Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root
Scope
Name suggests
First seen
Text file90,563 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
api-key.amazon.caapiIn scope2026-11-14
apx-security.amazon.caIn scope2026-11-14
ara.amazon.caIn scope2026-11-14
arap.amazon.caIn scope2026-11-14
arcus-www.amazon.caIn scope2026-11-14
argileto.amazon.caIn scope2026-11-14
asmw.amazon.caIn scope2026-11-14
asp.amazon.caIn scope2026-11-14
assistant.amazon.caIn scope2026-11-14
associates.amazon.caIn scope2026-11-14
astore.amazon.caIn scope2026-11-14
atv-ps.amazon.caIn scope2026-11-14
author.amazon.caIn scope2026-11-14
auxilium.amazon.caIn scope2026-11-14
auxilium-extern-preprod.amazon.castagingIn scope2026-11-14
avs-idrs.amazon.caIn scope2026-11-14
aws-beta.amazon.castagingIn scope2026-11-14
billing-hubportal.amazon.caIn scope2026-11-14
billing-kep.amazon.caIn scope2026-11-14
billing-p2k.amazon.caIn scope2026-11-14
billing-partnercentral.amazon.caIn scope2026-11-14
blueprints.amazon.caIn scope2026-11-14
brandanalytics.amazon.caIn scope2026-11-14
brandregistry.amazon.caIn scope2026-11-14
brandservices.amazon.caIn scope2026-11-14
contextualgateway.browserapps.amazon.caIn scope2026-11-14
cookie.browserapps.amazon.caIn scope2026-11-14
dossier.browserapps.amazon.caIn scope2026-11-14
feed.browserapps.amazon.caIn scope2026-11-14
horizonte.browserapps.amazon.caIn scope2026-11-14
identity.browserapps.amazon.caauthIn scope2026-11-14
mobile-identity.browserapps.amazon.caauthIn scope2026-11-14
product.browserapps.amazon.caIn scope2026-11-14
reporter.browserapps.amazon.caIn scope2026-11-14
storage.browserapps.amazon.caIn scope2026-11-14
wishlist.browserapps.amazon.caIn scope2026-11-14
business.amazon.caIn scope2026-11-14
business-agents.amazon.caIn scope2026-11-14
elinks.business.amazon.caIn scope2026-11-14
hop-useast-api.business.amazon.caapiIn scope2026-11-14
migration.business.amazon.caIn scope2026-11-14
useast-api.business.amazon.caapiIn scope2026-11-14
www.business.amazon.caIn scope2026-11-14
c-returns.amazon.caIn scope2026-11-14
internal.campfire.amazon.cainternalIn scope2026-11-14
carriercentral.amazon.caIn scope2026-11-14
catalog-mapper-ca.amazon.caIn scope2026-11-14
catalog-retail.amazon.caIn scope2026-11-14
catalog-sc.amazon.caIn scope2026-11-14
catalog-sc-pilot.amazon.caIn scope2026-11-14
cde-ta-g7g.amazon.caIn scope2026-11-14
cde-ta-g7g-preprod.amazon.castagingIn scope2026-11-14
flex.beta.cdn.amazon.castagingIn scope2026-11-14
flex.cdn.amazon.caIn scope2026-11-14
sellercentral.cdn.amazon.caIn scope2026-11-14
www.cdn.amazon.caIn scope2026-11-14
cls.amazon.caIn scope2026-11-14
c-und-mm.clurns.amazon.caIn scope2026-11-14
cmu-receiver-na.amazon.caIn scope2026-11-14
cname-aero-standard-testing77-exp2.amazon.catestIn scope2026-11-14
cname1-aero-standard-niktesting113.amazon.caIn scope2026-11-14
cname1-aero-standard-vtesting77-exp2.amazon.caIn scope2026-11-14
cname1-aero-std-vibtest-22.amazon.caIn scope2026-11-14
cname1-aero-std-vibtest-24.amazon.caIn scope2026-11-14
cname2-aero-standard-niktesting113.amazon.caIn scope2026-11-14
cname2-aero-std-vibtest-22.amazon.caIn scope2026-11-14
cname2-aero-std-vibtest-24.amazon.caIn scope2026-11-14
completion.amazon.caIn scope2026-11-14
content-drive.amazon.caIn scope2026-11-14
contextualgateway-browserapps.amazon.caIn scope2026-11-14
alexa-skills.corp.amazon.cainternalIn scope2026-11-14
alexaskills.corp.amazon.cainternalIn scope2026-11-14
customer-service.amazon.caIn scope2026-11-14
customerservice.amazon.caIn scope2026-11-14
d16gars.amazon.caIn scope2026-11-14
data.amazon.caIn scope2026-11-14
dcp.amazon.caIn scope2026-11-14
ddee.amazon.caIn scope2026-11-14
ddee-preprod.amazon.castagingIn scope2026-11-14
defaultroutetest.amazon.caIn scope2026-11-14
defaultroutetest1.amazon.caIn scope2026-11-14
delegate-weblab-stesting1.amazon.caIn scope2026-11-14
delegate-weblab-stesting2.amazon.caIn scope2026-11-14
delegate-weblab-stesting67.amazon.caIn scope2026-11-14
dev-business.amazon.cadevIn scope2026-11-14
devo-business-agents.amazon.caIn scope2026-11-14
digprjsurvey.amazon.caIn scope2026-11-14
dl.amazon.caIn scope2026-11-14
documents.amazon.caIn scope2026-11-14
download-photos.amazon.caIn scope2026-11-14
dp-gw-na.amazon.caIn scope2026-11-14
dp-gw-preprod.amazon.castagingIn scope2026-11-14
drona.amazon.caIn scope2026-11-14
drona-ca.amazon.caIn scope2026-11-14
dropship.amazon.caIn scope2026-11-14
dtp.amazon.caIn scope2026-11-14
dynamicmctesting2.amazon.caIn scope2026-11-14
edgeonly-mcm16345026.amazon.caIn scope2026-11-14
eu-api-alexa.amazon.caapiIn scope2026-11-14
eu-api-avs-idrs.amazon.caapiIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated