PentestingHere
Log in Join

Goldman Sachs

Goldman Sachs on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: Yes
  • Managed by the platform: Yes
  • Average first response: 0 days
  • Average time to resolution: 164.3 days

In scope

  • *.advisorsolutions.gs.com
  • *.ayco.com
  • *.claritymoney.com
  • *.folioclient.com
  • *.foliodigitalwealth.com
  • *.foliofirst.com
  • *.foliofn.com
  • *.folioidentity.com
  • *.folioinstitutional.com
  • *.folioinvesting.com
  • *.global-liquidity.gs.com
  • *.goldman.com
  • *.goldmanpfm.com
  • *.goldmansachs.com
  • *.gs-mosaic.gs.com
  • *.gs-mosaic.qa.gs.com
  • *.gs.com
  • *.gs.de
  • *.gsam.com
  • *.gspublishing.com
  • *.gsselect.com
  • *.honestdollar.com
  • *.marcus.co.uk
  • *.marcus.com
  • *.nextcapital.com
  • *.nnip.com
  • *.qaglobal-liquidity.gs.com
  • *.vennhypotheken.nl
  • GS Select iOS app
  • api.foliofn.com
  • apigw.foliofn.com
  • com.gs.gsnow.external
  • com.gs.gstrader.external
  • com.gs.mobile.gsnow
  • com.gs.mobile.trader
  • com.gs.pfmg.wellness
  • com.gs.pwmdigital.external
  • com.gs.pwmdigital.external.android
  • com.marcus.android
  • com.marcus.android.uk

6 more assets on the official page.

Out of scope

  • *.communicatie.vennhypotheken.nl
  • *.events.gs.com
  • *.overrules.vennhypotheken.nl
  • *.rocaton.com,secure.rocaton.com
  • *.scripts.vennhypotheken.nl
  • 18098.nextcapital.com
  • 3rd party hosted assets
  • All .cn domains
  • billpay.goldman.com
  • deb.nextcapital.com
  • email.nextcapital.com
  • gsg-uk.goldman.com
  • gsg.goldman.com
  • gspf.goldman.com
  • npm-new.nextcapital.com
  • npm.nextcapital.com
  • qa-billpay.goldman.com
  • repo.nextcapital.com
  • rubygems.nextcapital.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback