Programs
Companies
REA Group Ltd

REA Group Ltd bug bounty programs

rea-group.com Updated 12 Nov 2026

REA Group Ltd runs three public programs: a Bugcrowd bug bounty paying up to $4,500, a self-hosted bug bounty and a security.txt bug bounty.

Top reward: $4,500; Bugcrowd
Programs: 3; 3 pay cash
Targets in scope: 34; 7 types, deduplicated
Last change: None yet; Tracked since Nov 2026

Where to report

3 programs, side by side. Report where the affected target is in scope; when two programs cover it, pick the one that pays more.

Start here

REA Group | realestate.com.au, realcommercial.com.au, property.com.au

Bugcrowd · Pays the most of the 3 programs: up to $4,500.

REA Group Ltd programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.
Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
REA Group \| realestate.com.au, realcommercial.com.au, property.com.au Bugcrowd · Bug bounty	$4,500 (highest)	$2,500 (highest)	$750 (highest)	$200 (highest)	$4,500	Full	–	–	Open
REA Group Ltd Self-hosted · Bug bounty	–	–	–	–	Not published	Full	–	5 days promised	Open
REA Group Ltd security.txt · Bug bounty	–	–	–	–	Not published	Full	–	5 days promised	Open

REA Group | realestate.com.au, realcommercial.com.au, property.com.au
Bugcrowd · Bug bounty

Open

Top reward
$4,500

Critical

$4,500 (highest)

High

$2,500 (highest)

Medium

$750 (highest)

Low

$200 (highest)

Safe harbor

Full
REA Group Ltd
Self-hosted · Bug bounty

Open

Top reward
Not published

Safe harbor

Full

First response

5 days promised
REA Group Ltd
security.txt · Bug bounty

Open

Top reward
Not published

Safe harbor

Full

First response

5 days promised

Amounts are the top reward per severity in the currency each program pays. Green marks the highest per severity. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

34 targets across all 3 programs, each listed once with the programs that cover it. 129 excluded.

*.accounts.realestate.com.au

Wildcards

Covered by Bugcrowd
*.api.id.realestate.com.au

Wildcards

Covered by Bugcrowd
*.demo.bp.mortgagechoice.com.au

Wildcards

Covered by Bugcrowd
https://*.report.uat.proptrack.com

Wildcards

Covered by Bugcrowd
*.id.realestate.com.au

Wildcards

Covered by Bugcrowd
*.mclead.com.au

Wildcards

Covered by Bugcrowd
*.mortgagechoice.com.au

Wildcards

Covered by Bugcrowd
*.realestate.com.au

Wildcards

Covered by Bugcrowd
*.smartline.com.au

Wildcards

Covered by Bugcrowd
flatmates.com.au

Domains

Covered by security.txt
mortgagechoice.com.au

Domains

Covered by security.txt
realcommercial.com.au

Domains

Covered by security.txt
realestate.com.au

Domains

Covered by security.txt
https://access-sit.uat.proptrack.com

Web

Covered by Bugcrowd
https://desktop-sit.uat.proptrack.com

Web

Covered by Bugcrowd
https://explore-sit.uat.proptrack.com

Web

Covered by Bugcrowd
https://next.flatmates.com.au

Web

Covered by Bugcrowd
https://one-sit.uat.proptrack.com

Web

Covered by Bugcrowd
https://portfolio-manager-sit.uat.proptrack.com

Web

Covered by Bugcrowd
https://valuations-sit.uat.proptrack.com

Web

Covered by Bugcrowd
https://www.developersites.com.au/testing-2505-houston

Web

Covered by Bugcrowd
https://www.developersites.com.au/testing-2505-lms

Web

Covered by Bugcrowd
https://www.proptrack.com

Web

Covered by Bugcrowd
https://www.proptrack.com.au

Web

Covered by Bugcrowd
https://www.realcommercial.com.au

Web

Covered by Bugcrowd
property.com.au

Web

Covered by Bugcrowd, security.txt
rea-group.com

Web

Covered by Bugcrowd
reastatic.net

Web

Covered by Bugcrowd
scripts.developersites.com.au

Web

Covered by Bugcrowd
https://agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e

APIs

Covered by Bugcrowd
https://api-next.flatmates.com.au

APIs

Covered by Bugcrowd
https://play.google.com/store/apps/details?id=au.com.realestate.app

Android

Covered by Bugcrowd
https://apps.apple.com/au/app/realestate-com-au-property/id404667893

iOS

Covered by Bugcrowd
sftp://ftp.developersites.com.au:45875

IP ranges

Covered by Bugcrowd

No target matches. Try part of a host name, such as the company name.

Out of scope 129

Don't test these. A program can exclude a host another program covers; the program you report to decides.

*.agent.realcommercial.com.au

Bugcrowd
*.apps.mortgagechoice.com.au

Bugcrowd
*.athena.com.au

Bugcrowd
*.bp.mortgagechoice.com.au

Bugcrowd
*.bpm.mortgagechoice.com.au

Bugcrowd
*.campaignagent.com.au

Bugcrowd
*.easiloan.com

Bugcrowd
*.email.rea-group.com

Bugcrowd
*.email.realcommercial.com.au

Bugcrowd
*.flatmates.com.au

Bugcrowd
*.housing.com

Bugcrowd
https://www.proptrack.com.au/contact-us/*

Bugcrowd
*.leads.developersites.com.au

Bugcrowd
*.lendingtoolkit.mortgagechoice.com.au

Bugcrowd
*.makaan.com

Bugcrowd
*.prime.mortgagechoice.com.au

Bugcrowd
*.primeuat.mortgagechoice.com.au

Bugcrowd
*.propertypanel.realestate.com.au

Bugcrowd
*.proptiger.com

Bugcrowd
*.proptrack.com

Bugcrowd
*.proptrack.com.au

Bugcrowd
realcommercial.com.au/contact-agency-commercial/*

Bugcrowd
realcommercial.com.au/mobile/enquiries/*/*

Bugcrowd
*.realestate.com.au/homeloans

Bugcrowd
*.realtair.com

Bugcrowd
*.realtair.realestate.com.au

Bugcrowd
*.realtor.com

Bugcrowd
services.mortgagechoice.com.au/Services/NextGenIntegrator/*

Bugcrowd
*.simpology.com.au

Bugcrowd
*.spacely.com.au

Bugcrowd
www.developersites.com.au/*

Bugcrowd
abmail.campaign.realcommercial.com.au

Bugcrowd
analytics[.e2e].realestate.com.au

Bugcrowd
autodiscover.property.com.au

Bugcrowd
autodiscover.rea-group.com

Bugcrowd
autodiscover.realcommercial.com.au

Bugcrowd
cloudhq.mortgagechoice.com.au

Bugcrowd
cloudhqforms.mortgagechoice.com.au

Bugcrowd
email.property.com.au

Bugcrowd
garage.rea-group.com

Bugcrowd
help.enterprise.rea-group.com

Bugcrowd
help.property.com.au

Bugcrowd
help.rea-group.com

Bugcrowd
homeloans.realestate.com.au

Bugcrowd
http://images.media-comms.realestate.com.au

Bugcrowd
https://adslot.realestate.com.au

Bugcrowd
https://api.leads.developersites.devlob-staging.realestate.com.au

Bugcrowd
https://avm-sit.uat.proptrack.com

Bugcrowd
https://everest.realestate.com.au

Bugcrowd
https://help.flatmates.com.au

Bugcrowd
https://help.realestate.com.au

Bugcrowd
https://images.mediateam.realestate.com.au

Bugcrowd
https://metrics.realestate.com.au

Bugcrowd
https://sasinator.flatmates.com.au

Bugcrowd
https://stg-api.realtair.gateway.ignite.realestate.com.au

Bugcrowd
https://stg-pitch.realtair.gateway.ignite.realestate.com.au

Bugcrowd
https://support.realestate.com.au

Bugcrowd
https://tags.realestate.com.au

Bugcrowd
https://video.realestate.com.au

Bugcrowd
https://widgets-api-sit.uat.proptrack.com

Bugcrowd
https://www.flatmates.com.au

Bugcrowd
https://www.realestate.com.au/advice

Bugcrowd
https://www.realestate.com.au/insights

Bugcrowd
info.property.com.au

Bugcrowd
metrics.realcommercial.com.au

Bugcrowd
propertypanel.realcommercial.com.au

Bugcrowd
propertypanelcontent.realcommercial.com.au

Bugcrowd
realcommercial.com.au/building/enquiry

Bugcrowd
realcommercial.com.au/listing-ui/enquiry

Bugcrowd
realestate.com.au/advice

Bugcrowd
realestate.com.au/lifestyle

Bugcrowd
realestate.com.au/podcasts

Bugcrowd
realtair-buy.realestate.com.au

Bugcrowd
realtair-sell.realestate.com.au

Bugcrowd
research.surveys.realcommercial.com.au

Bugcrowd
sasinator.realestate.com.au

Bugcrowd
smetrics.realcommercial.com.au

Bugcrowd
smetrics.realestate.com.au

Bugcrowd
support.realcommercial.com.au

Bugcrowd
university.rea-group.com

Bugcrowd
website.proptrack.com.au

Bugcrowd
zac80040032.mortgagechoice.com.au

Bugcrowd
https://api.flatmates.com.au

Bugcrowd
https://developer.proptrack.com.au

Bugcrowd
https://flatmates-experience-api.flatmates.com.au

Bugcrowd
email.flatmates.com.au

Bugcrowd
autodiscover.mortgagechoice.net.au

Bugcrowd
awverify.*.mortgagechoice.com.au

Bugcrowd
bh5po56arjfv.mortgagechoice.com.au

Bugcrowd
broker.mortgagechoice.com.au

Bugcrowd
calendar.mortgagechoice.com.au

Bugcrowd
cpt.mortgagechoice.com.au

Bugcrowd
dashboard.mortgagechoice.com.au

Bugcrowd
docs.mortgagechoice.com.au

Bugcrowd
documents.mortgagechoice.com.au

Bugcrowd
ecomply.mortgagechoice.com.au

Bugcrowd
elink.mortgagechoice.com.au

Bugcrowd
em1997.mortgagechoice.com.au

Bugcrowd
em398464.mortgagechoice.com.au

Bugcrowd
em8918.mortgagechoice.com.au

Bugcrowd
enterpriseenrollment.mortgagechoice.net.au

Bugcrowd
enterpriseregistration.mortgagechoice.net.au

Bugcrowd
fil.mortgagechoice.com.au

Bugcrowd
go.mortgagechoice.com.au

Bugcrowd
groups.mortgagechoice.com.au

Bugcrowd
hbvuanp6xgfw.mortgagechoice.com.au

Bugcrowd
home.mortgagechoice.com.au

Bugcrowd
info.lp.mortgagechoice.com.au

Bugcrowd
learn.mortgagechoice.com.au

Bugcrowd
links-*.mortgagechoice.com.au

Bugcrowd
lyncdiscover.mortgagechoice.net.au

Bugcrowd
mail.mortgagechoice.com.au

Bugcrowd
mcmoneytrack.mortgagechoice.com.au

Bugcrowd
msoid.mortgagechoice.net.au

Bugcrowd
*myhub*.mortgagechoice.com.au

Bugcrowd
one.mortgagechoice.com.au

Bugcrowd
project-*.mortgagechoice.com.au

Bugcrowd
questions.mortgagechoice.com.au

Bugcrowd
servicefo.mortgagechoice.com.au

Bugcrowd
servicemorfo.mortgagechoice.com.au

Bugcrowd
sip.mortgagechoice.net.au

Bugcrowd
sites.mortgagechoice.com.au

Bugcrowd
slxtest.mortgagechoice.com.au

Bugcrowd
sta.mortgagechoice.com.au

Bugcrowd
trackinsight.mortgagechoice.com.au

Bugcrowd
video.mortgagechoice.com.au

Bugcrowd
wave.mortgagechoice.com.au

Bugcrowd
web-*.mortgagechoice.com.au

Bugcrowd
zendesk*.mortgagechoice.com.au

Bugcrowd

Recent changes

Reward and scope changes across every REA Group Ltd program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

About this page

This page gathers every public program listed under rea-group.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.