Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
nsabato.federate-dev.corp.amazon.comdev, internalIn scope2026-11-14
oam-dev.fin.corp.amazon.comdev, internalIn scope2026-11-14
ofa-dev.fin.corp.amazon.comdev, internalIn scope2026-11-14
finance-approvals-dev.corp.amazon.comdev, internalIn scope2026-11-14
firescope-dev.corp.amazon.comdev, internalIn scope2026-11-14
gemba-walk-tracker-dev.corp.amazon.comdev, internalIn scope2026-11-14
holidaytool-dev.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d1.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d10.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d11.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d12.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d13.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d14.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d15.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d16.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d2.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d3.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d4.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d5.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d6.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d7.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d8.hr.corp.amazon.comdev, internalIn scope2026-11-14
peopleportal-dev-d9.hr.corp.amazon.comdev, internalIn scope2026-11-14
hrfinance-etl-dev.corp.amazon.comdev, internalIn scope2026-11-14
s3-index-mechanic-dev-alpha.aka.iad.corp.amazon.comdata, dev, internal, stagingIn scope2026-11-14
dev-awstableau.iad.corp.amazon.comdev, internalIn scope2026-11-14
vision-dev.iad.corp.amazon.comdev, internalIn scope2026-11-14
id-hal-dev.corp.amazon.comdev, internalIn scope2026-11-14
infra-syseng-website-dev-beta.corp.amazon.comdev, internal, stagingIn scope2026-11-14
ionurusu-goshawk-dev.corp.amazon.comdev, internalIn scope2026-11-14
jam-beta-dev.corp.amazon.comdev, internal, stagingIn scope2026-11-14
jnnainar-goshawk-dev.corp.amazon.comdev, internalIn scope2026-11-14
laserpointer-dev.corp.amazon.comdev, internalIn scope2026-11-14
ldap-etc-dev.corp.amazon.comdev, internalIn scope2026-11-14
lily-cdr-service-dev.corp.amazon.comdev, internalIn scope2026-11-14
link-dev.corp.amazon.comdev, internalIn scope2026-11-14
local-it-items.corp.amazon.comdev, internalIn scope2026-11-14
lpt-generator-dev.corp.amazon.comdev, internalIn scope2026-11-14
morpho-dev-ops.corp.amazon.comdev, internalIn scope2026-11-14
mrwiz-dev-fradkin.corp.amazon.comdev, internalIn scope2026-11-14
mrwiz-fradkin-dev.corp.amazon.comdev, internalIn scope2026-11-14
mrwiz-owner-dev-fradkin.corp.amazon.comdev, internalIn scope2026-11-14
mrwiz-owner-fradkin-dev.corp.amazon.comdev, internalIn scope2026-11-14
mytimeoff-dev.corp.amazon.comdev, internalIn scope2026-11-14
nechtan-dev.corp.amazon.comdev, internalIn scope2026-11-14
novitas-dev-cert.corp.amazon.comdev, internalIn scope2026-11-14
opf-dev.corp.amazon.comdev, internalIn scope2026-11-14
ldapproxyh2c-corp-pdx-dev-62001.pdx2.corp.amazon.comdev, internalIn scope2026-11-14
ldapproxyh2c-corp-pdx-dev-64001.pdx4.corp.amazon.comdev, internalIn scope2026-11-14
piatolab-dev.corp.amazon.comdev, internalIn scope2026-11-14
pinnacle-container-dev.corp.amazon.comdev, internalIn scope2026-11-14
pinnacle-container-dev-gamma.corp.amazon.comdev, internalIn scope2026-11-14
pinnacle-dev.corp.amazon.comdev, internalIn scope2026-11-14
pinnacle-dev-gamma.corp.amazon.comdev, internalIn scope2026-11-14
pivot-es-dev-cerebro.corp.amazon.comdev, internalIn scope2026-11-14
pivot-es-dev-kibana.corp.amazon.comdev, internal, monitoringIn scope2026-11-14
polaris-v2-dev.corp.amazon.comdev, internalIn scope2026-11-14
pyalapid-pui-dev.corp.amazon.comdev, internalIn scope2026-11-14
rds-lttrdashboard-dev.corp.amazon.comdev, internalIn scope2026-11-14
rdwf2-dev.corp.amazon.comdev, internalIn scope2026-11-14
resourceadapter-pdx-dev.corp.amazon.comdev, internalIn scope2026-11-14
rumble-dev.corp.amazon.comdev, internalIn scope2026-11-14
sademos-dev.corp.amazon.comdev, internalIn scope2026-11-14
sbr-rmp-development-secure.corp.amazon.comdev, internalIn scope2026-11-14
scruverity-devel.corp.amazon.comdev, internalIn scope2026-11-14
sct-dev.corp.amazon.comdev, internalIn scope2026-11-14
scx-development.corp.amazon.comdev, internalIn scope2026-11-14
searchresolvers-ng-devel.corp.amazon.comdev, internalIn scope2026-11-14
seller-polling-portal-na-dev.corp.amazon.comdev, internalIn scope2026-11-14
seo-toolkit-development-api-alpha.corp.amazon.comapi, dev, internal, stagingIn scope2026-11-14
soda-dev.corp.amazon.comdev, internalIn scope2026-11-14
sspa-wit-dev.corp.amazon.comdev, internalIn scope2026-11-14
stockadmin-dev-alpha.corp.amazon.comdev, internal, stagingIn scope2026-11-14
tapper-devel.corp.amazon.comdev, internalIn scope2026-11-14
tapper-devel-kibana.corp.amazon.comdev, internal, monitoringIn scope2026-11-14
tax-alteryx-dev.corp.amazon.comdev, internalIn scope2026-11-14
tempreport-dev.corp.amazon.comdev, internalIn scope2026-11-14
textable-v2-dev.corp.amazon.comdev, internalIn scope2026-11-14
tornado-dev.corp.amazon.comdev, internalIn scope2026-11-14
trakr-dev.corp.amazon.comdev, internalIn scope2026-11-14
treasurytech-dev-wctableau.corp.amazon.comdev, internalIn scope2026-11-14
treasurytech-rpa-dev.corp.amazon.comdev, internalIn scope2026-11-14
tririga-dev.corp.amazon.comdev, internalIn scope2026-11-14
wallet-viewer-dev-dek-sigshen.corp.amazon.comdev, internalIn scope2026-11-14
we-dev.corp.amazon.comdev, internalIn scope2026-11-14
weui-common-dev.corp.amazon.comdev, internalIn scope2026-11-14
workflow-dev.corp.amazon.comdev, internalIn scope2026-11-14
zimmerr-dev.corp.amazon.comdev, internalIn scope2026-11-14
zubaidu-dev.corp.amazon.comdev, internalIn scope2026-11-14
aiyasa-eth.dev.creatorstudio.amazon.comdevIn scope2026-11-14
anuare-eon.dev.creatorstudio.amazon.comdevIn scope2026-11-14
archakk-leu.dev.creatorstudio.amazon.comdevIn scope2026-11-14
arunvait-dub.dev.creatorstudio.amazon.comdevIn scope2026-11-14
arunvait-kye.dev.creatorstudio.amazon.comdevIn scope2026-11-14
ashreekd-pen.dev.creatorstudio.amazon.comdevIn scope2026-11-14
cue.ashreekd-pen.dev.creatorstudio.amazon.comdevIn scope2026-11-14
balasurx-shy.dev.creatorstudio.amazon.comdevIn scope2026-11-14
bodhiman-keg.dev.creatorstudio.amazon.comdevIn scope2026-11-14
bodhiman-zap.dev.creatorstudio.amazon.comdevIn scope2026-11-14
chidrmvs-ago.dev.creatorstudio.amazon.comdevIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.