Browse / Roblox

Roblox

See its reports on the map

Attack surface: 2,241 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Roblox

• Authentication1
• Insecure Direct Object Reference1
• Access Control1
• Cross-site Scripting1
• Denial of Service1

Most upvoted reports

AllValidInformativeN/ADuplicate

No reports with this status.