Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
a9g-api.amazon.inapiIn scope2026-11-14
api.amazon.inapiIn scope2026-11-14
api-amazondevices.amazon.inapiIn scope2026-11-14
_0aa8056bee3719897d2273bf065fbc9c.api.amazon.inapiIn scope2026-11-14
swagger.zxhzcw7hfcpqx2ljkshbe4qfhmue74ei._domainkey.business.amazon.inapiIn scope2026-11-14
euwest-api.business.amazon.inapiIn scope2026-11-14
hop-euwest-api.business.amazon.inapiIn scope2026-11-14
care-api.amazon.inapiIn scope2026-11-14
eu-api-alexa.amazon.inapiIn scope2026-11-14
eu-api-avs-idrs.amazon.inapiIn scope2026-11-14
eu-south-2-api-alexa.amazon.inapiIn scope2026-11-14
fe-api-alexa.amazon.inapiIn scope2026-11-14
fe-api-avs-idrs.amazon.inapiIn scope2026-11-14
api.0.jobs.amazon.inapiIn scope2026-11-14
autoorigin-api.0.jobs.amazon.inapiIn scope2026-11-14
webservices.0.jobs.amazon.inapiIn scope2026-11-14
003migstat-alt12-swagger.jobs.amazon.inapiIn scope2026-11-14
006-api.jobs.amazon.inapiIn scope2026-11-14
006ut-public-swagger-prod.jobs.amazon.inapiIn scope2026-11-14
00c96cb70rover-schnapps-api-tlv.jobs.amazon.inapiIn scope2026-11-14
api.dev.partner.we.01.jobs.amazon.inapi, devIn scope2026-11-14
03f-manage-swagger.jobs.amazon.inadmin, apiIn scope2026-11-14
0449rpc.jobs.amazon.inapiIn scope2026-11-14
api.04788557e.jobs.amazon.inapiIn scope2026-11-14
04a9g-api01a85e.jobs.amazon.inapiIn scope2026-11-14
04apums-fe-prod-swagger-tcp-pdx01a85e.jobs.amazon.inapiIn scope2026-11-14
04autosuggest-search-api01a85e.jobs.amazon.inapiIn scope2026-11-14
04f01a85api-amazondevices.jobs.amazon.inapiIn scope2026-11-14
04f01a85console-api-fronticonsole-apir.jobs.amazon.inadmin, apiIn scope2026-11-14
ad-api-onboarding-manager-devo-fe.04f01a85e.jobs.amazon.inadmin, apiIn scope2026-11-14
api-key.04f01a85e.jobs.amazon.inapiIn scope2026-11-14
api-sandbox.04f01a85e.jobs.amazon.inapi, testIn scope2026-11-14
console-api.04f01a85e.jobs.amazon.inadmin, apiIn scope2026-11-14
04f01a85eu-api-alexa.jobs.amazon.inapiIn scope2026-11-14
04f01a85ncfs-api-tcp-frontincfs-api-tcpr.jobs.amazon.inapiIn scope2026-11-14
04f01a85origin-api.jobs.amazon.inapiIn scope2026-11-14
04f01a8api-teste-frontier.jobs.amazon.inapiIn scope2026-11-14
04f01a8grover-schnapps-api-bjse.jobs.amazon.inapiIn scope2026-11-14
04f01a8origin-api-amazondevices-fee-frontier.jobs.amazon.inapiIn scope2026-11-14
04f0api-amazondevicesa85e.jobs.amazon.inapiIn scope2026-11-14
04f0api-testa85e-frontier.jobs.amazon.inapiIn scope2026-11-14
04f0apums-fe-prod-swagger-tcp-pdxa85e.jobs.amazon.inapiIn scope2026-11-14
04f0origin-api-preproda85e.jobs.amazon.inapiIn scope2026-11-14
04f0origin-api-sandboxa85e.jobs.amazon.inapiIn scope2026-11-14
04forigin-api-preproda85e-frontier.jobs.amazon.inapiIn scope2026-11-14
04fsherlock-api-betaa85e-frontier.jobs.amazon.inapiIn scope2026-11-14
04na-api-alexa01a85e.jobs.amazon.inapiIn scope2026-11-14
04origin-api-sandbox01a85e.jobs.amazon.inapi, testIn scope2026-11-14
04swa-api01a85e.jobs.amazon.inapiIn scope2026-11-14
04swagger01a85e.jobs.amazon.inapiIn scope2026-11-14
api.04vbqxi0r7uoyzgt.jobs.amazon.inapiIn scope2026-11-14
04webservices-internal01a85e.jobs.amazon.inapi, internalIn scope2026-11-14
ad-api-onboarding-manager-devo-fe.059f5d557.jobs.amazon.inadmin, apiIn scope2026-11-14
xxynoway12yzz.ad-api-onboarding-manager-devo-fe.059f5d557.jobs.amazon.inadmin, apiIn scope2026-11-14
05f9b0fd8-alb-a11g-api.jobs.amazon.inapiIn scope2026-11-14
05f9b0fd8-alb-eu-api-avs-idrs.jobs.amazon.inapiIn scope2026-11-14
05f9b0fd8-frontier-alb-api.jobs.amazon.inapiIn scope2026-11-14
05f9b0fd8-frontier-alb-api4.jobs.amazon.inapiIn scope2026-11-14
05f9b0fd8-frontier-alb-fe-api-avs-idrs.jobs.amazon.inapiIn scope2026-11-14
05f9b0fd8-frontier-albcare-api.jobs.amazon.inapiIn scope2026-11-14
05f9b0fd8-frontier-albeu-api-alexa.jobs.amazon.inapiIn scope2026-11-14
05f9b0fd8-frontieralbcare-api.jobs.amazon.inapiIn scope2026-11-14
05f9b0fd8-frontierna-api-alexa.jobs.amazon.inapiIn scope2026-11-14
api.07cf2defacf0d70ff.jobs.amazon.inapiIn scope2026-11-14
api.07n0wseg0nirfp8g.jobs.amazon.inapiIn scope2026-11-14
api-plugins.086bc87a3bff8ae9b.jobs.amazon.inapiIn scope2026-11-14
plugins.api.086bc87a3bff8ae9b.jobs.amazon.inapiIn scope2026-11-14
09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
0tweedy0w0bird0.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
3tweedy3w3bird3.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
97qujdep9w8h5yaa.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
98guogfbk06xqtqo.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
99cmfl62o17qg740.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
9dmpikmag00u3car.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
_wildcard.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
admin.09p0ka8g-api.jobs.amazon.inadmin, apiIn scope2026-11-14
backup.09p0ka8g-api.jobs.amazon.inapi, dataIn scope2026-11-14
dxvtucv992eywqhz.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
lcs7kmz7clt5zfsh.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
n7fdlll7hqu2zhp7.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
omzc4c9475q64yuu.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
smq86q04dvqbzisc.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
storage.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
temp.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
thisshouldneverresolve.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
ubzuewgw0bo1tax4.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
wordpress.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
xxynoway12yzz.wordpress.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
wusabgsktk0dm0rf.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
xuzxzyhebcvbcooi.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
xxynowayyzz.09p0ka8g-api.jobs.amazon.inapiIn scope2026-11-14
09p0ka8g-api10.jobs.amazon.inapiIn scope2026-11-14
09p0ka8g-api2020.jobs.amazon.inapiIn scope2026-11-14
0api-amazondevices.jobs.amazon.inapiIn scope2026-11-14
0api-amazondevicesbdisk.jobs.amazon.inapiIn scope2026-11-14
0api-amazondevicesdiscover.jobs.amazon.inapiIn scope2026-11-14
0api-amazondevicestodiscover.jobs.amazon.inapiIn scope2026-11-14
0api-preprodf01a85e.jobs.amazon.inapiIn scope2026-11-14
0apis.jobs.amazon.inapiIn scope2026-11-14
xxynoway12yzz.0apis.jobs.amazon.inapiIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.