Bug bounty program
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| nsabato.federate-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| oam-dev.fin.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| ofa-dev.fin.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| finance-approvals-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| firescope-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| gemba-walk-tracker-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| holidaytool-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d1.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d10.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d11.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d12.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d13.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d14.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d15.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d16.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d2.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d3.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d4.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d5.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d6.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d7.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d8.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| peopleportal-dev-d9.hr.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| hrfinance-etl-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| s3-index-mechanic-dev-alpha.aka.iad.corp.amazon.comdata, dev, internal, staging | In scope | 2026-11-14 |
| dev-awstableau.iad.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| vision-dev.iad.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| id-hal-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| infra-syseng-website-dev-beta.corp.amazon.comdev, internal, staging | In scope | 2026-11-14 |
| ionurusu-goshawk-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| jam-beta-dev.corp.amazon.comdev, internal, staging | In scope | 2026-11-14 |
| jnnainar-goshawk-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| laserpointer-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| ldap-etc-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| lily-cdr-service-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| link-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| local-it-items.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| lpt-generator-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| morpho-dev-ops.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| mrwiz-dev-fradkin.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| mrwiz-fradkin-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| mrwiz-owner-dev-fradkin.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| mrwiz-owner-fradkin-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| mytimeoff-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| nechtan-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| novitas-dev-cert.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| opf-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| ldapproxyh2c-corp-pdx-dev-62001.pdx2.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| ldapproxyh2c-corp-pdx-dev-64001.pdx4.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| piatolab-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| pinnacle-container-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| pinnacle-container-dev-gamma.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| pinnacle-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| pinnacle-dev-gamma.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| pivot-es-dev-cerebro.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| pivot-es-dev-kibana.corp.amazon.comdev, internal, monitoring | In scope | 2026-11-14 |
| polaris-v2-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| pyalapid-pui-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| rds-lttrdashboard-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| rdwf2-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| resourceadapter-pdx-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| rumble-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| sademos-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| sbr-rmp-development-secure.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| scruverity-devel.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| sct-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| scx-development.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| searchresolvers-ng-devel.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| seller-polling-portal-na-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| seo-toolkit-development-api-alpha.corp.amazon.comapi, dev, internal, staging | In scope | 2026-11-14 |
| soda-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| sspa-wit-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| stockadmin-dev-alpha.corp.amazon.comdev, internal, staging | In scope | 2026-11-14 |
| tapper-devel.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| tapper-devel-kibana.corp.amazon.comdev, internal, monitoring | In scope | 2026-11-14 |
| tax-alteryx-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| tempreport-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| textable-v2-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| tornado-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| trakr-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| treasurytech-dev-wctableau.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| treasurytech-rpa-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| tririga-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| wallet-viewer-dev-dek-sigshen.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| we-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| weui-common-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| workflow-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| zimmerr-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| zubaidu-dev.corp.amazon.comdev, internal | In scope | 2026-11-14 |
| aiyasa-eth.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| anuare-eon.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| archakk-leu.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| arunvait-dub.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| arunvait-kye.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| ashreekd-pen.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| cue.ashreekd-pen.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| balasurx-shy.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| bodhiman-keg.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| bodhiman-zap.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
| chidrmvs-ago.dev.creatorstudio.amazon.comdev | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.