Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
ftp2.0.0.jobs.amazon.indataIn scope2026-11-14
0013mysql.jobs.amazon.indataIn scope2026-11-14
001mysql.jobs.amazon.indataIn scope2026-11-14
002-v3-client-backup.jobs.amazon.indataIn scope2026-11-14
db.00273.jobs.amazon.indataIn scope2026-11-14
mysql.007huangjiaduchang.jobs.amazon.indataIn scope2026-11-14
dump-browse-tree-eu-test.00c96cb70.jobs.amazon.indata, testIn scope2026-11-14
00f3b586e8c2dd8a2ftp.jobs.amazon.indataIn scope2026-11-14
00hcxgyij34nfz47backup.jobs.amazon.indataIn scope2026-11-14
xxynoway12yzz.00hcxgyij34nfz47backup.jobs.amazon.indataIn scope2026-11-14
xxynowayyzz.00hcxgyij34nfz47backup.jobs.amazon.indataIn scope2026-11-14
mysql.0103louis.jobs.amazon.indataIn scope2026-11-14
017-v3-client-backup.jobs.amazon.indataIn scope2026-11-14
01rbyne-elasticsearch-reporting-na-03b.jobs.amazon.indataIn scope2026-11-14
02ve6f6wh6102t74backup.jobs.amazon.indataIn scope2026-11-14
xxynoway12yzz.02ve6f6wh6102t74backup.jobs.amazon.indataIn scope2026-11-14
db.03ri6em1cpvqbd02.jobs.amazon.indataIn scope2026-11-14
db.04.jobs.amazon.indataIn scope2026-11-14
045-v3-client-backup.jobs.amazon.indataIn scope2026-11-14
04acarbyne-elasticsearch-reporting-na-03b01a85e.jobs.amazon.indataIn scope2026-11-14
elasticsearch.04f01a85e.jobs.amazon.indataIn scope2026-11-14
files.04f01a85e.jobs.amazon.indataIn scope2026-11-14
04f01a85tim-files-tls.jobs.amazon.indataIn scope2026-11-14
04f0tim-files-tlsa85e.jobs.amazon.indataIn scope2026-11-14
04f0top-elasticsearch-kibana1-prod-jp-pdxa85e-frontier.jobs.amazon.indata, monitoringIn scope2026-11-14
04farsp-elasticsearch-kibana-pekba85e.jobs.amazon.indata, monitoringIn scope2026-11-14
04fcarbyne-elasticsearch-reporting-na-01a85e-frontier.jobs.amazon.indataIn scope2026-11-14
mysql.04g58sg3xvqsspzz.jobs.amazon.indataIn scope2026-11-14
db.050fdropbox-8.jobs.amazon.indataIn scope2026-11-14
mysql.050fdropbox-8.jobs.amazon.indataIn scope2026-11-14
mysql.054fdropbox-2.jobs.amazon.indataIn scope2026-11-14
059-v3-client-backup.jobs.amazon.indataIn scope2026-11-14
05f9b0fd8-alb-ftp0.jobs.amazon.indataIn scope2026-11-14
05f9b0fd8-frontier-alb-backups-alb.jobs.amazon.indataIn scope2026-11-14
05f9b0fd8-frontieralb-bucket.jobs.amazon.indataIn scope2026-11-14
backup.05wvfzkp45tiu7sz.jobs.amazon.indataIn scope2026-11-14
mysql.0709fj9dsxq2x6vn.jobs.amazon.indataIn scope2026-11-14
071ada07f77fec5c6backup.jobs.amazon.indataIn scope2026-11-14
s3.07i0qicij75id23o.jobs.amazon.indataIn scope2026-11-14
08290902backup.jobs.amazon.indataIn scope2026-11-14
0938736517mysql.jobs.amazon.indataIn scope2026-11-14
s3.0965mxq5qehyessk.jobs.amazon.indataIn scope2026-11-14
mysql.09a.jobs.amazon.indataIn scope2026-11-14
backup.09p0ka8g-api.jobs.amazon.inapi, dataIn scope2026-11-14
0a58a9feac02mysql.jobs.amazon.indataIn scope2026-11-14
mysql.0ae8rnmcyer5deir.jobs.amazon.indataIn scope2026-11-14
0arsp-elasticsearch-kibana-pekbf01a85e.jobs.amazon.indata, monitoringIn scope2026-11-14
mysql.0as.jobs.amazon.indataIn scope2026-11-14
mysql.0at.jobs.amazon.indataIn scope2026-11-14
0backup.jobs.amazon.indataIn scope2026-11-14
db.0c7793i95ak3ga5x.jobs.amazon.indataIn scope2026-11-14
s3.0c7793i95ak3ga5x.jobs.amazon.indataIn scope2026-11-14
mysql.0ca0ft659ig7qajtj97ud1ioe.jobs.amazon.indataIn scope2026-11-14
0d322fd05rbyne-elasticsearch-reporting-na-03b.jobs.amazon.indataIn scope2026-11-14
0database.jobs.amazon.indataIn scope2026-11-14
backup.0dmnr85j0rlep0ab.jobs.amazon.indataIn scope2026-11-14
backup.0dq904t5dk5c7don.jobs.amazon.indataIn scope2026-11-14
backup.0ebntcy1x1w0sni2.jobs.amazon.indataIn scope2026-11-14
mysql.0ebntcy1x1w0sni2.jobs.amazon.indataIn scope2026-11-14
s3-throttleco-prod-zaz.0f5199dd6.jobs.amazon.indataIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.