YWH YesWeHack LIVE
Infomaniak Bug Bounty program
€100 –€7,000
Open on YesWeHack ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- no
51 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.infomaniak.com | api | · | · | 2026-09-20 |
5k8vrbdyje.infomaniak.site | domain | · | · | 2026-09-20 |
api.pub1.infomaniak.cloud | domain | · | · | 2026-09-20 |
api.pub2.infomaniak.cloud | domain | · | · | 2026-09-20 |
calendar.infomaniak.com | domain | · | · | 2026-09-20 |
chk.infomaniak.com | domain | · | · | 2026-09-20 |
contacts.infomaniak.com | domain | · | · | 2026-09-20 |
etickets.infomaniak.com | domain | · | · | 2026-09-20 |
euria.infomaniak.com | domain | · | · | 2026-09-20 |
fv3lfbdyjh.infomaniak.site | domain | · | · | 2026-09-20 |
hosting-ik.com | domain | · | · | 2026-09-20 |
infomaniak.events | domain | · | · | 2026-09-20 |
ix2smbdyjt.infomaniak.site | domain | · | · | 2026-09-20 |
kmeet.infomaniak.com | domain | · | · | 2026-09-20 |
kpaste.infomaniak.com | domain | · | · | 2026-09-20 |
ksuite.infomaniak.com | domain | · | · | 2026-09-20 |
l75pvbdyjo.infomaniak.site | domain | · | · | 2026-09-20 |
login.infomaniak.com | domain | · | · | 2026-09-20 |
mail.infomaniak.com | domain | · | · | 2026-09-20 |
player-radio.infomaniak.com | domain | · | · | 2026-09-20 |
shop.infomaniak.com | domain | · | · | 2026-09-20 |
swisstransfer.infomaniak.com | domain | · | · | 2026-09-20 |
sync.infomaniak.com | domain | · | · | 2026-09-20 |
vod.infomaniak.com | domain | · | · | 2026-09-20 |
welcome.infomaniak.com | domain | · | · | 2026-09-20 |
www.infomaniak.com | domain | · | · | 2026-09-20 |
www.swisstransfer.com | domain | · | · | 2026-09-20 |
https://github.com/Infomaniak/desktop-kDrive | executable | · | · | 2026-09-20 |
https://apps.apple.com/app/infomaniak-kdrive/id1482778676 | mobile | · | · | 2026-09-20 |
https://apps.apple.com/fr/app/infomaniak-authenticator/id1478424817 | mobile | · | · | 2026-09-20 |
https://apps.apple.com/fr/app/infomaniak-euria/id6754152858 | mobile | · | · | 2026-09-20 |
https://apps.apple.com/fr/app/infomaniak-kchat/id6443845553 | mobile | · | · | 2026-09-20 |
https://apps.apple.com/fr/app/infomaniak-mail/id1622596573 | mobile | · | · | 2026-09-20 |
https://apps.apple.com/fr/app/infomaniak-swisstransfer/id6737686335 | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.infomaniak.auth | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.infomaniak.chat | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.infomaniak.drive | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.infomaniak.euria | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.infomaniak.mail | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.infomaniak.sync | mobile | · | · | 2026-09-20 |
*.infomaniak.com | wildcard | · | · | 2026-09-20 |
*.kchat.infomaniak.com | wildcard | · | · | 2026-09-20 |
*.kdrive.infomaniak.com | wildcard | · | · | 2026-09-20 |
*.vod2.infomaniak.com | wildcard | · | · | 2026-09-20 |
kdrive.infomaniak.com/app/*/preview/* | wildcard | · | · | 2026-09-20 |
kdrive.infomaniak.com/app/office*/* | wildcard | · | · | 2026-09-20 |
ksuite.infomaniak.com/*/kdrive/*/preview/* | wildcard | · | · | 2026-09-20 |
manager.infomaniak.com/v3/* | wildcard | · | · | 2026-09-20 |
storage*.infomaniak.com | wildcard | · | · | 2026-09-20 |
swiss-backup*.infomaniak.com | wildcard | · | · | 2026-09-20 |
17 out of scope — black ICE, don't touch
Assets not listed in the in scope section are to be considered as out of the scope of this program and won't be eligible for rewardotherDatabase service instances from customers, like *.dbaas.infomaniak.cloudotherFTP credentials from our customers, like *.ftp.infomaniak.comotherInformation returned by /get-tickets-infos (including organizer, event_name, event_date, command_date, and masked email) is out of scopeotherJelastic subdomains : *.jcloud.ik-server.com, *.jpc.infomaniak.com, *.jpe.infomaniak.comotherMoving or copying calendar events / contacts between containers by read-write collaborators (intended behavior)otherMySQL credentials from our customers, like *.myd.infomaniak.comotherS3 credentials from our customers, like s3.pub*.infomaniak.cloudotherThis domain https://drive.infomaniak.com/app/office/:folder:/:file: is out of scope. This is only office application, an external app to open MS office documents.otherUser email verificationotherVPS instances from our customers, like *.vps.infomaniak.comotherWe do not manage Open Stack dashboard which is therefore out of scopeotherWebsocket IPS-public credentials (MQTT, info-mq, IPS_RABBIT, ips-public). Public identifiers that do not allow access to information outside the scope of the user's profile.otheracronis.infomaniak.comotherov-XX.infomaniak.ch and od-XX.infomaniak.ch sub domainsotherpartner program : pages about finding partner and sending offer / All routes ending with /partners/tenderotherstorage*.infomaniak.com/newsletter/thumbnails/*other
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.