Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,561

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,561

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
04788557e-frontier.amazon.sgIn scope2026-11-14
aero.04788557e-frontier.amazon.sgIn scope2026-11-14
edgeflow.aero.04788557e-frontier.amazon.sgIn scope2026-11-14
edgeflow-dp.aero.04788557e-frontier.amazon.sgIn scope2026-11-14
tp.04788557e-frontier.amazon.sgIn scope2026-11-14
tp.269efa191-frontier.amazon.sgIn scope2026-11-14
tp.41274b927-frontier.amazon.sgIn scope2026-11-14
tp.6fa02495a-frontier.amazon.sgIn scope2026-11-14
tp.a18983afa-frontier.amazon.sgIn scope2026-11-14
a9g-api.amazon.sgapiIn scope2026-11-14
aax-fe.amazon.sgIn scope2026-11-14
accelerator.amazon.sgIn scope2026-11-14
account-status.amazon.sgmonitoringIn scope2026-11-14
advertising.amazon.sgIn scope2026-11-14
aeswidget.amazon.sgIn scope2026-11-14
affiliate-program.amazon.sgIn scope2026-11-14
akamai-www.amazon.sgIn scope2026-11-14
api-amazondevices.amazon.sgapiIn scope2026-11-14
apx-security.amazon.sgIn scope2026-11-14
arcus-www.amazon.sgIn scope2026-11-14
atv-ps-fe.amazon.sgIn scope2026-11-14
auxilium.amazon.sgIn scope2026-11-14
auxilium-extern-preprod.amazon.sgstagingIn scope2026-11-14
brandregistry.amazon.sgIn scope2026-11-14
brandservices.amazon.sgIn scope2026-11-14
tp.cbe72ccf9-frontier.amazon.sgIn scope2026-11-14
completion.amazon.sgIn scope2026-11-14
data.amazon.sgIn scope2026-11-14
data-exchange.amazon.sgmailIn scope2026-11-14
dcp.amazon.sgIn scope2026-11-14
dl.amazon.sgIn scope2026-11-14
fastly-www.amazon.sgIn scope2026-11-14
tp.ff3967373-frontier.amazon.sgIn scope2026-11-14
fls-fe.amazon.sgIn scope2026-11-14
gaming.amazon.sgIn scope2026-11-14
internal-campfire-fe.amazon.sginternalIn scope2026-11-14
luna.amazon.sgIn scope2026-11-14
msh.amazon.sgIn scope2026-11-14
opf-kuru-retesting007.amazon.sgIn scope2026-11-14
opf-kuru-retesting008.amazon.sgIn scope2026-11-14
opf-kuru-testing006.amazon.sgtestIn scope2026-11-14
origin-dl.amazon.sgIn scope2026-11-14
origin-setup-firetv.amazon.sgIn scope2026-11-14
origin-www.amazon.sgIn scope2026-11-14
p-nt-www-amazon-sg-kalias.amazon.sgIn scope2026-11-14
p-y3-www-amazon-sg-kalias.amazon.sgIn scope2026-11-14
p-yo-www-amazon-sg-kalias.amazon.sgIn scope2026-11-14
primenow.amazon.sgIn scope2026-11-14
puptrack-fe.amazon.sgIn scope2026-11-14
r.amazon.sgIn scope2026-11-14
ramp-api.amazon.sgapiIn scope2026-11-14
rampapi.amazon.sgIn scope2026-11-14
reinstate.amazon.sgIn scope2026-11-14
sell.amazon.sgIn scope2026-11-14
sellercentral.amazon.sgIn scope2026-11-14
services.amazon.sgIn scope2026-11-14
setup-firetv.amazon.sgIn scope2026-11-14
snowcentral.amazon.sgIn scope2026-11-14
spicy.amazon.sgIn scope2026-11-14
sponsored-ads.amazon.sgIn scope2026-11-14
supplychainconnect.amazon.sgIn scope2026-11-14
transient.amazon.sgIn scope2026-11-14
appx.transient.amazon.sgIn scope2026-11-14
twitch.amazon.sgIn scope2026-11-14
unagi.amazon.sgIn scope2026-11-14
vendorcentral.amazon.sgIn scope2026-11-14
webservices.amazon.sgapiIn scope2026-11-14
www.amazon.sgIn scope2026-11-14

90,560 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in