Browse / Khan Academy

Khan Academy

See its reports on the map

Attack surface: 382 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Khan Academy

• Cross-site Scripting18
• Misconfiguration9
• Access Control8
• Information Disclosure8
• Cross-Site Request Forgery6
• Authentication4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Rate Limitation Vulnerability (DDos)DuplicateUncontrolled Resource Consumption · high
   2 votes