Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
14
Disclosed reports
0
Subdomains
3,938

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains3,938

Subdomains of Avalara
NameScopeFirst seen
staging.avexsolutions.avalara.comstagingIn scope2026-11-14
www.avexsolutions.avalara.comIn scope2026-11-14
avi.avalara.comIn scope2026-11-14
avi-gcp.avalara.comIn scope2026-11-14
avi-oci.avalara.comIn scope2026-11-14
avi-tts.avalara.comIn scope2026-11-14
beveragealcohol.avalara.comIn scope2026-11-14
beveragealcohol-test.avalara.comtestIn scope2026-11-14
www.beveragealcohol-test.avalara.comtestIn scope2026-11-14
portal.beveragealcohol.avalara.comIn scope2026-11-14
www.beveragealcohol.avalara.comIn scope2026-11-14
bigcommerce-connector.avalara.comIn scope2026-11-14
biztech.avalara.comIn scope2026-11-14
api.biztech.avalara.comapiIn scope2026-11-14
grafana.biztech.avalara.commonitoringIn scope2026-11-14
usage-service.production.biztech.avalara.comIn scope2026-11-14
blackhole.avalara.comIn scope2026-11-14
blog.avalara.comIn scope2026-11-14
sre-test.blog.avalara.comtestIn scope2026-11-14
businesslicense.avalara.comIn scope2026-11-14
buy.avalara.comIn scope2026-11-14
qa-eb.buy.avalara.comtestIn scope2026-11-14
sandbox.buy.avalara.comtestIn scope2026-11-14
staging-eb.buy.avalara.comstagingIn scope2026-11-14
campaign.avalara.comIn scope2026-11-14
admin.capital.avalara.comadminIn scope2026-11-14
api.capital.avalara.comapiIn scope2026-11-14
careers.avalara.comIn scope2026-11-14
cashapp.avalara.comIn scope2026-11-14
cdn.avalara.comIn scope2026-11-14
ceplogger.avalara.comIn scope2026-11-14
certcapture.avalara.comIn scope2026-11-14
certexpress.avalara.comIn scope2026-11-14
certexpressapi.avalara.comIn scope2026-11-14
chat.avalara.comIn scope2026-11-14
cloud-vpn.avalara.comvpnIn scope2026-11-14
cofensevision.avalara.comIn scope2026-11-14
communications.avalara.comIn scope2026-11-14
communicationstaxrates.avalara.comIn scope2026-11-14
sre-test.communicationstaxrates.avalara.comtestIn scope2026-11-14
community.avalara.comIn scope2026-11-14
sre-test.community.avalara.comtestIn scope2026-11-14
www.community.avalara.comIn scope2026-11-14
compliancemanagement.avalara.comIn scope2026-11-14
avi-slack.connector.avalara.comIn scope2026-11-14
onboarding.ccms.connector.avalara.comIn scope2026-11-14
config.connector.avalara.comIn scope2026-11-14
audit.config.connector.avalara.comIn scope2026-11-14
ui.audit.config.connector.avalara.comIn scope2026-11-14
ui.config.connector.avalara.comIn scope2026-11-14
shopapp.connector.avalara.comIn scope2026-11-14
shopifyapp.connector.avalara.comIn scope2026-11-14
api.connectors.avalara.comapiIn scope2026-11-14
content.avalara.comIn scope2026-11-14
datasync.content.avalara.comIn scope2026-11-14
tr4cdatasync.content.avalara.comIn scope2026-11-14
contentgeneration.avalara.comIn scope2026-11-14
craigtest-delete.avalara.comIn scope2026-11-14
craigtest2.avalara.comIn scope2026-11-14
craigtest3.avalara.comIn scope2026-11-14
craigtest4.avalara.comIn scope2026-11-14
cup-dev.avalara.comdevIn scope2026-11-14
www.cup-dev.avalara.comdevIn scope2026-11-14
dc1.avalara.comIn scope2026-11-14
dc2.avalara.comIn scope2026-11-14
dc3.avalara.comIn scope2026-11-14
demo.avalara.comtestIn scope2026-11-14
devauth.avalara.comIn scope2026-11-14
www.devauth.avalara.comIn scope2026-11-14
developer.avalara.comIn scope2026-11-14
secure.developer.avalara.comIn scope2026-11-14
developercommunity.avalara.comIn scope2026-11-14
devjira.avalara.comIn scope2026-11-14
devwiki.avalara.comIn scope2026-11-14
documentlocker.avalara.comIn scope2026-11-14
prd.documentlocker.avalara.comIn scope2026-11-14
wildcard.prd.documentlocker.avalara.comIn scope2026-11-14
sbx.documentlocker.avalara.comtestIn scope2026-11-14
wildcard.sbx.documentlocker.avalara.comtestIn scope2026-11-14
wildcard.documentlocker.avalara.comIn scope2026-11-14
driftchat.avalara.comIn scope2026-11-14
durham-vdi.avalara.comvpnIn scope2026-11-14
duty-calculator.avalara.comIn scope2026-11-14
ec1a-az2-stv-gp-gw-100a.avalara.comIn scope2026-11-14
ec1b-az3-stv-gp-gw-100b.avalara.comIn scope2026-11-14
cluster.edge.avalara.comIn scope2026-11-14
dev.edge.avalara.comdevIn scope2026-11-14
dev-east.edge.avalara.comdevIn scope2026-11-14
eastavarouter.edge.avalara.comIn scope2026-11-14
edge-dev-use1-a.edge.avalara.comdevIn scope2026-11-14
edge-grafana-lower.edge.avalara.commonitoringIn scope2026-11-14
edge-grafana-lower2.edge.avalara.commonitoringIn scope2026-11-14
edge-grafana-upper.edge.avalara.commonitoringIn scope2026-11-14
nate-fun.edge.avalara.comIn scope2026-11-14
nate-test-use1.edge.avalara.comtestIn scope2026-11-14
sbx.edge.avalara.comtestIn scope2026-11-14
sbx-aws-usw2-sah02.edge.avalara.comtestIn scope2026-11-14
sbx-gcp-usw3-sgs02.edge.avalara.comtestIn scope2026-11-14
sbx-midwest.edge.avalara.comtestIn scope2026-11-14
sbx-west.edge.avalara.comtestIn scope2026-11-14

3,938 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.