atg-bug-bounty-program-1

YesWeHackView on YesWeHack
RawAI Enhanced
13
In Scope
2
Out of Scope
In-Scope Assets (13)
AssetCategoryBountyQuick Links
auth-service.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
benefits.core.platform.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
boltapi.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
calendar-dates-service.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
calendar-service.core.platform.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
catalogue-service.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://apps.apple.com/gb/app/atg-tickets-theatre-tickets/id6657981147IOSYes-
https://play.google.com/store/apps/details?id=com.atgentertainment.atgticketsANDROIDYes
Play StoreAPKPureAPKMirror
postcode.core.platform.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
session-service.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
venue-order-consumer.fb.platform.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
websocket-gateway.core.platform.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
www.atgtickets.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (2)
AssetCategoryBounty
- All domains or subdomains not listed in the above list of "Scopes"OTHERYes
- Any purchase flows using a "direct debit" payment methodOTHERYes
Scope Changes (15)
Apr 16, 2026
ChangeAssetCategoryScopeTime
Addedwww.atgtickets.comURLIn Scope18:33
Addedauth-service.atgtickets.comURLIn Scope18:33
Addedbenefits.core.platform.atgtickets.comURLIn Scope18:33
Addedboltapi.atgtickets.comURLIn Scope18:33
Addedcalendar-dates-service.atgtickets.comURLIn Scope18:33
Addedcalendar-service.core.platform.atgtickets.comURLIn Scope18:33
Addedcatalogue-service.atgtickets.comURLIn Scope18:33
Addedpostcode.core.platform.atgtickets.comURLIn Scope18:33
Addedsession-service.atgtickets.comURLIn Scope18:33
Addedvenue-order-consumer.fb.platform.atgtickets.comURLIn Scope18:33
Addedwebsocket-gateway.core.platform.atgtickets.comURLIn Scope18:33
Addedhttps://apps.apple.com/gb/app/atg-tickets-theatre-tickets/id6657981147IOSIn Scope18:33
Addedhttps://play.google.com/store/apps/details?id=com.atgentertainment.atgticketsANDROIDIn Scope18:33
Added- all domains or subdomains not listed in the above list of "scopes"OTHEROut of Scope18:33
Added- any purchase flows using a "direct debit" payment methodOTHEROut of Scope18:33