Browse / TikTok

TikTok

See its reports on the map

Attack surface: 821 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to TikTok

• Cross-site Scripting34
• Access Control18
• Insecure Direct Object Reference17
• Cross-Site Request Forgery12
• Information Disclosure11
• Authentication6

Most upvoted reports

AllValidInformativeN/ADuplicate

No reports with this status.