Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Avalara

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
14
Disclosed reports
0
Subdomains
3,938

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains3,938

Root
Scope
Name suggests
First seen
Text file3,938 names
Subdomains of Avalara
NameScopeFirst seen
jira.avalara.comtoolsIn scope2026-11-14
kg.avalara.comIn scope2026-11-14
knowledge.avalara.comIn scope2026-11-14
knowledge-be.avalara.comIn scope2026-11-14
api.kyc.avalara.comapiIn scope2026-11-14
internal.api.kyc.avalara.comapi, internalIn scope2026-11-14
int.kyc.avalara.comIn scope2026-11-14
landedcost.avalara.comIn scope2026-11-14
classify.landedcost.avalara.comIn scope2026-11-14
vat.landedcost.avalara.comIn scope2026-11-14
learn.avalara.comIn scope2026-11-14
legal.avalara.comIn scope2026-11-14
licensing.avalara.comIn scope2026-11-14
localization-webhook.avalara.comIn scope2026-11-14
lodgingtaxquiz.avalara.comIn scope2026-11-14
macmanagement.avalara.comIn scope2026-11-14
mail.avalara.commailIn scope2026-11-14
mail1.avalara.commailIn scope2026-11-14
mail2.avalara.commailIn scope2026-11-14
managed-support-api.avalara.comapiIn scope2026-11-14
marketing.avalara.comIn scope2026-11-14
api.marketing.avalara.comapiIn scope2026-11-14
miles.marketing.avalara.comIn scope2026-11-14
mcm-gp.avalara.comIn scope2026-11-14
mcm-gw-gp.avalara.comIn scope2026-11-14
mcp.avalara.comIn scope2026-11-14
monitor.avalara.commonitoringIn scope2026-11-14
monremote.avalara.comIn scope2026-11-14
mrc.avalara.comIn scope2026-11-14
ms-sts.avalara.comIn scope2026-11-14
mylodgetax.avalara.comIn scope2026-11-14
app.mylodgetax.avalara.comIn scope2026-11-14
cart.mylodgetax.avalara.comIn scope2026-11-14
rr.mylodgetax.avalara.comIn scope2026-11-14
app.rr.mylodgetax.avalara.comIn scope2026-11-14
sbx-app.mylodgetax.avalara.comtestIn scope2026-11-14
mylodgetaxapi.avalara.comIn scope2026-11-14
mylodgetaxpro.avalara.comIn scope2026-11-14
nebraska.avalara.comIn scope2026-11-14
netauth.avalara.comIn scope2026-11-14
new-mrc.avalara.comIn scope2026-11-14
news.avalara.comIn scope2026-11-14
analytics.news.avalara.comIn scope2026-11-14
app.news.avalara.comIn scope2026-11-14
images.news.avalara.comIn scope2026-11-14
mail01.news.avalara.commailIn scope2026-11-14
mail02.news.avalara.commailIn scope2026-11-14
mail03.news.avalara.commailIn scope2026-11-14
mail04.news.avalara.commailIn scope2026-11-14
mail05.news.avalara.commailIn scope2026-11-14
mail06.news.avalara.commailIn scope2026-11-14
newsroom.avalara.comIn scope2026-11-14
nexus.avalara.comtoolsIn scope2026-11-14
nexusstudy.avalara.comIn scope2026-11-14
offers.avalara.comIn scope2026-11-14
sre-test.offers.avalara.comtestIn scope2026-11-14
onboarding.avalara.comIn scope2026-11-14
onestudio.avalara.comIn scope2026-11-14
sbx.onestudio.avalara.comtestIn scope2026-11-14
orange.avalara.comIn scope2026-11-14
outhost2.avalara.comIn scope2026-11-14
partner.avalara.comIn scope2026-11-14
partners.avalara.comIn scope2026-11-14
sre-test.partners.avalara.comtestIn scope2026-11-14
www.partners.avalara.comIn scope2026-11-14
partnerstest.avalara.comIn scope2026-11-14
partnertraining.avalara.comIn scope2026-11-14
payment-capture.avalara.comIn scope2026-11-14
www.payment-capture.avalara.comIn scope2026-11-14
payments.avalara.comIn scope2026-11-14
www.payments.avalara.comIn scope2026-11-14
transferpricing.pen.avalara.comIn scope2026-11-14
phishmereporter.avalara.comIn scope2026-11-14
pioneer.avalara.comIn scope2026-11-14
platformpilot.avalara.comIn scope2026-11-14
portal.avalara.comIn scope2026-11-14
private-it.avalara.cominternalIn scope2026-11-14
grafana.professionalservices.avalara.commonitoringIn scope2026-11-14
ps.avalara.comIn scope2026-11-14
httvalidator.ps.avalara.comIn scope2026-11-14
api-apt.pt.avalara.comapiIn scope2026-11-14
ptrp.avalara.comIn scope2026-11-14
api.ptrp.avalara.comapiIn scope2026-11-14
qa-ait-voluntarycompliance.avalara.comtestIn scope2026-11-14
qa-ati-voluntarycompliance.avalara.comtestIn scope2026-11-14
quoting.avalara.comIn scope2026-11-14
registration.avalara.comIn scope2026-11-14
www.registration.avalara.comIn scope2026-11-14
reporting-agent.avalara.comIn scope2026-11-14
reports.avalara.comIn scope2026-11-14
omni.reports.avalara.comIn scope2026-11-14
sandbox.reports.avalara.comtestIn scope2026-11-14
returns.avalara.comIn scope2026-11-14
returns-api.avalara.comapiIn scope2026-11-14
api.returns.avalara.comapiIn scope2026-11-14
salestax.avalara.comIn scope2026-11-14
sre-test.salestax.avalara.comtestIn scope2026-11-14
sanjuan.avalara.comIn scope2026-11-14
aht-inf-vdicon1.sanjuan.avalara.comIn scope2026-11-14
aht-inf-vdicon2.sanjuan.avalara.comIn scope2026-11-14

3,938 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated