RE
HackerOneOffers Rewards
Redox
Redox appears to run a bug bounty or vulnerability disclosure program on HackerOne. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (9)
10x.redoxengine.com
docs.redoxengine.com
explore.redoxengine.com ( This is a marketing site with all public information. Findings here have lesser security implication than our application )
fhir.redoxengine.com
help.redoxengine.com
test*.redoxengine.com
testapi.redoxengine.com
testapp.redoxengine.com
www.redoxengine.com ( This is our wordpress marketing site. Findings here have lesser security implication than our application )
Out of Scope (6)
api.redoxengine.com ( Please ensure all testing is performed against the staging instance at testapi.redoxengine.com )
candi.redoxengine.com ( Please ensure all testing is performed against the staging instance at testapp.redoxengine.com )
dashboard.redoxengine.com ( Please ensure all testing is performed against the staging instance at 10x.redoxengine.com )
https://redoxengine.atlassian.net ( Internal Jira is out of scope )
redox.slack.com ( Internal Slack is out of scope )
sso.redoxengine.com