Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Avalara

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
14
Disclosed reports
0
Subdomains
3,938

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains3,938

Root
Scope
Name suggests
First seen
Text file3,938 names
Subdomains of Avalara
NameScopeFirst seen
westavarouter.edge.avalara.comIn scope2026-11-14
webhooks.efs.avalara.comIn scope2026-11-14
elr.avalara.comIn scope2026-11-14
asm.elr.avalara.comIn scope2026-11-14
asm-gateway.elr.avalara.comIn scope2026-11-14
earchive-tr.elr.avalara.comIn scope2026-11-14
earchive-tr-dr.elr.avalara.comIn scope2026-11-14
einvoicing-fr.elr.avalara.comIn scope2026-11-14
einvoicing-fr-b2g.elr.avalara.comIn scope2026-11-14
einvoicing-fr-dr.elr.avalara.comIn scope2026-11-14
einvoicing-fr-g2b.elr.avalara.comIn scope2026-11-14
einvoicing-tr.elr.avalara.comIn scope2026-11-14
einvoicing-tr-dr.elr.avalara.comIn scope2026-11-14
mandate-utility-services-fr.elr.avalara.comIn scope2026-11-14
mandate-utility-services-fr-dr.elr.avalara.comIn scope2026-11-14
einvoicing.prv-sbx.elr.avalara.comtestIn scope2026-11-14
vat-mapper-ui.production.emea.avalara.comIn scope2026-11-14
returns-api.emea.avalara.comapiIn scope2026-11-14
returns-api.sbx.emea.avalara.comapi, testIn scope2026-11-14
sl.sbx.emea.avalara.comtestIn scope2026-11-14
vat-mapper-ui.sbx.emea.avalara.comtestIn scope2026-11-14
sl.emea.avalara.comIn scope2026-11-14
employeecenter.avalara.comIn scope2026-11-14
emtrk.avalara.comIn scope2026-11-14
engage.avalara.comIn scope2026-11-14
app.engage.avalara.comIn scope2026-11-14
images.engage.avalara.comIn scope2026-11-14
eu-central-vpn.avalara.comvpnIn scope2026-11-14
address-service.eu-west-1.avalara.comIn scope2026-11-14
api.eu-west-1.avalara.comapiIn scope2026-11-14
avatax.eu-west-1.avalara.comIn scope2026-11-14
avatax-api.eu-west-1.avalara.comapiIn scope2026-11-14
identity.eu-west-1.avalara.comauthIn scope2026-11-14
rest.eu-west-1.avalara.comIn scope2026-11-14
restv1.eu-west-1.avalara.comIn scope2026-11-14
address-service.sbx.eu-west-1.avalara.comtestIn scope2026-11-14
api.sbx.eu-west-1.avalara.comapi, testIn scope2026-11-14
avatax.sbx.eu-west-1.avalara.comtestIn scope2026-11-14
avatax-api.sbx.eu-west-1.avalara.comapi, testIn scope2026-11-14
identity.sbx.eu-west-1.avalara.comauth, testIn scope2026-11-14
rest.sbx.eu-west-1.avalara.comtestIn scope2026-11-14
restv1.sbx.eu-west-1.avalara.comtestIn scope2026-11-14
events.avalara.comIn scope2026-11-14
excise.avalara.comIn scope2026-11-14
exciserates.avalara.comIn scope2026-11-14
sre-test.exciserates.avalara.comtestIn scope2026-11-14
excisesbx.avalara.comIn scope2026-11-14
prom-sbx.excisesbx.avalara.comtestIn scope2026-11-14
excisetmp.avalara.comIn scope2026-11-14
exciseuat.avalara.comIn scope2026-11-14
exemptions.avalara.comIn scope2026-11-14
api.exemptions.avalara.comapiIn scope2026-11-14
api-jobs.exemptions.avalara.comapiIn scope2026-11-14
api-pub.exemptions.avalara.comapiIn scope2026-11-14
api-web.exemptions.avalara.comapiIn scope2026-11-14
cip.exemptions.avalara.comIn scope2026-11-14
sbx.cip.exemptions.avalara.comtestIn scope2026-11-14
wildcard.sbx.cip.exemptions.avalara.comtestIn scope2026-11-14
wildcard.cip.exemptions.avalara.comIn scope2026-11-14
gencert.exemptions.avalara.comIn scope2026-11-14
sbx.gencert.exemptions.avalara.comtestIn scope2026-11-14
wildcard.sbx.gencert.exemptions.avalara.comtestIn scope2026-11-14
jobs.exemptions.avalara.comIn scope2026-11-14
sbx.jobs.exemptions.avalara.comtestIn scope2026-11-14
sbx.exemptions.avalara.comtestIn scope2026-11-14
api.sbx.exemptions.avalara.comapi, testIn scope2026-11-14
wildcard.sbx.exemptions.avalara.comtestIn scope2026-11-14
ttr-migration.exemptions.avalara.comIn scope2026-11-14
sbx.ttr-migration.exemptions.avalara.comtestIn scope2026-11-14
wildcard.sbx.ttr-migration.exemptions.avalara.comtestIn scope2026-11-14
wildcard.ttr-migration.exemptions.avalara.comIn scope2026-11-14
web.exemptions.avalara.comIn scope2026-11-14
api.web.exemptions.avalara.comapiIn scope2026-11-14
sbx.web.exemptions.avalara.comtestIn scope2026-11-14
api.sbx.web.exemptions.avalara.comapi, testIn scope2026-11-14
wildcard.sbx.web.exemptions.avalara.comtestIn scope2026-11-14
wildcard.web.exemptions.avalara.comIn scope2026-11-14
wildcard.exemptions.avalara.comIn scope2026-11-14
explore.avalara.comIn scope2026-11-14
fatca.avalara.comIn scope2026-11-14
sre-test.fatca.avalara.comtestIn scope2026-11-14
foglight.avalara.comIn scope2026-11-14
fuel.avalara.comIn scope2026-11-14
sre-test.fuel.avalara.comtestIn scope2026-11-14
fuelinvoicing.avalara.comIn scope2026-11-14
sre-test.fuelinvoicing.avalara.comtestIn scope2026-11-14
shopifyapp.connector.gcp.avalara.comIn scope2026-11-14
shopapp.connector.int.gcp.avalara.comIn scope2026-11-14
shopifyapp.connector.sbx.gcp.avalara.comtestIn scope2026-11-14
us-east1.gcp.avalara.comIn scope2026-11-14
shopify.us-east1.gcp.avalara.comIn scope2026-11-14
getrates.avalara.comIn scope2026-11-14
go.avalara.comIn scope2026-11-14
app.go.avalara.comIn scope2026-11-14
images.go.avalara.comIn scope2026-11-14
mail01.go.avalara.commailIn scope2026-11-14
trk.go.avalara.comIn scope2026-11-14
goliveingestion.avalara.comIn scope2026-11-14
goliverecommendation.avalara.comIn scope2026-11-14
googleshopping-extractor.avalara.comIn scope2026-11-14

3,938 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated