-federal-gitlab.comURLOut of Scope19:08
Addedhttps://gitlab.com/gitlab-org/gitlab-pagesCODEIn Scope19:08
Addedir.gitlab.comURLOut of Scope19:08
Addedalerts.gitlab.comURLOut of Scope19:08
Addedshop.gitlab.comURLOut of Scope19:08
Addedgitlab.biterg.ioURLOut of Scope19:08
Addedhttps://gitlab.com/gitlab-org/cliURLOut of Scope19:08
Addeddocs.gitlab.comURLIn Scope19:08
Addeddesign.gitlab.comURLIn Scope19:08
Addedgitlab.comURLIn Scope19:08
Addedsupport.gitlab.comURLOut of Scope19:08
Addedstatus.gitlab.comURLOut of Scope19:08
Added*.service-now.comWILDCARDOut of Scope19:08
Added*.gitlab-private.orgWILDCARDOut of Scope19:08
Addedadvisories.gitlab.comURLIn Scope19:08
Addedregistry.gitlab.comURLIn Scope19:08
Addedhttps://gitlab.com/gitlab-org/gitlab-runnerCODEIn Scope19:08
Addedhttps://gitlab.com/gitlab-org/opstrace/opstrace-uiURLOut of Scope19:08
Addedgitlabsandbox.netURLOut of Scope19:08
Addedpackages.gitlab.comURLOut of Scope19:08
Added*.gitlab.orgWILDCARDIn Scope19:08
Addedgitlab for jira cloudOTHERIn Scope19:08
Addedgitlabdemo.cloudURLOut of Scope19:08
Addedtranslate.gitlab.comURLOut of Scope19:08
Added*.runway.gitlab.netWILDCARDOut of Scope19:08
Addedfederal-support.gitlab.comURLOut of Scope19:08
Added*.gitlab.netWILDCARDIn Scope19:08
Addedhttps://gitlab.com/gitlab-org/opstrace/opstraceCODEIn Scope19:08
Added*.gitlab.cnWILDCARDOut of Scope19:08
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.gitlap.comWILDCARDIn Scope00:40
Addedhttps://gitlab.com/gitlab-org/gitlabURLIn Scope00:40
Addedhttps://gitlab.com/gitlab-org/gitlab-runnerURLIn Scope00:40
Addedhttps://gitlab.com/gitlab-org/gitlab-pagesURLIn Scope00:40
Addedforum.gitlab.comURLOut of Scope00:40
Addedother non-production infrastructureOTHERIn Scope00:40
Addeddocs.gitlab.comURLIn Scope00:40
Addedyour own gitlab instanceOTHERIn Scope00:40
Addedhttps://gitlab.com/gitlab-org/gitlab-vscode-extensionURLIn Scope00:40
Addedus-federal-gitlab.comURLOut of Scope00:40
Added*.gitlab.netWILDCARDIn Scope00:40
Addedabout.gitlab.comURLIn Scope00:40
Addedalerts.gitlab.comURLOut of Scope00:40
Addeddesign.gitlab.comURLIn Scope00:40
Addedir.gitlab.comURLOut of Scope00:40
Addeddashboards.gitlab.comURLOut of Scope00:40
Added*.gitlab.cnWILDCARDOut of Scope00:40
Addedaptly.gitlab.comURLOut of Scope00:40
Added*.service-now.comWILDCARDOut of Scope00:40
Addedpackages.gitlab.comURLOut of Scope00:40
Addedhttps://gitlab.com/gitlab-org/opstrace/opstraceURLIn Scope00:40
Addedshop.gitlab.comURLOut of Scope00:40
Addedgitlab.biterg.ioURLOut of Scope00:40
Addedhttps://gitlab.com/gitlab-org/opstrace/opstrace-uiURLOut of Scope00:40
Addedgitlabdemo.cloudURLOut of Scope00:40
Addedfederal-support.gitlab.comURLOut of Scope00:40
Addedadvisories.gitlab.comURLIn Scope00:40
Addedgitlab.comURLIn Scope00:40
Addedhttps://gitlab.com/gitlab-org/gitalyURLIn Scope00:40
Addedlevelup.gitlab.comURLOut of Scope00:40
Added*.runway.gitlab.netWILDCARDOut of Scope00:40
Addedcustomers.gitlab.comURLOut of Scope00:40
Addedregistry.gitlab.comURLIn Scope00:40
Addedgitlab for jira cloudOTHERIn Scope00:40
Addedsupport.gitlab.comURLOut of Scope00:40
Addedstatus.gitlab.comURLOut of Scope00:40
Addedgitlabsandbox.netURLOut of Scope00:40
Addedhttps://gitlab.com/gitlab-org/gitlab-shellURLIn Scope00:40
Addedhttps://gitlab.com/gitlab-org/cliURLOut of Scope00:40
Addedgitlabtraining.cloudURLOut of Scope00:40
Addedpartners.gitlab.comURLOut of Scope00:40
Addedtranslate.gitlab.comURLOut of Scope00:40
Added*.gitlab-private.orgWILDCARDOut of Scope00:40
Added*.gitlab.orgWILDCARDIn Scope00:40
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedother non-production infrastructureOTHERIn Scope21:38
Removed*.gitlab.netWILDCARDIn Scope21:38
Removed*.gitlab.orgWILDCARDIn Scope21:38
Removed*.gitlap.comWILDCARDIn Scope21:38
Removedabout.gitlab.comURLIn Scope21:38
Removeddocs.gitlab.comURLIn Scope21:38
Removeddesign.gitlab.comURLIn Scope21:38
Removedadvisories.gitlab.comURLIn Scope21:38
Removedcustomers.gitlab.comURLIn Scope21:38
Removedregistry.gitlab.comURLIn Scope21:38
Removedgitlab.comURLIn Scope21:38
Removedyour own gitlab instanceOTHERIn Scope21:38
Removedhttps://gitlab.com/gitlab-org/opstrace/opstraceCODEIn Scope21:38
Removedhttps://gitlab.com/gitlab-org/gitlabCODEIn Scope21:38
Removedhttps://gitlab.com/gitlab-org/gitlab-runnerCODEIn Scope21:38
Removedhttps://gitlab.com/gitlab-org/gitalyCODEIn Scope21:38
Removedhttps://gitlab.com/gitlab-org/gitlab-pagesCODEIn Scope21:38
Removedhttps://gitlab.com/gitlab-org/gitlab-shellCODEIn Scope21:38
Removedgitlab for jira cloudOTHERIn Scope21:38
Removedhttps://gitlab.com/gitlab-org/gitlab-vscode-extensionCODEIn Scope21:38