Skip to content
BackEsc
Connect AISign inSign up free

Amazon Vulnerability Research Program · in scope

Wildcard domains

27 assets in scope

Every dot is an asset the program lists in scope. The first 12 are named here; the program's own page has the full scope.

Connect AI

Open on HackerOne

Every one of the 27 is a mark on the map. Named now: 1 to 12, as listed first.

  1. *.amazon.aeWildcard domains
  2. *.amazon.caWildcard domains
  3. *.amazon.clWildcard domains
  4. *.amazon.cnWildcard domains
  5. *.amazon.co.jpWildcard domains
  6. *.amazon.co.ukWildcard domains
  7. *.amazon.co.zaWildcard domains
  8. *.amazon.comWildcard domains
  9. *.amazon.com.auWildcard domains
  10. *.amazon.com.beWildcard domains
  11. *.amazon.com.brWildcard domains
  12. *.amazon.com.coWildcard domains

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated