Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| access-service-sso.amazon.comauth, vpn | In scope | 2026-11-14 |
| sso.account.amazon.comauth | In scope | 2026-11-14 |
| caswebsitecontent-beta.cas.advertising.amazon.comauth, staging | In scope | 2026-11-14 |
| caswebsitecontent-beta-iad.cas.advertising.amazon.comauth, staging | In scope | 2026-11-14 |
| caswebsitecontent-prod-dub.cas.advertising.amazon.comauth | In scope | 2026-11-14 |
| caswebsitecontent-prod-iad.cas.advertising.amazon.comauth | In scope | 2026-11-14 |
| caswebsitecontent-prod-pdx.cas.advertising.amazon.comauth | In scope | 2026-11-14 |
| iam-dashboard-corp.aea.amazon.comadmin, auth, internal | In scope | 2026-11-14 |
| auth.na.integ.aftx.amazon.comauth | In scope | 2026-11-14 |
| tbabbar-moveapp.auth.na.integ.aftx.amazon.comauth | In scope | 2026-11-14 |
| ailab-auth.amazon.comauth | In scope | 2026-11-14 |
| bindle-service-gamma-sso.aka.amazon.comauth | In scope | 2026-11-14 |
| bindle-service-sso.aka.amazon.comauth | In scope | 2026-11-14 |
| identity-streamquery-eu.aka.amazon.comauth | In scope | 2026-11-14 |
| identity-streamquery-na.aka.amazon.comauth | In scope | 2026-11-14 |
| lily-telecom-identity-website.aka.amazon.comauth | In scope | 2026-11-14 |
| midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| anfalh.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| berkleyu.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| cplunk.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| drchawda.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| jbutchko.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| jianwech.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| test.jianwech.regportal.midway-auth-integ.aka.amazon.comauth, test | In scope | 2026-11-14 |
| testing.jianwech.regportal.midway-auth-integ.aka.amazon.comauth, test | In scope | 2026-11-14 |
| jwmart.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| kitharak.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| api.kitharak.regportal.midway-auth-integ.aka.amazon.comapi, auth | In scope | 2026-11-14 |
| liamdr.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| martmao.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| rahultum.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| rahultumdev.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| saideepr.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| yuxinson.regportal.midway-auth-integ.aka.amazon.comauth | In scope | 2026-11-14 |
| prime-session-tracer-auth-proxy.aka.amazon.comauth | In scope | 2026-11-14 |
| auth.artists.amazon.comauth | In scope | 2026-11-14 |
| audible-auth.amazon.comauth | In scope | 2026-11-14 |
| auth-6pm-na.amazon.comauth | In scope | 2026-11-14 |
| auth-6pm-na-tcp.amazon.comauth | In scope | 2026-11-14 |
| auth-findzen-na.amazon.comauth | In scope | 2026-11-14 |
| auth-goat.amazon.comauth | In scope | 2026-11-14 |
| auth-goat-gamma.amazon.comauth | In scope | 2026-11-14 |
| auth-key.amazon.comauth | In scope | 2026-11-14 |
| auth-rookieusa-na.amazon.comauth | In scope | 2026-11-14 |
| auth-shopbop.amazon.comauth | In scope | 2026-11-14 |
| auth-vrsnl-na.amazon.comauth | In scope | 2026-11-14 |
| auth-woot.amazon.comauth | In scope | 2026-11-14 |
| auth-zappos-na.amazon.comauth | In scope | 2026-11-14 |
| auth-zappos-na-tcp.amazon.comauth | In scope | 2026-11-14 |
| auth-zapposcouture-na.amazon.comauth | In scope | 2026-11-14 |
| auth-zapposcouture-na-tcp.amazon.comauth | In scope | 2026-11-14 |
| hiring.auth.amazon.comauth | In scope | 2026-11-14 |
| aws-iam-admin-gamma.amazon.comadmin, auth | In scope | 2026-11-14 |
| aws-iam-sts-gamma.amazon.comauth | In scope | 2026-11-14 |
| aws-identity-broker.amazon.comauth | In scope | 2026-11-14 |
| aws-signin-gamma.amazon.comauth | In scope | 2026-11-14 |
| aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| af-south-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-east-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-east-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| wildcard.ap-east-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-northeast-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-northeast-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-northeast-3.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-south-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-south-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-southeast-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-southeast-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-southeast-3.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-southeast-4.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-southeast-5.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-southeast-6.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| wildcard.ap-southeast-6.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ap-southeast-7.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ca-central-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| ca-west-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| eu-central-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| eu-central-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| eu-north-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| eu-south-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| eu-south-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| eu-west-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| eu-west-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| eu-west-3.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| il-central-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| me-central-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| me-south-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| me-west-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| mx-central-1.aws-signin-testing.amazon.comauth, mail, test | In scope | 2026-11-14 |
| wildcard.mx-central-1.aws-signin-testing.amazon.comauth, mail, test | In scope | 2026-11-14 |
| sa-east-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| sa-west-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| us-east-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| us-east-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| us-northeast-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| us-west-1.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| us-west-2.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| wildcard.aws-signin-testing.amazon.comauth, test | In scope | 2026-11-14 |
| adfs.aws.amazon.comauth | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.