H1 HackerOne LIVE
8x8
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.8x8.com
- managed triage
- no
- response efficiency
- 100%
- first response
- 1h avg
- time to bounty
- 37h avg
115 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
8x8 Communication APIs | api | no | critical | 2026-09-20 |
8x8.my.site.com | domain | no | high | 2026-09-20 |
admin-resolve.8x8.com | domain | no | high | 2026-09-20 |
admin.8x8.com | domain | yes | critical | 2026-09-20 |
api.8x8.com | domain | no | critical | 2026-09-20 |
apps.8x8.com | domain | yes | critical | 2026-09-20 |
bridge.8x8.com | domain | no | critical | 2026-09-20 |
callroute.com | domain | no | critical | 2026-09-20 |
callroute.io | domain | no | critical | 2026-09-20 |
cloud8.8x8.com | domain | no | critical | 2026-09-20 |
community.8x8.com | domain | no | high | 2026-09-20 |
connect.8x8.com | domain | no | critical | 2026-09-20 |
converse.8x8.com | domain | no | medium | 2026-09-20 |
dashboard.qa.ai.8x8.com | domain | no | critical | 2026-09-20 |
debug.8x8.com | domain | no | medium | 2026-09-20 |
developer.8x8.com | domain | no | high | 2026-09-20 |
fuze.me | domain | no | low | 2026-09-20 |
https://8x8.vc/xmpp-websocket | domain | no | critical | 2026-09-20 |
https://webrtc.8x8.com/ | domain | yes | critical | 2026-09-20 |
maestro.8x8.cloud | domain | no | critical | 2026-09-20 |
map.8x8.com | domain | no | critical | 2026-09-20 |
mcp.8x8.com | domain | no | critical | 2026-09-20 |
pay.8x8.com | domain | yes | critical | 2026-09-20 |
platform.8x8.com | domain | yes | critical | 2026-09-20 |
platform.8x8pilot.com | domain | yes | critical | 2026-09-20 |
pubtools.private.8x8cloud.net | domain | no | high | 2026-09-20 |
resolve.8x8.com | domain | no | high | 2026-09-20 |
sipsynergy.co.uk | domain | no | critical | 2026-09-20 |
sso.8x8.com | domain | yes | critical | 2026-09-20 |
sso.8x8pilot.com | domain | yes | critical | 2026-09-20 |
support-portal.8x8.com | domain | no | medium | 2026-09-20 |
uc.8x8pilot.com | domain | yes | critical | 2026-09-20 |
unreal-agents.8x8pilot.com | domain | no | medium | 2026-09-20 |
user-profile-staging.8x8.com | domain | yes | critical | 2026-09-20 |
user-profile.8x8.com | domain | yes | critical | 2026-09-20 |
vap.8x8.com | domain | no | critical | 2026-09-20 |
vcc-ce.8x8.com | domain | no | critical | 2026-09-20 |
video-agent.8x8.com | domain | no | high | 2026-09-20 |
voapi.8x8.com | domain | no | critical | 2026-09-20 |
work-staging.8x8.com | domain | yes | critical | 2026-09-20 |
work.8x8.com | domain | yes | critical | 2026-09-20 |
www.fuzemeeting.com | domain | no | low | 2026-09-20 |
Virtual Office Desktop | executable | no | critical | 2026-09-20 |
8x8-work | mobile | no | critical | 2026-09-20 |
org.vom8x8.sipua | mobile | no | critical | 2026-09-20 |
8x8 Partner Portal | other | no | high | 2026-09-20 |
ASN: AS10976 | other | no | low | 2026-09-20 |
ASN: AS133144 | other | no | critical | 2026-09-20 |
ASN: AS13896 | other | no | low | 2026-09-20 |
ASN: AS14294 | other | no | low | 2026-09-20 |
ASN: AS198554 | other | no | critical | 2026-09-20 |
ASN: AS199687 | other | no | critical | 2026-09-20 |
ASN: AS206422 | other | no | critical | 2026-09-20 |
ASN: AS32308 | other | no | critical | 2026-09-20 |
ASN: AS395362 | other | no | critical | 2026-09-20 |
ASN: AS398067 | other | no | critical | 2026-09-20 |
ASN: AS44965 | other | no | critical | 2026-09-20 |
ASN: AS46680 | other | no | critical | 2026-09-20 |
ASN: AS49856 | other | no | critical | 2026-09-20 |
ASN: AS62306 | other | no | critical | 2026-09-20 |
ASN: AS62876 | other | no | critical | 2026-09-20 |
Cloud Misconfigurations | other | no | critical | 2026-09-20 |
Discovered Leaked Credentials | other | no | high | 2026-09-20 |
Intellectual Property on Public Domains | other | yes | critical | 2026-09-20 |
Third Party Application | other | no | high | 2026-09-20 |
https://www.npmjs.com/package/@8x8/pui-partner-comm | other | no | high | 2026-09-20 |
https://github.com/jitsi | source code | no | low | 2026-09-20 |
*-vpn.8x8.com | wildcard | no | high | 2026-09-20 |
*.8x8.cloud | wildcard | no | critical | 2026-09-20 |
*.8x8.co.uk | wildcard | no | critical | 2026-09-20 |
*.8x8.com | wildcard | no | critical | 2026-09-20 |
*.8x8.engineering | wildcard | no | critical | 2026-09-20 |
*.8x8.id | wildcard | no | critical | 2026-09-20 |
*.8x8.studio | wildcard | no | medium | 2026-09-20 |
*.8x8.uk | wildcard | no | critical | 2026-09-20 |
*.8x8.vc | wildcard | no | critical | 2026-09-20 |
*.8x8cloud.net | wildcard | yes | critical | 2026-09-20 |
*.8x8e2e.com | wildcard | no | critical | 2026-09-20 |
*.8x8hosts.internal | wildcard | no | medium | 2026-09-20 |
*.8x8hosts.pilot | wildcard | no | medium | 2026-09-20 |
*.8x8pilot.com | wildcard | no | medium | 2026-09-20 |
*.8x8staging.com | wildcard | no | critical | 2026-09-20 |
*.8x8testa.com | wildcard | no | medium | 2026-09-20 |
*.8x8testb.com | wildcard | no | medium | 2026-09-20 |
*.acceptance.cloud.8x8.com | wildcard | no | high | 2026-09-20 |
*.ai.8x8.vc | wildcard | no | medium | 2026-09-20 |
*.call-control.ie | wildcard | no | critical | 2026-09-20 |
*.cceng.8x8.com | wildcard | no | medium | 2026-09-20 |
*.chalet.8x8.com | wildcard | yes | critical | 2026-09-20 |
*.fuze.com | wildcard | no | low | 2026-09-20 |
*.fuze.site | wildcard | no | low | 2026-09-20 |
*.in2tel.ie | wildcard | no | critical | 2026-09-20 |
*.jit.si | wildcard | no | critical | 2026-09-20 |
*.jitsi.net | wildcard | no | critical | 2026-09-20 |
*.labs.8x8.com | wildcard | no | high | 2026-09-20 |
*.mavenlab.com | wildcard | no | none | 2026-09-20 |
*.moobicast.com | wildcard | no | none | 2026-09-20 |
*.moobidesk.com | wildcard | no | none | 2026-09-20 |
*.ociadmin.cloud.8x8.com | wildcard | no | high | 2026-09-20 |
*.p8t.us | wildcard | yes | critical | 2026-09-20 |
23 out of scope — black ICE, don't touch
8x8.wavecell.comdomainaccountmanager.8x8.comdomainexpress.8x8.comdomainfeedback.wavecell.comdomainget8x8.comdomaininvestors.8x8.comdomainmobileidentity.8x8.comdomainsupersite.8x8.comdomainsupport.8x8.comdomainvm.8x8.comdomainwww.8x8.comdomainwww.wavecell.comdomainJitsi Meet Desktopexecutable8x8-meeting-roomsmobilecom.atlassian.JitsiMeet.iosmobilecom.spot8x8.spotmobileorg.jitsi.meetmobile*.bell.cawildcard*.msteams.8x8.comwildcardhttp://*.callstats.iowildcardhttp://*.contactnow.8x8.comwildcardhttp://*.jitsi.orgwildcardhttp://*.sameroom.iowildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.