Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
mscisv3test.amazon.catestIn scope2026-11-14
sandbox.alexa.amazon.catestIn scope2026-11-14
l7amr-testing-102.amazon.catestIn scope2026-11-14
opf-kuru-testing98.amazon.catestIn scope2026-11-14
opf-kuru-testing001.amazon.catestIn scope2026-11-14
opf-kuru-testing002.amazon.catestIn scope2026-11-14
opf-kuru-testing003.amazon.catestIn scope2026-11-14
opf-kuru-testing004.amazon.catestIn scope2026-11-14
opf-kuru-testing008.amazon.catestIn scope2026-11-14
opf-kuru-testing009.amazon.catestIn scope2026-11-14
opf-kuru-testing011.amazon.catestIn scope2026-11-14
aero-standard-testing80.amazon.catestIn scope2026-11-14
aero-standard-testing81.amazon.catestIn scope2026-11-14
aero-standard-testing82.amazon.catestIn scope2026-11-14
aero-standard-testing83.amazon.catestIn scope2026-11-14
aero-standard-testing84.amazon.catestIn scope2026-11-14
aero-standard-testing85.amazon.catestIn scope2026-11-14
aero-standard-testing86.amazon.catestIn scope2026-11-14
aero-standard-testing87.amazon.catestIn scope2026-11-14
aero-standard-testing88.amazon.catestIn scope2026-11-14
opf-onboardingz-test-v9.amazon.catestIn scope2026-11-14
sandbox-business-agents.amazon.catestIn scope2026-11-14
aero-edge-testing79-exp2.amazon.catestIn scope2026-11-14
opf-onboardingz-test-v10.amazon.catestIn scope2026-11-14
aerostandard-test-amadarap.amazon.catestIn scope2026-11-14
aero-non-standard-testing234.amazon.catestIn scope2026-11-14
aero-non-standard-testing238.amazon.catestIn scope2026-11-14
aero-non-standard-testing239.amazon.catestIn scope2026-11-14
aero-standard-testing77-exp2.amazon.catestIn scope2026-11-14
aero-standard-testing78-exp2.amazon.catestIn scope2026-11-14
aero-standard-testing79-exp2.amazon.catestIn scope2026-11-14
opf-kuru-cname110-testing011.amazon.catestIn scope2026-11-14
opf-kuru-cname111-testing011.amazon.catestIn scope2026-11-14
opf-kuru-cname888-testing011.amazon.catestIn scope2026-11-14
aero-standard-cname8-testing86.amazon.catestIn scope2026-11-14
aero-standard-cname8-testing88.amazon.catestIn scope2026-11-14
cname-aero-standard-testing77-exp2.amazon.catestIn scope2026-11-14
origin-aero-non-standard-testing234.amazon.catestIn scope2026-11-14
origin-aero-non-standard-testing238.amazon.catestIn scope2026-11-14
origin-aero-non-standard-testing239.amazon.catestIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.