Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| aft-ibr-build-pallet-web-ui-prod.eu.aftx.amazon.comci | In scope | 2026-11-14 |
| ci-tools.aka.amazon.comci | In scope | 2026-11-14 |
| ci-tools-cn.aka.amazon.comci | In scope | 2026-11-14 |
| ci-tools-eu.aka.amazon.comci | In scope | 2026-11-14 |
| ci-tools-fe.aka.amazon.comci | In scope | 2026-11-14 |
| ci-tools-na.aka.amazon.comci | In scope | 2026-11-14 |
| cloudforge-build.aka.amazon.comci | In scope | 2026-11-14 |
| ivona-jenkins.aka.amazon.comci | In scope | 2026-11-14 |
| rds-oseng-jenkins-devo.aka.amazon.comci | In scope | 2026-11-14 |
| umbp-builds-iad.aka.amazon.comci | In scope | 2026-11-14 |
| aws157-jenkins.amazon.comci | In scope | 2026-11-14 |
| build.amazon.comci | In scope | 2026-11-14 |
| build-beta.amazon.comci, staging | In scope | 2026-11-14 |
| ci.amazon.comci | In scope | 2026-11-14 |
| cloudforge-build.amazon.comci | In scope | 2026-11-14 |
| build.amazonalexadev.com.amazon.comci | In scope | 2026-11-14 |
| acuity-jenkins-secure.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ivona-jenkins-alpha.aka.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| lpww-jenkins.aka.corp.amazon.comci, internal | In scope | 2026-11-14 |
| alexa-hybrid-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| alexa-mobile-beta-build.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| alexa-mobile-build.corp.amazon.comci, internal | In scope | 2026-11-14 |
| amazon-linux-jenkins-kernel.corp.amazon.comci, internal | In scope | 2026-11-14 |
| amazon-linux-team-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| argocd.anpa.corp.amazon.comci, internal | In scope | 2026-11-14 |
| aurora-build-console.corp.amazon.comadmin, ci, internal | In scope | 2026-11-14 |
| aurora-build-console-beta.corp.amazon.comadmin, ci, internal, staging | In scope | 2026-11-14 |
| build-gamma.corp.amazon.comci, internal | In scope | 2026-11-14 |
| chennai-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ci.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ci-ideas.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ci-portal.corp.amazon.comci, internal | In scope | 2026-11-14 |
| cloudforge-build.corp.amazon.comci, internal | In scope | 2026-11-14 |
| cloudforge-build-midway-beta.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| cordite-ci-alpha3.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| cordite-ci-alpha4.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| cordite-ci-alpha5.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| cordite-ci-beta3.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| cordite-ci-beta4.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| cordite-ci-test3.corp.amazon.comci, internal, test | In scope | 2026-11-14 |
| cordite-ci-test4.corp.amazon.comci, internal, test | In scope | 2026-11-14 |
| franklmz-devdsk-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| kaos-drs-jenkins-test.corp.amazon.comci, internal, test | In scope | 2026-11-14 |
| kaos-drs-jenkins-test-2.corp.amazon.comci, internal, test | In scope | 2026-11-14 |
| kds-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-iad.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-iad-2.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-1.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-2.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-3.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-4.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-5.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-6.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-7.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-8.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ktab-jenkins-pdx-beta.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| launcher-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| launcher-jenkins-beta.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| morpho-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| nitro-build-grafana.corp.amazon.comci, internal, monitoring | In scope | 2026-11-14 |
| rbx-legacy-jenkins-beta.corp.amazon.comci, internal, legacy, staging | In scope | 2026-11-14 |
| rbx-legacy-jenkins-gamma.corp.amazon.comci, internal, legacy | In scope | 2026-11-14 |
| rds-phoenix-builds-gamma.corp.amazon.comci, internal | In scope | 2026-11-14 |
| siphon-alpha-ci.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| siphon-ci.corp.amazon.comci, internal | In scope | 2026-11-14 |
| source-proxy-build.corp.amazon.comci, internal | In scope | 2026-11-14 |
| source-proxy-build-beta.corp.amazon.comci, internal, staging | In scope | 2026-11-14 |
| wfv-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| xiaomj-devdsk-jenkins.corp.amazon.comci, internal | In scope | 2026-11-14 |
| ihmalhazen-ci-primary-preview-us-west-2.amazon.comci, staging | In scope | 2026-11-14 |
| ihmalhazen-ci-primary-us-west-2.amazon.comci | In scope | 2026-11-14 |
| ihmalhazen-ci-replica-preview-us-west-2.amazon.comci, staging | In scope | 2026-11-14 |
| ihmalhazen-ci-replica-us-west-2.amazon.comci | In scope | 2026-11-14 |
| cloudforge-build.integ.amazon.comci | In scope | 2026-11-14 |
| neo-ai-ci.amazon.comci | In scope | 2026-11-14 |
| sfscentralops-build-team-member.uat.amazon.comci, test | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.