Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,561
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,561

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
identity-browserapps.amazon.aeauthIn scope2026-11-14
identity.browserapps.amazon.caauthIn scope2026-11-14
mobile-identity.browserapps.amazon.caauthIn scope2026-11-14
identity-browserapps.amazon.caauthIn scope2026-11-14
identity.browserapps.amazon.cnauthIn scope2026-11-14
mobile-identity.browserapps.amazon.cnauthIn scope2026-11-14
cas-retail-proxy-cn-north-1-gamma.amazon.cnauthIn scope2026-11-14
cas-retail-proxy-cn-north-1-prod.amazon.cnauthIn scope2026-11-14
cn-login-aws-training.amazon.cnauthIn scope2026-11-14
rexp-auth-proxy.amazon.cnauthIn scope2026-11-14
identity.browserapps.amazon.co.jpauthIn scope2026-11-14
mobile-identity.browserapps.amazon.co.jpauthIn scope2026-11-14
identity-browserapps.amazon.co.jpauthIn scope2026-11-14
signin.amazon.co.jpauthIn scope2026-11-14
identity.browserapps.amazon.co.ukauthIn scope2026-11-14
mobile-identity.browserapps.amazon.co.ukauthIn scope2026-11-14
identity-browserapps.amazon.co.ukauthIn scope2026-11-14
access-service-sso.amazon.comauth, vpnIn scope2026-11-14
sso.account.amazon.comauthIn scope2026-11-14
caswebsitecontent-beta.cas.advertising.amazon.comauth, stagingIn scope2026-11-14
caswebsitecontent-beta-iad.cas.advertising.amazon.comauth, stagingIn scope2026-11-14
caswebsitecontent-prod-dub.cas.advertising.amazon.comauthIn scope2026-11-14
caswebsitecontent-prod-iad.cas.advertising.amazon.comauthIn scope2026-11-14
caswebsitecontent-prod-pdx.cas.advertising.amazon.comauthIn scope2026-11-14
iam-dashboard-corp.aea.amazon.comadmin, auth, internalIn scope2026-11-14
auth.na.integ.aftx.amazon.comauthIn scope2026-11-14
tbabbar-moveapp.auth.na.integ.aftx.amazon.comauthIn scope2026-11-14
ailab-auth.amazon.comauthIn scope2026-11-14
bindle-service-gamma-sso.aka.amazon.comauthIn scope2026-11-14
bindle-service-sso.aka.amazon.comauthIn scope2026-11-14
identity-streamquery-eu.aka.amazon.comauthIn scope2026-11-14
identity-streamquery-na.aka.amazon.comauthIn scope2026-11-14
lily-telecom-identity-website.aka.amazon.comauthIn scope2026-11-14
midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
anfalh.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
berkleyu.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
cplunk.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
drchawda.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
jbutchko.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
jianwech.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
test.jianwech.regportal.midway-auth-integ.aka.amazon.comauth, testIn scope2026-11-14
testing.jianwech.regportal.midway-auth-integ.aka.amazon.comauth, testIn scope2026-11-14
jwmart.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
kitharak.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
api.kitharak.regportal.midway-auth-integ.aka.amazon.comapi, authIn scope2026-11-14
liamdr.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
martmao.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
rahultum.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
rahultumdev.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
saideepr.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
yuxinson.regportal.midway-auth-integ.aka.amazon.comauthIn scope2026-11-14
prime-session-tracer-auth-proxy.aka.amazon.comauthIn scope2026-11-14
auth.artists.amazon.comauthIn scope2026-11-14
audible-auth.amazon.comauthIn scope2026-11-14
auth-6pm-na.amazon.comauthIn scope2026-11-14
auth-6pm-na-tcp.amazon.comauthIn scope2026-11-14
auth-findzen-na.amazon.comauthIn scope2026-11-14
auth-goat.amazon.comauthIn scope2026-11-14
auth-goat-gamma.amazon.comauthIn scope2026-11-14
auth-key.amazon.comauthIn scope2026-11-14
auth-rookieusa-na.amazon.comauthIn scope2026-11-14
auth-shopbop.amazon.comauthIn scope2026-11-14
auth-vrsnl-na.amazon.comauthIn scope2026-11-14
auth-woot.amazon.comauthIn scope2026-11-14
auth-zappos-na.amazon.comauthIn scope2026-11-14
auth-zappos-na-tcp.amazon.comauthIn scope2026-11-14
auth-zapposcouture-na.amazon.comauthIn scope2026-11-14
auth-zapposcouture-na-tcp.amazon.comauthIn scope2026-11-14
hiring.auth.amazon.comauthIn scope2026-11-14

90,560 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in