Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,561

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,561

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
a9g-api.amazon.comapiIn scope2026-11-14
a9g-api-eu.amazon.comapiIn scope2026-11-14
a9g-api-fe.amazon.comapiIn scope2026-11-14
aax-vx-api-us-east-1.amazon.comapiIn scope2026-11-14
ab-api-frontend-eu-prod.amazon.comapiIn scope2026-11-14
ab-api-frontend-fe-prod.amazon.comapiIn scope2026-11-14
ab-api-frontend-na-gamma.amazon.comapiIn scope2026-11-14
ab-api-frontend-na-prod.amazon.comapiIn scope2026-11-14
accesspoints-api.amazon.comapiIn scope2026-11-14
accesspoints-api-eu.amazon.comapiIn scope2026-11-14
accesspoints-api-fe.amazon.comapiIn scope2026-11-14
accesspoints-api-na.amazon.comapiIn scope2026-11-14
accesspoints-api-sandbox-eu.amazon.comapi, testIn scope2026-11-14
accesspoints-api-sandbox-fe.amazon.comapi, testIn scope2026-11-14
accesspoints-api-sandbox-na.amazon.comapi, testIn scope2026-11-14
advertising-api.amazon.comapiIn scope2026-11-14
advertising-api-cn.amazon.comapiIn scope2026-11-14
advertising-api-eu.amazon.comapiIn scope2026-11-14
advertising-api-fe.amazon.comapiIn scope2026-11-14
advertising-api-test.amazon.comapi, testIn scope2026-11-14
advertising-api-test-cn.amazon.comapi, testIn scope2026-11-14
advertising-api-test-eu.amazon.comapi, testIn scope2026-11-14
advertising-api-test-fe.amazon.comapi, testIn scope2026-11-14
console.advertising-api.amazon.comadmin, apiIn scope2026-11-14
api-dashboard-iad-ec2.aea.amazon.comadmin, apiIn scope2026-11-14
oncall-api-corp.aea.amazon.comapi, internalIn scope2026-11-14
sauron-v2-api-midway-beta-corp.aea.amazon.comapi, internal, stagingIn scope2026-11-14
sauron-v2-api-midway-corp.aea.amazon.comapi, internalIn scope2026-11-14
sauron-v2-api-midway-gamma-corp.aea.amazon.comapi, internalIn scope2026-11-14
sim-ticketing-graphql-devo-corp.aea.amazon.comapi, internalIn scope2026-11-14
sim-ticketing-graphql-fleet-corp.aea.amazon.comapi, internalIn scope2026-11-14
gateway-api.us-west-2.aea.amazon.comapiIn scope2026-11-14
af-mobile-api.amazon.comapiIn scope2026-11-14
af-mobile-api-preprod.amazon.comapi, stagingIn scope2026-11-14
aftxcommon-apigateway.na.integ.aftx.amazon.comapiIn scope2026-11-14
api-dryad.aka.amazon.comapiIn scope2026-11-14
api-optimus-beta.aka.amazon.comapi, stagingIn scope2026-11-14
blackmirror-api-apa.aka.amazon.comapiIn scope2026-11-14
blackmirror-api-fordca.aka.amazon.comapiIn scope2026-11-14
blackmirror-api-forlck.aka.amazon.comapiIn scope2026-11-14
blackmirror-api-lck.aka.amazon.comapiIn scope2026-11-14
blackmirror-api-tcp-gamma.aka.amazon.comapiIn scope2026-11-14
cdex-portal-api-fra.aka.amazon.comapiIn scope2026-11-14
cdex-portal-api-zaz.aka.amazon.comapiIn scope2026-11-14
cube-api-dub.aka.amazon.comapiIn scope2026-11-14
cube-api-pdx.aka.amazon.comapiIn scope2026-11-14
cube-api-syd.aka.amazon.comapiIn scope2026-11-14
elb-scope-alpha-api.aka.amazon.comapi, stagingIn scope2026-11-14
elb-scope-beta-api.aka.amazon.comapi, stagingIn scope2026-11-14
elb-scope-cdg-api.aka.amazon.comapiIn scope2026-11-14
elb-scope-gamma-api.aka.amazon.comapiIn scope2026-11-14
elb-scope-pdt-api.aka.amazon.comapiIn scope2026-11-14
elb-scope-regionbuild-api.aka.amazon.comapiIn scope2026-11-14
elb-scope-zhy-api.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-bah.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-bjs.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-cgk.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-cpt.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-dxb.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-gru.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-hyd.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-kix.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-mel.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-mxp.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-pdx.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-preprod-bjs.aka.amazon.comapi, stagingIn scope2026-11-14
grover-schnapps-api-preprod-cmh.aka.amazon.comapi, stagingIn scope2026-11-14
grover-schnapps-api-preprod-yul.aka.amazon.comapi, stagingIn scope2026-11-14
grover-schnapps-api-tlv.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-zaz.aka.amazon.comapiIn scope2026-11-14
grover-schnapps-api-zrh.aka.amazon.comapiIn scope2026-11-14
hwmon-api-akl.aka.amazon.comapiIn scope2026-11-14
hwmon-api-arn.aka.amazon.comapiIn scope2026-11-14
hwmon-api-bah.aka.amazon.comapiIn scope2026-11-14
hwmon-api-bjs.aka.amazon.comapiIn scope2026-11-14
hwmon-api-bkk.aka.amazon.comapiIn scope2026-11-14
hwmon-api-bom.aka.amazon.comapiIn scope2026-11-14
hwmon-api-cdg.aka.amazon.comapiIn scope2026-11-14
hwmon-api-cgk.aka.amazon.comapiIn scope2026-11-14
hwmon-api-cmh.aka.amazon.comapiIn scope2026-11-14
hwmon-api-cpt.aka.amazon.comapiIn scope2026-11-14
hwmon-api-dal.aka.amazon.comapiIn scope2026-11-14
hwmon-api-dub.aka.amazon.comapiIn scope2026-11-14
hwmon-api-dxb.aka.amazon.comapiIn scope2026-11-14
hwmon-api-forwarder.aka.amazon.comapiIn scope2026-11-14
hwmon-api-fra.aka.amazon.comapiIn scope2026-11-14
hwmon-api-global.aka.amazon.comapiIn scope2026-11-14
hwmon-api-gru.aka.amazon.comapiIn scope2026-11-14
hwmon-api-hkg.aka.amazon.comapiIn scope2026-11-14
hwmon-api-hyd.aka.amazon.comapiIn scope2026-11-14
hwmon-api-iad.aka.amazon.comapiIn scope2026-11-14
hwmon-api-icn.aka.amazon.comapiIn scope2026-11-14
hwmon-api-kix.aka.amazon.comapiIn scope2026-11-14
hwmon-api-kul.aka.amazon.comapiIn scope2026-11-14
hwmon-api-lab-pdx.aka.amazon.comapiIn scope2026-11-14
hwmon-api-lhr.aka.amazon.comapiIn scope2026-11-14
hwmon-api-mdw.aka.amazon.comapiIn scope2026-11-14
hwmon-api-mel.aka.amazon.comapiIn scope2026-11-14
hwmon-api-mxp.aka.amazon.comapiIn scope2026-11-14
hwmon-api-nrt.aka.amazon.comapiIn scope2026-11-14

90,560 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in