Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root:amazon.de
Scope
Name suggests
First seen
Text fileClear filters468 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
www.orgcentral.amazon.deIn scope2026-11-14
orgs.amazon.deIn scope2026-11-14
www.orgs.amazon.deIn scope2026-11-14
origin-at-logistics.amazon.deIn scope2026-11-14
origin-auxilium-at.amazon.deIn scope2026-11-14
origin-auxilium-extern-preprod-at.amazon.destagingIn scope2026-11-14
origin-auxilum-at.amazon.deIn scope2026-11-14
origin-dl.amazon.deIn scope2026-11-14
origin-eucentral1-www.amazon.deIn scope2026-11-14
origin-freight.amazon.deIn scope2026-11-14
origin-logistics.amazon.deIn scope2026-11-14
origin-music.amazon.deIn scope2026-11-14
origin-rf-completion.amazon.deIn scope2026-11-14
origin-sellercentral.amazon.deIn scope2026-11-14
origin-setup-firetv.amazon.deIn scope2026-11-14
origin-smile.amazon.deIn scope2026-11-14
origin-supplychainconnect.amazon.deIn scope2026-11-14
origin-watch.amazon.deIn scope2026-11-14
origin-www.amazon.deIn scope2026-11-14
p-nt-www-amazon-de-kalias.amazon.deIn scope2026-11-14
p-y3-www-amazon-de-kalias.amazon.deIn scope2026-11-14
p-yo-www-amazon-de-kalias.amazon.deIn scope2026-11-14
pads.amazon.deIn scope2026-11-14
www.pads.amazon.deIn scope2026-11-14
panel.amazon.deadminIn scope2026-11-14
www.panel.amazon.deadminIn scope2026-11-14
partner-blog.amazon.deIn scope2026-11-14
partnercentral.amazon.deIn scope2026-11-14
account.partnercentral.amazon.deIn scope2026-11-14
rental-account.partnercentral.amazon.deIn scope2026-11-14
partnernet.amazon.deIn scope2026-11-14
www.partnernet.amazon.deIn scope2026-11-14
partnerprogramm-blog.amazon.deIn scope2026-11-14
pay.amazon.deIn scope2026-11-14
pay-preprod-v2.amazon.destagingIn scope2026-11-14
pay-v2.amazon.deIn scope2026-11-14
payments.amazon.deIn scope2026-11-14
payments-fe.amazon.deIn scope2026-11-14
payments-na.amazon.deIn scope2026-11-14
payments-sandbox.amazon.detestIn scope2026-11-14
authorize.payments-sandbox.amazon.detestIn scope2026-11-14
payments-us.amazon.deIn scope2026-11-14
payments-v2.amazon.deIn scope2026-11-14
authorize.payments.amazon.deIn scope2026-11-14
photos.amazon.deIn scope2026-11-14
photosandvideos.amazon.deIn scope2026-11-14
pinnacle-api.amazon.deapiIn scope2026-11-14
play.amazon.deIn scope2026-11-14
poweredby.amazon.deIn scope2026-11-14
preview-business-agents.amazon.destagingIn scope2026-11-14
primenow.amazon.deIn scope2026-11-14
productads.amazon.deIn scope2026-11-14
produktanzeigen.amazon.deIn scope2026-11-14
www.produktanzeigen.amazon.deIn scope2026-11-14
puptrack-eu.amazon.deIn scope2026-11-14
ramp-api.amazon.deapiIn scope2026-11-14
rampapi.amazon.deIn scope2026-11-14
rcm-de.amazon.deIn scope2026-11-14
read.amazon.deIn scope2026-11-14
reinstate.amazon.deIn scope2026-11-14
relay.amazon.deIn scope2026-11-14
renewed.amazon.deIn scope2026-11-14
repair.amazon.deIn scope2026-11-14
rf-completion.amazon.deIn scope2026-11-14
s1.amazon.deIn scope2026-11-14
sandbox.amazon.detestIn scope2026-11-14
sandbox-business-agents.amazon.detestIn scope2026-11-14
api.sandbox.amazon.deapi, testIn scope2026-11-14
sdu.amazon.deIn scope2026-11-14
se-cde-ta-g7g.amazon.deIn scope2026-11-14
seamus.amazon.deIn scope2026-11-14
secure.amazon.deIn scope2026-11-14
secure-fields.amazon.deIn scope2026-11-14
securephotostorageservice-eu-external.amazon.deIn scope2026-11-14
selection.amazon.deIn scope2026-11-14
sell.amazon.deIn scope2026-11-14
seller-central-pilot.amazon.deIn scope2026-11-14
sellercentral.amazon.deIn scope2026-11-14
www.sellercentral.amazon.deIn scope2026-11-14
sellerflex.amazon.deIn scope2026-11-14
sellerflex-alt-zslgzmy.amazon.deIn scope2026-11-14
sellerflex-alt-zslgzmyb.amazon.deIn scope2026-11-14
services.amazon.deIn scope2026-11-14
www.services.amazon.deIn scope2026-11-14
setup-firetv.amazon.deIn scope2026-11-14
shm.amazon.deIn scope2026-11-14
sierra-discovery.amazon.deIn scope2026-11-14
skills-store.amazon.deIn scope2026-11-14
skills-store-eu.amazon.deIn scope2026-11-14
skills-store-eu-south-2.amazon.deIn scope2026-11-14
skills-store-fe.amazon.deIn scope2026-11-14
skills-store-na.amazon.deIn scope2026-11-14
smarthub.amazon.deIn scope2026-11-14
smile.amazon.deIn scope2026-11-14
www.smile.amazon.deIn scope2026-11-14
smtp-out-174-93.amazon.demailIn scope2026-11-14
snowcentral.amazon.deIn scope2026-11-14
soap.amazon.deapiIn scope2026-11-14
social.amazon.deIn scope2026-11-14
api.social.amazon.deapiIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated