IN
IntigritiOffers Rewards
Innogames
Innogames appears to run a bug bounty or vulnerability disclosure program on Intigriti. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (5)
Backend/Non-Game ( * *.igpayment.com | This is our payment environment used in all of our games. | * *.innogames.de | This wildcard hosts backend services, which are not intended to be seen by end users. | * login.innogames.de | This is our central login and account management tool. We do not provide accounts for this service and there are no registration pages available. | * *.innogames.com | * www.innogames.com | ***Please do not send applications through the application form. This is a 3rd party tool and out-of-scope.*** | * support.innogames.com | ***Please avoid creating many new tickets, but instead concentrate your testing on the ticket contents.*** | **Note for automated-scanning:** | We are happy that you are as enthusiastic as we are about this program! | To not impact our live-systems and other researchers too much, we ask you to keep your automated scanners on a scan rate of 1 request/s. )
Elvenar ( * xs-play.elvenar.com | The landing page for the game login. | * xs0.elvenar.com | The master server, which performs authentication and holds inventory of "game-world-wide" player data. | * xs1.elvenar.com | This is the actual game world, where the game takes place. )
Forge of Empires ( * xs-play.forgeofempires.com | The landing page for the game login. | * xs0.forgeofempires.com | The master server, which performs authentication and holds inventory of "game-world-wide" player data. | * xs1.forgeofempires.com | This is the actual game world, where the game takes place. )
Grepolis ( * xs-play.grepolis.com | The landing page for the game login. | * xs0.grepolis.com | The master server, which performs authentication and holds inventory of "game-world-wide" player data. | * xs1.grepolis.com | This is the actual game world, where the game takes place. )
Tribal Wars ( * tribalwars.cash / xs0.tribalwars.cash | The master server, which performs authentication and holds inventory of "game-world-wide" player data.. | * xs(1-3).tribalwars.cash | These are the actual game worlds, where the game takes place. )
Out of Scope (9)
autodiscover.innogames.de
exchange.innogames.de
igjam.eu
jamf.innogames.com
mail.innogames.com
newsroom.innogames.com
pn.innogames.com
slack.innogames.de
typingmind.innogames.de