Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
dev1.lpujknj2yuef42lypqt64ay6z5hdwgwd._domainkey.business.amazon.indevIn scope2026-11-14
dev-business.amazon.indevIn scope2026-11-14
_dd6ffc9a7429bf173eeada30c3decb1c.dev-business.amazon.indevIn scope2026-11-14
frontier-dev.amazon.indevIn scope2026-11-14
local.0.jobs.amazon.indevIn scope2026-11-14
000088-dev.jobs.amazon.indevIn scope2026-11-14
000zhb127vrrdummy-dev1.jobs.amazon.indevIn scope2026-11-14
006-gateway-dev02.jobs.amazon.indevIn scope2026-11-14
00dev-europewest.jobs.amazon.indevIn scope2026-11-14
00dev-file.jobs.amazon.indevIn scope2026-11-14
00dev-panel.jobs.amazon.inadmin, devIn scope2026-11-14
client-dev.01.jobs.amazon.indevIn scope2026-11-14
dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
07jadcmtcao4nrtg.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
1tlzl0k49aex4azg.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
5a1wgyplnbkmtuix.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
5uts81hmzherbn8f.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
9bf4jjqluhrd55gp.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
a.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
api.dev.partner.we.01.jobs.amazon.inapi, devIn scope2026-11-14
ct23tmod0g6nmg5k6jm0.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
eommijsd7jpfe99f.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
f7r66wtkrhp7f88m.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
qjrm61enl5bhwg10.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
r8o0cpxbdxdtvdnv.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
rbzdnesuud1t0c5b.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
sd7f2wq0qd9f3w7r.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
thisshouldneverresolve.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
vo56umxo0agr0pri.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
xxynoway12yzz.dev.partner.we.01.jobs.amazon.indevIn scope2026-11-14
local.01b.jobs.amazon.indevIn scope2026-11-14
01eo01le01ortal-dev-d16.jobs.amazon.indevIn scope2026-11-14
dev.01gisswjiioyzhbw.jobs.amazon.indevIn scope2026-11-14
0244dev.jobs.amazon.indevIn scope2026-11-14
dev.024ca0.jobs.amazon.indevIn scope2026-11-14
dev.0316b.jobs.amazon.indevIn scope2026-11-14
03dev.jobs.amazon.indevIn scope2026-11-14
xxynowayyzz.03dev.jobs.amazon.indevIn scope2026-11-14
dev.03fevernote.jobs.amazon.indevIn scope2026-11-14
local.03grh7qh576dk8tg.jobs.amazon.indevIn scope2026-11-14
03ri6em1cpvqbd02dev.jobs.amazon.indevIn scope2026-11-14
03uego-dev-tcp-iadb.jobs.amazon.indevIn scope2026-11-14
04edge-dev-support01a85e.jobs.amazon.indevIn scope2026-11-14
04f01a85amazon-designer-dev-frontiamazon-designer-devr.jobs.amazon.indevIn scope2026-11-14
04f01a85amazonlantern-dev.jobs.amazon.indevIn scope2026-11-14
04f01a85dev-business.jobs.amazon.indevIn scope2026-11-14
development.04f01a85e.jobs.amazon.indevIn scope2026-11-14
rise-workflows-dev.04f01a85e.jobs.amazon.indevIn scope2026-11-14
sablehostinfo-dev.04f01a85e.jobs.amazon.indevIn scope2026-11-14
04f01a85rise-workflows-dev.jobs.amazon.indevIn scope2026-11-14
04f01a8aw-development-6e.jobs.amazon.indevIn scope2026-11-14
04f01a8peopleportal-dev-d16e.jobs.amazon.indevIn scope2026-11-14
04f0peopleportal-dev-d16a85e-frontier.jobs.amazon.indevIn scope2026-11-14
04fappstore-gamma-dev1a85e.jobs.amazon.indevIn scope2026-11-14
04fedge-dev-supporta85e.jobs.amazon.indevIn scope2026-11-14
xxynoway12yzz.04fedge-dev-supporta85e.jobs.amazon.indevIn scope2026-11-14
050fdropbox-8local.jobs.amazon.indevIn scope2026-11-14
06dev.jobs.amazon.indevIn scope2026-11-14
06local.jobs.amazon.indevIn scope2026-11-14
local.07573.jobs.amazon.indevIn scope2026-11-14
dev.07xl5z0d5zi65dnl.jobs.amazon.indevIn scope2026-11-14
dev.088pt95czvj7lvit.jobs.amazon.indevIn scope2026-11-14
local.09aqltb02i.jobs.amazon.indevIn scope2026-11-14
dev.09h7tapmka7x3qum.jobs.amazon.indevIn scope2026-11-14
local.09h7tapmka7x3qum.jobs.amazon.indevIn scope2026-11-14
local.0ae8rnmcyer5deir.jobs.amazon.indevIn scope2026-11-14
local.0b3b9edlsfnesm8v.jobs.amazon.indevIn scope2026-11-14
local.0bdrj03rft13fss5.jobs.amazon.indevIn scope2026-11-14
dev.0cd1fe6b.jobs.amazon.indevIn scope2026-11-14
dev.0csekoiya770ltxx.jobs.amazon.indevIn scope2026-11-14
0dev-business.jobs.amazon.indevIn scope2026-11-14
0dev1f01a85e.jobs.amazon.indevIn scope2026-11-14
dev.0ez03k5o9yxxt1kv.jobs.amazon.indevIn scope2026-11-14
local-mobile.0f5199dd6.jobs.amazon.indevIn scope2026-11-14
dev.music.amazon.indevIn scope2026-11-14
local.music.amazon.indevIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.