Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
na-api-avs-idrs.amazon.itapiIn scope2026-11-14
na-bob-dispatch-gamma-alexa.amazon.itIn scope2026-11-14
na-bob-dispatch-prod-alexa.amazon.itIn scope2026-11-14
opf-sellercentral.amazon.itIn scope2026-11-14
opf-www.amazon.itIn scope2026-11-14
identity.browserapps.opf.amazon.itauthIn scope2026-11-14
orders.amazon.itIn scope2026-11-14
origin-accesspoints-api.amazon.itapiIn scope2026-11-14
origin-auxilium-extern-preprod.amazon.itstagingIn scope2026-11-14
origin-dl.amazon.itIn scope2026-11-14
origin-eusouth2-www.amazon.itIn scope2026-11-14
origin-logistics.amazon.itIn scope2026-11-14
origin-music.amazon.itIn scope2026-11-14
origin-sellercentral.amazon.itIn scope2026-11-14
origin-setup-firetv.amazon.itIn scope2026-11-14
origin-supplychainconnect.amazon.itIn scope2026-11-14
origin-www.amazon.itIn scope2026-11-14
p-nt-www-amazon-it-kalias.amazon.itIn scope2026-11-14
p-y3-www-amazon-it-kalias.amazon.itIn scope2026-11-14
p-yo-www-amazon-it-kalias.amazon.itIn scope2026-11-14
panel.amazon.itadminIn scope2026-11-14
www.panel.amazon.itadminIn scope2026-11-14
parent.amazon.itIn scope2026-11-14
parents.amazon.itIn scope2026-11-14
partnercentral.amazon.itIn scope2026-11-14
account.partnercentral.amazon.itIn scope2026-11-14
rental-account.partnercentral.amazon.itIn scope2026-11-14
pay.amazon.itIn scope2026-11-14
pay-preprod-v2.amazon.itstagingIn scope2026-11-14
pay-v2.amazon.itIn scope2026-11-14
payments.amazon.itIn scope2026-11-14
payments-fe.amazon.itIn scope2026-11-14
payments-na.amazon.itIn scope2026-11-14
payments-sandbox.amazon.ittestIn scope2026-11-14
payments-us.amazon.itIn scope2026-11-14
photos.amazon.itIn scope2026-11-14
pinnacle-api.amazon.itapiIn scope2026-11-14
play.amazon.itIn scope2026-11-14
poweredby.amazon.itIn scope2026-11-14
preview-business-agents.amazon.itstagingIn scope2026-11-14
primenow.amazon.itIn scope2026-11-14
prodotti-sponsorizzati.amazon.itIn scope2026-11-14
www.prodotti-sponsorizzati.amazon.itIn scope2026-11-14
programma-affiliazione.amazon.itIn scope2026-11-14
puptrack-eu.amazon.itIn scope2026-11-14
ramp-api.amazon.itapiIn scope2026-11-14
rampapi.amazon.itIn scope2026-11-14
rcm-it.amazon.itIn scope2026-11-14
read.amazon.itIn scope2026-11-14
reinstate.amazon.itIn scope2026-11-14
relay.amazon.itIn scope2026-11-14
renewed.amazon.itIn scope2026-11-14
repair.amazon.itIn scope2026-11-14
www.repair.amazon.itIn scope2026-11-14
reporter-browserapps.amazon.itIn scope2026-11-14
rf-completion.amazon.itIn scope2026-11-14
sandbox-business-agents.amazon.ittestIn scope2026-11-14
sdu.amazon.itIn scope2026-11-14
se-cde-ta-g7g.amazon.itIn scope2026-11-14
securephotostorageservice-eu-external.amazon.itIn scope2026-11-14
selection.amazon.itIn scope2026-11-14
sell.amazon.itIn scope2026-11-14
seller-central-pilot.amazon.itIn scope2026-11-14
sellercentral.amazon.itIn scope2026-11-14
sellerflex.amazon.itIn scope2026-11-14
services.amazon.itIn scope2026-11-14
www.services.amazon.itIn scope2026-11-14
setup-firetv.amazon.itIn scope2026-11-14
ship.amazon.itIn scope2026-11-14
shippercentral-onebox.amazon.itIn scope2026-11-14
shipping.amazon.itIn scope2026-11-14
shm.amazon.itIn scope2026-11-14
skills-store.amazon.itIn scope2026-11-14
skills-store-eu.amazon.itIn scope2026-11-14
skills-store-eu-south-2.amazon.itIn scope2026-11-14
skills-store-fe.amazon.itIn scope2026-11-14
skills-store-na.amazon.itIn scope2026-11-14
smarthub.amazon.itIn scope2026-11-14
smile.amazon.itIn scope2026-11-14
snowcentral.amazon.itIn scope2026-11-14
soap.amazon.itapiIn scope2026-11-14
social.amazon.itIn scope2026-11-14
api.social.amazon.itapiIn scope2026-11-14
app.social.amazon.itIn scope2026-11-14
sp.amazon.itIn scope2026-11-14
www.sp.amazon.itIn scope2026-11-14
spicy.amazon.itIn scope2026-11-14
sponsored-ads.amazon.itIn scope2026-11-14
stage-business.amazon.itstagingIn scope2026-11-14
storage-browserapps.amazon.itIn scope2026-11-14
storyplayer-photos.amazon.itIn scope2026-11-14
storyplayerbeta-photos.amazon.itIn scope2026-11-14
supplierconnect.amazon.itIn scope2026-11-14
supply.amazon.itIn scope2026-11-14
supplychain.amazon.itIn scope2026-11-14
supplychainconnect.amazon.itIn scope2026-11-14
support.amazon.itIn scope2026-11-14
sustainabilityexchange.amazon.itIn scope2026-11-14
terrier.amazon.itIn scope2026-11-14
test-multizoneupdate-202.amazon.ittestIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.