SG
HackerOneOffers Rewards
SIX Group
SIX Group appears to run a bug bounty or vulnerability disclosure program on HackerOne. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (57)
146.109.1.0/24
146.109.140.0/24
146.109.141.0/24
146.109.142.0/24
146.109.143.0/24
146.109.148.0/24
146.109.149.0/24
146.109.150.0/24
146.109.151.0/24
146.109.161.0/24
146.109.2.0/24
146.109.3.0/24
146.109.4.0/24
146.109.64.0/24
146.109.65.0/24
146.109.66.0/24
146.109.67.0/24
146.109.68.0/24
146.109.8.0/21
146.109.8.0/22
153.46.0.0/16
153.46.104.0/22
153.46.108.0/22
153.46.111.0/24
153.46.162.0/23
153.46.176.0/22
153.46.240.0/20 ( ## Known Issues The following vulnerabilities have been identified and are currently being addressed. Reports of these issues will be closed as duplicates: - Cross-Site Scripting (XSS) vulnerabilities on `secure.tkfweb.com`.
- This includes any reflected or stored XSS in input parameters on any endpoint within this domain. )
153.46.30.0/23
153.46.32.0/23
153.46.34.0/23
153.46.48.0/22
153.46.96.0/20
174.44.253.152/29
185.210.32.0/22
193.109.229.0/24 ( ## Known Issues
The following vulnerabilities have been identified and are currently being addressed. Reports of these issues will be closed as duplicates:
- Cross-Site Scripting (XSS) vulnerabilities on `*.bmeinntech.es`.
- This includes any reflected or stored XSS in input parameters on any endpoint within this domain. )
193.110.154.0/24
193.5.66.0/23
193.8.251.0/24
194.209.121.0/24
194.35.79.0/24
212.95.227.64/26
62.192.20.16/29
http://ibt-test.six-group.com
https://apps.apple.com/ch/app/debix/id1581440132?l=en-GB
https://apps.apple.com/mx/app/debix/id1581440132
https://apps.apple.com/mx/app/six-id/id1620496931
https://apps.apple.com/us/app/bme-conecta/id6443938949
https://disclosure-test.six-exchange-regulation.com/
https://fx-qa.np.bolsasymercados.es/
https://play.google.com/store/apps/details?id=com.sixgroup.debixplus
https://play.google.com/store/apps/details?id=com.sixgroup.id&hl=en_US&pli=1
https://play.google.com/store/apps/details?id=es.grupobme.bmeconecta
https://secure-test.six-swiss-exchange.com/
https://web3.sdx.com
https://www.sdx.com/
www.bolsasymercados.es
www.six-group.com
Out of Scope (13)
*.sixidmobile.com
153.46.254.150
193.109.229.71
194.98.112.0/24
213.41.106.0/24
http://ibt.six-group.com
https://apps.apple.com/mx/app/schweizer-finanzmuseum/id1225222871
https://bmefx.es/
https://disclosure.six-exchange-regulation.com/
https://play.google.com/store/search?q=Schweizer+Finanzmuseum&c=apps
https://providerhub.six-group.com/
https://www.six-structured-products.com/
saferpay.com