Skip to content
Sign in

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,561

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,561

Root
Scope
Name suggests:API
First seen
Text fileClear filters2,113 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
a9g-api.amazon.aeapiIn scope2026-11-14
api-amazondevices.amazon.aeapiIn scope2026-11-14
eu-api-avs-idrs.amazon.aeapiIn scope2026-11-14
fe-api-avs-idrs.amazon.aeapiIn scope2026-11-14
na-api-avs-idrs.amazon.aeapiIn scope2026-11-14
ramp-api.amazon.aeapiIn scope2026-11-14
webservices.amazon.aeapiIn scope2026-11-14
a9g-api.amazon.caapiIn scope2026-11-14
api.amazon.caapiIn scope2026-11-14
api-amazondevices.amazon.caapiIn scope2026-11-14
api-key.amazon.caapiIn scope2026-11-14
hop-useast-api.business.amazon.caapiIn scope2026-11-14
useast-api.business.amazon.caapiIn scope2026-11-14
eu-api-alexa.amazon.caapiIn scope2026-11-14
eu-api-avs-idrs.amazon.caapiIn scope2026-11-14
eu-south-2-api-alexa.amazon.caapiIn scope2026-11-14
fe-api-alexa.amazon.caapiIn scope2026-11-14
fe-api-avs-idrs.amazon.caapiIn scope2026-11-14
gaming-api.amazon.caapiIn scope2026-11-14
gql.music.amazon.caapiIn scope2026-11-14
beta.gql.music.amazon.caapi, stagingIn scope2026-11-14
egitelma.beta.gql.music.amazon.caapi, stagingIn scope2026-11-14
sophap.beta.gql.music.amazon.caapi, stagingIn scope2026-11-14
na-api-alexa.amazon.caapiIn scope2026-11-14
na-api-avs-idrs.amazon.caapiIn scope2026-11-14
pinnacle-api.amazon.caapiIn scope2026-11-14
ramp-api.amazon.caapiIn scope2026-11-14
soap.amazon.caapiIn scope2026-11-14
api.social.amazon.caapiIn scope2026-11-14
api.app.social.amazon.caapiIn scope2026-11-14
gamma-apigateway-fips.us-east-1.amazon.caapiIn scope2026-11-14
webservices.amazon.caapiIn scope2026-11-14
sha256.webservices.amazon.caapiIn scope2026-11-14
advertising-api.amazon.cnapiIn scope2026-11-14
advertising-api-test.amazon.cnapi, testIn scope2026-11-14
api.amazon.cnapiIn scope2026-11-14
api-amazondevices.amazon.cnapiIn scope2026-11-14
api-amazondevices-cn.amazon.cnapiIn scope2026-11-14
api-cslp-emt.amazon.cnapiIn scope2026-11-14
api-prime.amazon.cnapiIn scope2026-11-14
eu-api-avs-idrs.amazon.cnapiIn scope2026-11-14
fe-api-avs-idrs.amazon.cnapiIn scope2026-11-14
api.globalstore.amazon.cnapiIn scope2026-11-14
monitor-api-public-cn.amazon.cnapi, monitoringIn scope2026-11-14
na-api-avs-idrs.amazon.cnapiIn scope2026-11-14
soap.amazon.cnapiIn scope2026-11-14
webservices.amazon.cnapiIn scope2026-11-14
sha256.webservices.amazon.cnapiIn scope2026-11-14
a9g-api.amazon.co.jpapiIn scope2026-11-14
accesspoints-api.amazon.co.jpapiIn scope2026-11-14
advertising-api-test.amazon.co.jpapi, testIn scope2026-11-14
api.amazon.co.jpapiIn scope2026-11-14
api-amazondevices.amazon.co.jpapiIn scope2026-11-14
api-key.amazon.co.jpapiIn scope2026-11-14
api-sandbox.amazon.co.jpapi, testIn scope2026-11-14
hop-uswest-api.business.amazon.co.jpapiIn scope2026-11-14
uswest-api.business.amazon.co.jpapiIn scope2026-11-14
eu-api-alexa.amazon.co.jpapiIn scope2026-11-14
eu-api-avs-idrs.amazon.co.jpapiIn scope2026-11-14
eu-south-2-api-alexa.amazon.co.jpapiIn scope2026-11-14
fe-api-alexa.amazon.co.jpapiIn scope2026-11-14
fe-api-avs-idrs.amazon.co.jpapiIn scope2026-11-14
merchant-api.amazon.co.jpapiIn scope2026-11-14
gql.music.amazon.co.jpapiIn scope2026-11-14
beta.gql.music.amazon.co.jpapi, stagingIn scope2026-11-14
na-api-alexa.amazon.co.jpapiIn scope2026-11-14
na-api-avs-idrs.amazon.co.jpapiIn scope2026-11-14
origin-accesspoints-api.amazon.co.jpapiIn scope2026-11-14
pinnacle-api.amazon.co.jpapiIn scope2026-11-14
ramp-api.amazon.co.jpapiIn scope2026-11-14
api.sandbox.amazon.co.jpapi, testIn scope2026-11-14
soap.amazon.co.jpapiIn scope2026-11-14
webservices.amazon.co.jpapiIn scope2026-11-14
sha256.webservices.amazon.co.jpapiIn scope2026-11-14
a9g-api.amazon.co.ukapiIn scope2026-11-14
advertising-api-test.amazon.co.ukapi, testIn scope2026-11-14
af-mobile-api.amazon.co.ukapiIn scope2026-11-14
af-mobile-api-preprod.amazon.co.ukapi, stagingIn scope2026-11-14
api.amazon.co.ukapiIn scope2026-11-14
api-amazondevices.amazon.co.ukapiIn scope2026-11-14
api-key.amazon.co.ukapiIn scope2026-11-14
api-preprod.amazon.co.ukapi, stagingIn scope2026-11-14
api-sandbox.amazon.co.ukapi, testIn scope2026-11-14
api-test.amazon.co.ukapi, testIn scope2026-11-14
eu-api-alexa.amazon.co.ukapiIn scope2026-11-14
eu-api-avs-idrs.amazon.co.ukapiIn scope2026-11-14
eu-south-2-api-alexa.amazon.co.ukapiIn scope2026-11-14
fe-api-alexa.amazon.co.ukapiIn scope2026-11-14
fe-api-avs-idrs.amazon.co.ukapiIn scope2026-11-14
merchant-api.amazon.co.ukapiIn scope2026-11-14
gql.music.amazon.co.ukapiIn scope2026-11-14
beta.gql.music.amazon.co.ukapi, stagingIn scope2026-11-14
na-api-alexa.amazon.co.ukapiIn scope2026-11-14
na-api-avs-idrs.amazon.co.ukapiIn scope2026-11-14
pinnacle-api.amazon.co.ukapiIn scope2026-11-14
ramp-api.amazon.co.ukapiIn scope2026-11-14
api.sandbox.amazon.co.ukapi, testIn scope2026-11-14
soap.amazon.co.ukapiIn scope2026-11-14
api.social.amazon.co.ukapiIn scope2026-11-14
euwest-api.stage-business.amazon.co.ukapi, stagingIn scope2026-11-14

90,560 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in