Skip to content

IONOS bug bounty programs

ionos.com Updated

IONOS runs one public program: a self-hosted disclosure program with no cash rewards.

Top reward
No cash
Disclosure only
Programs
1
None pays cash
Targets in scope
22
2 types
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program IONOS runs.

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

22 targets. 3 excluded.

  • stand out with .app, .nyc, .dev, and more

    Domains No bounty

  • www.ionos.com/ai-domain-name-generator

    Domains No bounty

  • www.ionos.com/domains/ai-domain

    Domains No bounty

  • www.ionos.com/domains/bulk-domain-search

    Domains No bounty

  • www.ionos.com/domains/com-domain

    Domains No bounty

  • www.ionos.com/domains/domain-guard

    Domains No bounty

  • www.ionos.com/domains/domain-names

    Domains No bounty

  • www.ionos.com/domains/domain-transfer

    Domains No bounty

  • www.ionos.com/domains/org-domain

    Domains No bounty

  • www.ionos.com/domains/us-domain

    Domains No bounty

  • www.ionos.com/momentum/ai-app-builder

    Domains No bounty

  • ai Domain

    Products and areas No bounty

  • AI Domain Name Generator

    Products and areas No bounty

  • Bulk Domain Search

    Products and areas No bounty

  • com Domain

    Products and areas No bounty

  • Domain Names

    Products and areas No bounty

  • Find your domain name faster with AI

    Products and areas No bounty

  • IONOS products and services

    Products and areas

  • New Top-Level Domains

    Products and areas No bounty

  • org Domain

    Products and areas No bounty

  • Register up to 50 domains with one search

    Products and areas No bounty

  • us Domain

    Products and areas No bounty

No target matches. Try part of a host name, such as the company name.

Out of scope 3

Don't test these. A program can exclude a host another program covers; the program you report to decides.

  • Denial of Service vulnerability (i.e. overwhelming our services with a high volume of requests)

  • Reports indicating that our services do not fully align with "best practice" (e.g. missing security headers or suboptimal email-related configurations such as SPF, DMARC etc.)

  • TLS configuration specifics (e.g. no support for TLSv1.3, a specific cipher suite configuration, etc.)

Recent changes

Reward and scope changes across every IONOS program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

About this page

This page gathers every public program listed under ionos.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.