Early access: the directory is still filling out, and every rating here is a reported experience.
NR Unrated
Epic Games
Epic Games HackerOne
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Epic Games? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.

Ask BugRater to submit it

Private. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.

Program metrics HackerOne · published

HackerOne’s own figures for this program, read from its public page, not reported by researchers and not part of the BugRater grade. Captured 2 Oct 2026.

What it pays, by severity

Critical $25,286 avg 186 reports firm
High $6,114 avg 543 reports firm
Medium $2,176 avg 916 reports firm
Low $371 avg 911 reports firm

$9,230,234 paid to researchers in total, $559,550 of it in the last 90 days. Lifetime figure as HackerOne prints it: evidence this program has paid, not a promise about any one report.

Intake & responsiveness · last 90 days

Reports received
948
in 90 days
Resolved
2,575
all time, last one 2 days ago
Participants
1,095
hunters engaged
Response efficiency
74%
below its own targets, HackerOne’s figure
SLA misses
0
targets missed
Reports received · day by day, last 15 days 800–948
4 Sep 948 reports 2 Oct

Response targets it sets itself

First response
1 day
Triage
5 days
Bounty
15 days
Resolution
30 days

A target the program declared, not a measurement of it being met.

Getting in the door

Open to submit. Nothing HackerOne publishes stands between a hunter and a first report here.

Over 42 days (22 snapshots): intake up 165 reports; response efficiency down 5 points; 90-day payout up $103,550.

See how this programme’s report load compares to others →

Reviews

0 published

No reviews yet.

Be the first to review

Who this program credits

1,139 credited

Researchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.

# Researcher Reputation Recognised / submitted
1 snorlhax 6,585 201 / 289 70%
2 xor 3,863 132 / 174 76%
3 cubed 2,811 77 / 130 59%
4 jaren 2,586 60 / 66 91%
5 nahuelrm_ 2,488 78 / 107 73%
6 taraszelyk 2,223 62 / 73 85%
7 d0xing 1,928 81 / 88 92%
8 zere 1,793 55 / 65 85%
9 w2w 1,708 61 / 121 50%
10 lel3x 1,651 46 / 59 78%
11 arsene_lupin 1,621 26 / 33 79%
11 h4x0r_dz 1,245 49 / 116 42%
12 shmoul 1,405 23 / 27 85%
13 gemini 1,402 62 / 100 62%
14 worstwursts 1,367 37 / 60 62%
15 doomerhunter 1,171 15 / 19 79%
16 mixv2 1,070 31 / 48 65%
17 rhynorater 1,045 21 / 26 81%
18 indoappsec 1,016 37 / 65 57%
19 todayisnew 999 45 / 64 70%
20 waxx 992 31 / 42 74%
21 iieitaimuss 988 19 / 31 61%
22 maziegg 976 39 / 96 41%
23 farcall 888 7 / 10 70%
24 ali 869 34 / 45 76%

Showing the top 25 of 1,139 credited on HackerOne.

Program profile HackerOne · imported

Facts published by HackerOne on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 30 Sep 2026.

Responsiveness
74% HackerOne’s figure
Swag
Offered
Currency
USD
Submissions
Open
Launched
Oct 2021
Scope entries
557 HackerOne’s count

Scope

311 assets
AssetTypeEligibilityMax severity
*.3lateral.com URL ✓ bounty Critical
*.amplitude-game.com URL ✓ bounty Critical
*.artstation.com URL ✓ bounty Critical
*.audicagame.com URL ✓ bounty Critical
*.cubicmotion.com URL ✓ bounty Critical
Show all 311 assets
AssetTypeEligibilityMax severity
*.dancecentral.com URL ✓ bounty Critical
*.dropmix.com URL ✓ bounty Critical
*.easy.ac URL ✓ bounty Critical
*.epicgames.dev URL ✓ bounty Critical
*.fallguys.com URL ✓ bounty Low
*.harmonixmusic.com URL ✓ bounty Critical
*.hmxservices.com URL ✓ bounty Critical
*.hmxwebservices.com URL ✓ bounty Critical
*.ismeerkatdown.com OTHER ✓ bounty Critical
*.mediatonic.co.uk URL ✓ bounty Critical
*.oncatapult.com URL ✓ bounty Critical
*.partypledge.com OTHER ✓ bounty Critical
*.psynet.gg URL ✓ bounty Critical
*.psyonix.com URL ✓ bounty Critical
*.quixel.com URL ✓ bounty Critical
*.rocketleague.com URL ✓ bounty Critical
*.singspacegame.com URL ✓ bounty Critical
*.sketchfab.com URL ✓ bounty Critical
*.twinmotion.com WILDCARD ✓ bounty Critical
*.unrealtournament.com URL ✓ bounty Critical
accounts.epicgames.com URL ✓ bounty Critical
affiliate-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
Any other Epic games owned asset not listed in the out of scope section OTHER ✓ bounty Critical
api.epicgames.dev URL ✓ bounty Critical
app.epicgames-prod.ol.epicgames.com URL ✓ bounty Critical
app.houseparty.com URL ✓ bounty Critical
aqtooling.com URL ✓ bounty Critical
aquiris.com.br URL ✓ bounty Low
aquiris.studio URL ✓ bounty Low
aquiristech.com URL ✓ bounty Critical
artifact-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
ballistic.com URL ✓ bounty Low
ballistic.com.br URL ✓ bounty Low
buckingfuggy.com URL ✓ bounty Critical
capturingreality.com URL ✓ bounty Critical
catalog-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
coderedemption-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
communications-service-prod06.ol.epicgames.com URL ✓ bounty Critical
competitive.fortnite.com URL ✓ bounty Critical
connect.epicgames.dev URL ✓ bounty Critical
content-service-live-testing.bfda.live.use1a.on.epicgames.com URL ✓ bounty Critical
content-service.bfda.live.use1a.on.epicgames.com URL ✓ bounty Critical
cosmo.fdeb.live.use1a.on.epicgames.com URL ✓ bounty Critical
create.fortnite.com URL ✓ bounty Critical
datarouter.ol.epicgames.com URL ✓ bounty Critical
datastorage-public-service-live.ol.epicgames.com URL ✓ bounty Critical
dev.epicgames.com URL ✓ bounty Critical
dev.epicgames.com/* OTHER ✓ bounty Critical
developerprivacy-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
entitlement-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
EOS C# SDK DOWNLOADABLE EXECUTABLES ✓ bounty Critical
epicgames.com/account/* OTHER ✓ bounty Critical
epicgames.com/affiliate/* OTHER ✓ bounty Critical
epicgames.com/battlebreakers/* OTHER ✓ bounty Critical
epicgames.com/competitive/* OTHER ✓ bounty Critical
epicgames.com/fortnite/* OTHER ✓ bounty Critical
epicgames.com/help/* OTHER ✓ bounty Critical
epicgames.com/id/* OTHER ✓ bounty Critical
epicgames.com/infinityblade/* OTHER ✓ bounty Critical
epicgames.com/shadowcomplex/* OTHER ✓ bounty Critical
epicgames.com/site/* OTHER ✓ bounty Critical
epicgames.com/store/* OTHER ✓ bounty Critical
epicgames.com/unrealtournament/* OTHER ✓ bounty Critical
EpicGamesLauncher.exe DOWNLOADABLE EXECUTABLES ✓ bounty Critical
EpicOnlineServices OTHER ✓ bounty Critical
eulatracking-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
events-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
fab.com URL ✓ bounty Critical
fallguys.com URL ✓ bounty Critical
fnreplay-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
fortnite-matchmaking-public-service-live-*.ol.epicgames.com OTHER ✓ bounty Critical
fortnite-public-live-prod.ol.epicgames.com URL ✓ bounty Critical
fortnite-public-service-prod11.ol.epicgames.com URL ✓ bounty Critical
fortnite.com URL ✓ bounty Critical
fortnite.com/* OTHER ✓ bounty Critical
FortniteClient-Android-Shipping-arm64-es2.apk OTHER APK ✓ bounty Critical
FortniteClient-IOS-Shipping.ipa OTHER IPA ✓ bounty Critical
FortniteClient-Win64-Shipping.exe DOWNLOADABLE EXECUTABLES ✓ bounty Critical
FortniteLauncher-Win64-Shipping_BE.exe DOWNLOADABLE EXECUTABLES ✓ bounty Critical
FortniteLauncher-Win64-Shipping_EAC.exe DOWNLOADABLE EXECUTABLES ✓ bounty Critical
FortniteLauncher-Win64-Shipping.exe DOWNLOADABLE EXECUTABLES ✓ bounty Critical
FortniteLauncher.exe DOWNLOADABLE EXECUTABLES ✓ bounty Critical
forums.epicgames.com URL ✓ bounty Critical
forums.unrealengine.com URL ✓ bounty Critical
fraud-public-service-ecomprod02.ol.epicgames.com URL ✓ bounty Critical
fulfillment-admin-service-partners-prod06.ol.epicgames.com URL ✓ bounty Critical
fulfillment-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
geo-nat.ol.epicgames.com URL ✓ bounty Critical
graphql.epicgames-prod.ol.epicgames.com URL ✓ bounty Critical
graphql.epicgames.com URL ✓ bounty Critical
harmonixmusic.com URL ✓ bounty Critical
hc2services.com URL ✓ bounty Critical
hc2tooling.com URL ✓ bounty Critical
hmxservices.com URL ✓ bounty Critical
horizonchase.com URL ✓ bounty Low
horizonchase.com.br URL ✓ bounty Low
horizonchaseturbo.com URL ✓ bounty Low
http://coderedemption-public-service-prod06.ol.epicgames.net/coderedemption URL ✓ bounty Critical
http://dev.epicgames.com/docs/ URL ✓ bounty Critical
http://dev.epicgames.com/portal/ URL ✓ bounty Critical
http://ecommerceintegration-public-service-ecomprod02.ol.epicgames.com/ecommerceintegration URL ✓ bounty Critical
http://epicgames.com/affiliate/settings URL ✓ bounty Critical
http://epicgames.com/competitive URL ✓ bounty Critical
http://epicgames.com/fortnite/forums URL ✓ bounty Critical
http://epicgames.com/paragon/forums URL ✓ bounty Critical
http://friends-public-service-prod06.ol.epicgames.com/friends URL ✓ bounty Critical
http://list-public-service-prod.ol.epicgames.net/list URL ✓ bounty Critical
http://nexus.live.ucs.on.epicgames.com/ URL ✓ bounty Critical
http://organization-public-service-stage.ol.epicgames.net/organization URL ✓ bounty Critical
http://payout-public-service-prod14.ol.epicgames.net/payout URL ✓ bounty Critical
http://review-public-service-ecomprod02.ol.epicgames.net/review URL ✓ bounty Critical
http://subscriptionv3-public-service-ecomprod02.ol.epicgames.net/subscriptionv3 URL ✓ bounty Critical
http://unrealengine.com/enterprise-management/en-US/dashboard URL ✓ bounty Critical
http://urc-auth-uefn.live.ucs.on.epicgames.com/ URL ✓ bounty Critical
http://urc-uefn.live.ucs.on.epicgames.com URL ✓ bounty Critical
https://communities.epicgames.com URL ✓ bounty Critical
https://fn-commerce-live.eeef.live.use1a.on.epicgames.com/api/fn-commerce/ URL ✓ bounty Critical
https://fngw-svc-ds-livefn.ol.epicgames.net/api/magpie URL ✓ bounty Critical
https://fngw-svc-gc-livefn.ol.epicgames.net/api/magpie URL ✓ bounty Critical
id1520720139 APPLE STORE APP ID ✓ bounty Critical
id1534920947 APPLE STORE APP ID ✓ bounty Critical
innersloth.kidswebservices.com URL ✓ bounty Critical
interactions-service-prod.ol.epicgames.com URL ✓ bounty Critical
kidswebservices.com URL ✓ bounty Critical
launcher-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
launcherwaitingroom-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
lightswitch-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
matchmaking-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
mesh-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
metahuman.unrealengine.com URL ✓ bounty Critical
niantic.kidswebservices.com URL ✓ bounty Critical
orderprocessor-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
partnerintegration-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
party-service-prod.ol.epicgames.com URL ✓ bounty Critical
payment-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
payment-website-pci.ol.epicgames.com URL ✓ bounty Critical
payment-website-prod.ol.epicgames.com URL ✓ bounty Critical
playwonderbox.com URL ✓ bounty Low
playwonderbox.com.br URL ✓ bounty Low
presence-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
priceengine-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
product-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
publish.unrealengine.com URL ✓ bounty Critical
publishing-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
replay-public-service-prod10.ol.epicgames.com URL ✓ bounty Critical
social-ban-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
staging.kidswebservices.com URL ✓ bounty Critical
statsingestion-public-service-live.ol.epicgames.com URL ✓ bounty Critical
statsproxy-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
stun-*-nat.ol.epicgames.com OTHER ✓ bounty Critical
twinmotion.unrealengine.com URL ✓ bounty Critical
ue-launcher-website-prod.ol.epicgames.com URL ✓ bounty Critical
UEFN DOWNLOADABLE EXECUTABLES ✓ bounty Critical
UnrealEditorFortnite-Win64-Shipping.exe DOWNLOADABLE EXECUTABLES ✓ bounty Critical
unrealengine.com/* OTHER ✓ bounty Critical
v1. kidswebservices.com OTHER ✓ bounty Critical
v1staging.kidswebservices.com OTHER ✓ bounty Critical
wex-public-service-prod.ol.epicgames.com URL ✓ bounty Critical
wonderboxapi.com URL ✓ bounty Critical
wonderboxdev.com URL ✓ bounty Critical
WorldExplorers-Win32-Shipping.exe DOWNLOADABLE EXECUTABLES ✓ bounty Critical
xmpp-service-prod.ol.epicgames.com URL ✓ bounty Critical
*.bandcamp.com OTHER out None
*.bcbits.com URL out None
*.corp.bandcamp.com URL out None
*.epicgames.com URL submit only Critical
*.fortnite.com URL submit only Critical
*.freebeerpongs.com OTHER out None
*.getair.co OTHER out None
*.gethouseparty.com OTHER out None
*.houseparty.com OTHER out None
*.houseparty.life OTHER out None
*.houseparty.live OTHER submit only Critical
*.housepartyfun.com OTHER out None
*.inthehouse.party OTHER out None
*.jellychat.com URL out None
*.joinhouse.party OTHER out None
*.lifeonair.com OTHER out None
*.lifeonairinc.com OTHER out None
*.meerkat.cool OTHER out None
*.meerkatapp.co OTHER out None
*.popjam.com URL out None
*.rockbandvr.com URL submit only Critical
*.rukkaz.com URL out None
*.secrethouse.party OTHER out None
*.sendafriendshipbracelet.com OTHER out None
*.shouldipartytonight.com OTHER out None
*.superawesome.com OTHER out None
*.superawesome.tv OTHER out None
*.superbeatsports.com URL out None
*.thehousepartyapp.com OTHER out None
*.unrealengine.com URL submit only Critical
*.yevvo.com OTHER out None
admin-dev.harmonixmusic.com URL out None
admin.harmonixmusic.com URL out None
Adobe Flash related submissions OTHER out None
All other Epic Games Assets OTHER submit only Critical
All Other House Party Assets OTHER submit only Critical
all-other-subdomains-and-paths.epicgames.com URL out None
all-other-subdomains-and-paths.houseparty.com URL out None
answers.unrealengine.com URL out None
app.playwonderbox.com APPLE STORE APP ID out None
artportal.epicgames.com URL out None
audica-live-admin.hmxwebservices.com URL out None
audica-prod-admin.hmxwebservices.com URL out None
audica-prod-api.hmxwebservices.com URL out None
autodiscover.harmonixmusic.com URL out None
azure-int-proxy.hmxservices.com URL out None
blog.bandcamp.com URL out None
com.herzick.houseparty GOOGLE PLAY APP ID out None
communities.unrealengine.com URL out None
communityportal.epicgames.com URL out None
confluence.harmonixmusic.com URL out None
damascushelp.epicgames.com URL out None
dcvr-live-admin.hmxwebservices.com URL out None
dcvr-prod-admin.hmxwebservices.com URL out None
detroitlabs.epicgames.com URL out None
docs.superawesome.com URL out None
docs.superawesome.tv URL out None
docs.unrealengine.com URL out None
dropmix-dev-admin.hmxwebservices.com URL out None
dropmix-prod-admin.hmxwebservices.com URL out None
eoshelp.epicgames.com URL out None
eoshelp.epicgames.com/* OTHER out None
epicgames.com/* OTHER submit only Critical
epicsupport.force.com URL out None
epicswag.com URL out None
facebook.aquiris.com.br URL out None
FortniteClient-Mac-Shipping.app DOWNLOADABLE EXECUTABLES out None
forum.sketchfab.com URL submit only Critical
fuser-admin-dev-external.hmxservices.com URL out None
fuser-admin-live-external.hmxservices.com URL out None
get.bandcamp.help URL out None
help.sketchfab.com URL submit only Critical
HouseParty app related vulnerabilities on rooted IOS/Android devices OTHER out None
HouseParty Chrome Plugin DOWNLOADABLE EXECUTABLES out None
HouseParty MacOS application DOWNLOADABLE EXECUTABLES out None
HouseParty Realm Database relared vulnerabilities OTHER out None
http://brand.epicgames.com URL out None
http://epicsupport.force.com/epicgamesstoreknowledgebase/s/ URL out None
http://epicsupport.force.com/mithril/s/ URL out None
http://epicsupport.force.com/stadia/s/ URL out None
http://superawesome.com/contact-us/ URL out None
https://github.com/EpicGames/UnrealTournament SOURCE CODE out None
hype-dev-admin.hmxwebservices.com URL out None
isitbandcampfriday.com URL out None
issues.unrealengine.com URL out None
jira.harmonixmusic.com URL out None
learn.unrealengine.com URL out None
locustus.harmonixmusic.com URL out None
login.epicgames.com URL out None
logstash-shipper-azure.hmxservices.com URL out None
looneytuneswom.com URL out None
maestro.io OTHER out None
mail.harmonixmusic.com URL out None
marketplacehelp.epicgames.com URL out None
mediaspace.unrealengine.com URL out None
merch.fortnite.com URL out None
mithrilhelp.epicgames.com URL out None
mon.hmxservices.com URL out None
msoid.harmoixmusic.com URL out None
msoid.harmonixmusic.com URL out None
msoid.hmxservices.com URL out None
news.capturingreality.com URL out None
Popjam Android application OTHER out None
ps3-meta.rockband.com URL submit only Critical
public-web-swarm-cluster.hmxservices.com URL out None
rb4-admin.hmxservices.com URL out None
rb4ca-prod-admin.hmxwebservices.com URL out None
rb4ca-staging-admin.hmxwebservices.com URL out None
Recent Acquisitions OTHER out None
Rukkaz Android application OTHER out None
senior.aquiris.com.br URL out None
skookum.chat URL out None
sompmgr-admin.hmxservices.com URL out None
sompmgr-dev-proxy-aws.hmxservices.com URL out None
sompmgr-dev-proxy-azure.hmxservices.com URL out None
sompmgr-dev.hmxservices.com URL out None
sompmgr-frontend.hmxservices.com URL out None
sompmgr-int-dev.hmxservices.com URL out None
sompmgr-int.hmxservices.com URL out None
sompmgr-proxy-ext-dev.hmxservices.com URL out None
sompmgr-proxy-ext.hmxservices.com URL out None
sompmgr-proxy-int-dev.hmxservices.com URL out None
sompmgr-proxy-int.hmxservices.com URL out None
sompmgr.hmxservices.com URL out None
songsdb.harmonixmusic.com URL out None
stadiahelp.epicgames.com URL out None
start.gg URL out None
support.capturingreality.com URL out None
support.harmonixmusic.com URL out None
svn.bandcamp.com URL out None
swarm-monitoring-node-01.hmxservices.com URL out None
swarm.harmonixmusic.com URL out None
tableau.harmonixmusic.com URL out None
teamcity-external.harmonixmusic.com URL out None
teamcity.hmxservices.com URL out None
twinmotionhelp.epicgames.com URL out None
udn.unrealengine.com URL out None
unrealfest.unrealengine.com URL out None
vimeo.aquiris.com.br URL out None
watch.fortnite.com URL out None
web-admin.harmonixmusic.com URL out None
webinars.unrealengine.com URL out None
www-api.hmxservices.com URL out None
www.rockband4.com URL submit only Critical

HackerOne lists 557 scope entries; its public listing groups many assets under one label, so identical entries are shown once.