Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
flrf6uat5mfzu6lpsyzofytxdtd6qn6d._domainkey.amazon.intestIn scope2026-11-14
sandbox.alexa.amazon.intestIn scope2026-11-14
amazonpay-sandbox.amazon.intestIn scope2026-11-14
amazonpay-test.amazon.intestIn scope2026-11-14
test.shhjs.cdn.amazon.intestIn scope2026-11-14
1demo.0.0.jobs.amazon.intestIn scope2026-11-14
1sandbox.0.0.jobs.amazon.intestIn scope2026-11-14
1testing.0.0.jobs.amazon.intestIn scope2026-11-14
uat-1.0.0.jobs.amazon.intestIn scope2026-11-14
000sandbox.jobs.amazon.intestIn scope2026-11-14
www.00539-demo.jobs.amazon.intestIn scope2026-11-14
www.00554-demo.jobs.amazon.intestIn scope2026-11-14
www.00603-demo.jobs.amazon.intestIn scope2026-11-14
00622-demo.jobs.amazon.intestIn scope2026-11-14
thisshouldneverresolve.00622-demo.jobs.amazon.intestIn scope2026-11-14
www.00622-demo.jobs.amazon.intestIn scope2026-11-14
0tweedy0w0bird0.00627-demo.jobs.amazon.intestIn scope2026-11-14
thisshouldneverresolve.00627-demo.jobs.amazon.intestIn scope2026-11-14
www.00627-demo.jobs.amazon.intestIn scope2026-11-14
00638-demo.jobs.amazon.intestIn scope2026-11-14
thisshouldneverresolve.00638-demo.jobs.amazon.intestIn scope2026-11-14
www.00654-demo.jobs.amazon.intestIn scope2026-11-14
www.00658-demo.jobs.amazon.intestIn scope2026-11-14
test.006m7ge9tnexlf5z.jobs.amazon.intestIn scope2026-11-14
007migstat-alt12demo.jobs.amazon.intestIn scope2026-11-14
dump-browse-tree-eu-test.00c96cb70.jobs.amazon.indata, testIn scope2026-11-14
00test-vm217.jobs.amazon.intestIn scope2026-11-14
adminpayment-prod-test.01.jobs.amazon.intestIn scope2026-11-14
adminpayment-prod-test.01107cb7b.jobs.amazon.intestIn scope2026-11-14
xxynoway12yzz.adminpayment-prod-test.01107cb7b.jobs.amazon.intestIn scope2026-11-14
01demo.jobs.amazon.intestIn scope2026-11-14
www.02023-demo.jobs.amazon.intestIn scope2026-11-14
adminpayment-prod-test.02e.jobs.amazon.intestIn scope2026-11-14
qa.02pgh9g6x6mdn3br.jobs.amazon.intestIn scope2026-11-14
test.02yv0jxollgn9xqi.jobs.amazon.intestIn scope2026-11-14
test.02zi9ukjnv826x1f.jobs.amazon.intestIn scope2026-11-14
test.031u2wxl7zdk9ar2.jobs.amazon.intestIn scope2026-11-14
03bayments-sandbox.jobs.amazon.intestIn scope2026-11-14
03f-manage-applicationspayoutapi-test.jobs.amazon.inadmin, testIn scope2026-11-14
test.047xsjvzswddf4ld.jobs.amazon.intestIn scope2026-11-14
04aorigin-payments-sandbox01a85e.jobs.amazon.intestIn scope2026-11-14
04apayments-sandbox01a85e.jobs.amazon.intestIn scope2026-11-14
04f01a85aws-signin-testing.jobs.amazon.inauth, testIn scope2026-11-14
04f01a85demo-frontidemor.jobs.amazon.intestIn scope2026-11-14
api-sandbox.04f01a85e.jobs.amazon.inapi, testIn scope2026-11-14
demo.04f01a85e.jobs.amazon.intestIn scope2026-11-14
parents-sandbox-test.04f01a85e.jobs.amazon.intestIn scope2026-11-14
04f01a85eack-sandbox.jobs.amazon.intestIn scope2026-11-14
04f01a85ew-test.jobs.amazon.intestIn scope2026-11-14
04f01a85vcs-sandbox.jobs.amazon.intestIn scope2026-11-14
04f01a8bcm-ui-sandbox-jlb-iade.jobs.amazon.intestIn scope2026-11-14
04f01a8sable-data-explorer-gamma-test-jlbe.jobs.amazon.intestIn scope2026-11-14
04f0sable-data-explorer-gamma-test-jlba85e-frontier.jobs.amazon.intestIn scope2026-11-14
04fopf-onboarding-testing1a85e.jobs.amazon.intestIn scope2026-11-14
04fsable-data-explorer-gamma-test-jlba85e.jobs.amazon.intestIn scope2026-11-14
04ftrex-sandbox-naa85e.jobs.amazon.intestIn scope2026-11-14
xxynoway12yzz.04ftrex-sandbox-naa85e.jobs.amazon.intestIn scope2026-11-14
test.04gu3ecnf465hjj7.jobs.amazon.intestIn scope2026-11-14
04gu3ecnf465hjj7test.jobs.amazon.intestIn scope2026-11-14
test.04lb.jobs.amazon.intestIn scope2026-11-14
04niflheimapi-sandbox01a85e.jobs.amazon.intestIn scope2026-11-14
04opf-onboarding-testing101a85e.jobs.amazon.intestIn scope2026-11-14
04origin-api-sandbox01a85e.jobs.amazon.inapi, testIn scope2026-11-14
04payments-sandbox01a85e.jobs.amazon.intestIn scope2026-11-14
04test01a85e.jobs.amazon.intestIn scope2026-11-14
04uat01a85e.jobs.amazon.intestIn scope2026-11-14
qa.054fdropbox-2.jobs.amazon.intestIn scope2026-11-14
05f9b0fd8-alb-sandbox.jobs.amazon.intestIn scope2026-11-14
05f9b0fd8-frontier-alb-track-sandbox.jobs.amazon.intestIn scope2026-11-14
05f9b0fd8-frontier-albalb-qa.jobs.amazon.intestIn scope2026-11-14
06kcxa0xlg2zmfd5test.jobs.amazon.intestIn scope2026-11-14
qa.073faa6876a3885ac.jobs.amazon.intestIn scope2026-11-14
test.07eaveygvbq5sm9o.jobs.amazon.intestIn scope2026-11-14
kq0glisk.test.07th-songen.jobs.amazon.intestIn scope2026-11-14
test-plugins.086bc87a3bff8ae9b.jobs.amazon.intestIn scope2026-11-14
p0888e56cbrents-s0888e56cbndbox-test.0888e56cblb-v2.jobs.amazon.intestIn scope2026-11-14
qa.09011623091827218.jobs.amazon.intestIn scope2026-11-14
qa.09021602093659618.jobs.amazon.intestIn scope2026-11-14
qa.09061618090262016.jobs.amazon.intestIn scope2026-11-14
qa.09061618095421717.jobs.amazon.intestIn scope2026-11-14
qa.09061620092193418.jobs.amazon.intestIn scope2026-11-14
qa.0906162009404618.jobs.amazon.intestIn scope2026-11-14
qa.09121623090551016.jobs.amazon.intestIn scope2026-11-14
qa.09121623090551018.jobs.amazon.intestIn scope2026-11-14
qa.09131601094253718.jobs.amazon.intestIn scope2026-11-14
testing-pci-aes-key.09172016.jobs.amazon.intestIn scope2026-11-14
qa.09281623094666216.jobs.amazon.intestIn scope2026-11-14
qa.097ulha458kp1nvw.jobs.amazon.intestIn scope2026-11-14
test.09a.jobs.amazon.intestIn scope2026-11-14
test.0a2906a412e11d5ca.jobs.amazon.intestIn scope2026-11-14
0aay5mfrwhgosod9test.jobs.amazon.intestIn scope2026-11-14
qa.0ae8rnmcyer5deir.jobs.amazon.intestIn scope2026-11-14
test.0ajcn19lp0ii015c.jobs.amazon.intestIn scope2026-11-14
qa.0b6uzty4hswrjfoc.jobs.amazon.intestIn scope2026-11-14
test.0br1de0a9860xm9p.jobs.amazon.intestIn scope2026-11-14
xxynoway12yzz.test.0br1de0a9860xm9p.jobs.amazon.intestIn scope2026-11-14
test.0bw9hzfgklw9pu5d.jobs.amazon.intestIn scope2026-11-14
p0c04a0fe5rents-s0c04a0fe5ndbox-test.0c04a0fe5lb-v2.jobs.amazon.intestIn scope2026-11-14
qa.0c1b17db9bf9efddf.jobs.amazon.intestIn scope2026-11-14
0c52cf103-frontierle-test.jobs.amazon.intestIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.