Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root
Scope
Name suggests
First seen
Text file90,563 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
pay-v2.amazon.co.ukIn scope2026-11-14
payments.amazon.co.ukIn scope2026-11-14
payments-fe.amazon.co.ukIn scope2026-11-14
payments-na.amazon.co.ukIn scope2026-11-14
payments-sandbox.amazon.co.uktestIn scope2026-11-14
authorize.payments-sandbox.amazon.co.uktestIn scope2026-11-14
payments-us.amazon.co.ukIn scope2026-11-14
authorize.payments.amazon.co.ukIn scope2026-11-14
photos.amazon.co.ukIn scope2026-11-14
photosandvideos.amazon.co.ukIn scope2026-11-14
pico.amazon.co.ukIn scope2026-11-14
pinnacle-api.amazon.co.ukapiIn scope2026-11-14
play.amazon.co.ukIn scope2026-11-14
poweredby.amazon.co.ukIn scope2026-11-14
preview-business-agents.amazon.co.ukstagingIn scope2026-11-14
primenow.amazon.co.ukIn scope2026-11-14
ssofaast.private.amazon.co.ukinternalIn scope2026-11-14
product-ads.amazon.co.ukIn scope2026-11-14
productads.amazon.co.ukIn scope2026-11-14
promotions.amazon.co.ukIn scope2026-11-14
puptrack-eu.amazon.co.ukIn scope2026-11-14
r.amazon.co.ukIn scope2026-11-14
ramp-api.amazon.co.ukapiIn scope2026-11-14
rampapi.amazon.co.ukIn scope2026-11-14
rcm-uk.amazon.co.ukIn scope2026-11-14
read.amazon.co.ukIn scope2026-11-14
reinstate.amazon.co.ukIn scope2026-11-14
relay.amazon.co.ukIn scope2026-11-14
repair.amazon.co.ukIn scope2026-11-14
www.repair.amazon.co.ukIn scope2026-11-14
retail-smtp-in-eu.amazon.co.ukmailIn scope2026-11-14
retail-smtp-in-eu-1.amazon.co.ukmailIn scope2026-11-14
retail-smtp-in-eu-2.amazon.co.ukmailIn scope2026-11-14
retail-smtp-in-eu-3.amazon.co.ukmailIn scope2026-11-14
rf-completion.amazon.co.ukIn scope2026-11-14
rtr-lp.amazon.co.ukIn scope2026-11-14
s1.amazon.co.ukIn scope2026-11-14
sandbox.amazon.co.uktestIn scope2026-11-14
sandbox-business-agents.amazon.co.uktestIn scope2026-11-14
api.sandbox.amazon.co.ukapi, testIn scope2026-11-14
sdu.amazon.co.ukIn scope2026-11-14
se-a4k.amazon.co.ukIn scope2026-11-14
se-cde-ta-g7g.amazon.co.ukIn scope2026-11-14
seamus.amazon.co.ukIn scope2026-11-14
secure.amazon.co.ukIn scope2026-11-14
secure-fields.amazon.co.ukIn scope2026-11-14
securephotostorageservice-eu-external.amazon.co.ukIn scope2026-11-14
selection.amazon.co.ukIn scope2026-11-14
sell.amazon.co.ukIn scope2026-11-14
seller.amazon.co.ukIn scope2026-11-14
seller-central-pilot.amazon.co.ukIn scope2026-11-14
sellercentral.amazon.co.ukIn scope2026-11-14
sellerflex.amazon.co.ukIn scope2026-11-14
sellerflex-alt-zslgzmy.amazon.co.ukIn scope2026-11-14
sellerflex-alt-zslgzmyb.amazon.co.ukIn scope2026-11-14
services.amazon.co.ukIn scope2026-11-14
www.services.amazon.co.ukIn scope2026-11-14
setup-firetv.amazon.co.ukIn scope2026-11-14
sharingservice.amazon.co.ukIn scope2026-11-14
sharingservice-beta.amazon.co.ukstagingIn scope2026-11-14
sharingservice-eu-beta.amazon.co.ukstagingIn scope2026-11-14
sharingservice-gamma.amazon.co.ukIn scope2026-11-14
sharingservice-opf.amazon.co.ukIn scope2026-11-14
ship.amazon.co.ukIn scope2026-11-14
shippercentral-onebox-uk.amazon.co.ukIn scope2026-11-14
shipping.amazon.co.ukIn scope2026-11-14
shm.amazon.co.ukIn scope2026-11-14
sierra-discovery.amazon.co.ukIn scope2026-11-14
skills-store.amazon.co.ukIn scope2026-11-14
skills-store-eu.amazon.co.ukIn scope2026-11-14
skills-store-eu-south-2.amazon.co.ukIn scope2026-11-14
skills-store-fe.amazon.co.ukIn scope2026-11-14
skills-store-na.amazon.co.ukIn scope2026-11-14
slow-alb.amazon.co.ukIn scope2026-11-14
slow-nlb.amazon.co.ukIn scope2026-11-14
smarthub.amazon.co.ukIn scope2026-11-14
smile.amazon.co.ukIn scope2026-11-14
www.smile.amazon.co.ukIn scope2026-11-14
snowcentral.amazon.co.ukIn scope2026-11-14
soap.amazon.co.ukapiIn scope2026-11-14
social.amazon.co.ukIn scope2026-11-14
api.social.amazon.co.ukapiIn scope2026-11-14
app.social.amazon.co.ukIn scope2026-11-14
sp.amazon.co.ukIn scope2026-11-14
spicy.amazon.co.ukIn scope2026-11-14
sponsored-ads.amazon.co.ukIn scope2026-11-14
ssofaast.amazon.co.ukIn scope2026-11-14
ssofaast-aftx.amazon.co.ukIn scope2026-11-14
ssofaast-fusepp.amazon.co.ukIn scope2026-11-14
ssofaast-wms.amazon.co.ukIn scope2026-11-14
stage-business.amazon.co.ukstagingIn scope2026-11-14
euwest-api.stage-business.amazon.co.ukapi, stagingIn scope2026-11-14
hop-euwest-api.stage-business.amazon.co.ukapi, stagingIn scope2026-11-14
hop-useast-api.stage-business.amazon.co.ukapi, stagingIn scope2026-11-14
static.amazon.co.ukIn scope2026-11-14
storepickup.amazon.co.ukIn scope2026-11-14
storyplayer-photos.amazon.co.ukIn scope2026-11-14
storyplayerbeta-photos.amazon.co.ukIn scope2026-11-14
supplierconnect.amazon.co.ukIn scope2026-11-14
supply.amazon.co.ukIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated