Bug bounty program
Avalara
- Platform
- HackerOne
- Bounties
- None
- Assets in scope
- 14
- Disclosed reports
- 0
- Subdomains
- 3,938
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains3,938
| Name | Scope | First seen |
|---|---|---|
| studio.avalara.com | In scope | 2026-11-14 |
| adapter.studio.avalara.com | In scope | 2026-11-14 |
| www.adapter.studio.avalara.com | In scope | 2026-11-14 |
| connector.studio.avalara.com | In scope | 2026-11-14 |
| dr.connector.studio.avalara.com | In scope | 2026-11-14 |
| sbx.connector.studio.avalara.comtest | In scope | 2026-11-14 |
| wildcard.sbx.connector.studio.avalara.comtest | In scope | 2026-11-14 |
| wildcard.connector.studio.avalara.com | In scope | 2026-11-14 |
| extractor.studio.avalara.com | In scope | 2026-11-14 |
| eu.extractor.studio.avalara.com | In scope | 2026-11-14 |
| api.eu-west-1.extractor.studio.avalara.comapi | In scope | 2026-11-14 |
| www.api.eu-west-1.extractor.studio.avalara.comapi | In scope | 2026-11-14 |
| services.eu-west-1.extractor.studio.avalara.com | In scope | 2026-11-14 |
| www.services.eu-west-1.extractor.studio.avalara.com | In scope | 2026-11-14 |
| wildcard.eu.extractor.studio.avalara.com | In scope | 2026-11-14 |
| wildcard.extractor.studio.avalara.com | In scope | 2026-11-14 |
| www.extractor.studio.avalara.com | In scope | 2026-11-14 |
| sbx.studio.avalara.comtest | In scope | 2026-11-14 |
| adapter.sbx.studio.avalara.comtest | In scope | 2026-11-14 |
| www.adapter.sbx.studio.avalara.comtest | In scope | 2026-11-14 |
| extractor.sbx.studio.avalara.comtest | In scope | 2026-11-14 |
| wildcard.extractor.sbx.studio.avalara.comtest | In scope | 2026-11-14 |
| www.extractor.sbx.studio.avalara.comtest | In scope | 2026-11-14 |
| wildcard.sbx.studio.avalara.comtest | In scope | 2026-11-14 |
| extractor.services.studio.avalara.com | In scope | 2026-11-14 |
| www.extractor.services.studio.avalara.com | In scope | 2026-11-14 |
| extractor.sbx.services.studio.avalara.comtest | In scope | 2026-11-14 |
| www.extractor.sbx.services.studio.avalara.comtest | In scope | 2026-11-14 |
| wildcard.studio.avalara.com | In scope | 2026-11-14 |
| styleguide.avalara.com | In scope | 2026-11-14 |
| sre-test.styleguide.avalara.comtest | In scope | 2026-11-14 |
| chat.support.avalara.com | In scope | 2026-11-14 |
| taxratesapi.avalara.com | In scope | 2026-11-14 |
| test-jcm-101.avalara.comtest | In scope | 2026-11-14 |
| testa.avalara.com | In scope | 2026-11-14 |
| testb.avalara.com | In scope | 2026-11-14 |
| testwithgithub.avalara.com | In scope | 2026-11-14 |
| thegrove.avalara.com | In scope | 2026-11-14 |
| api.thegrove.avalara.comapi | In scope | 2026-11-14 |
| tracking.avalara.com | In scope | 2026-11-14 |
| tradecompliance.avalara.com | In scope | 2026-11-14 |
| training.avalara.com | In scope | 2026-11-14 |
| trainorange.avalara.com | In scope | 2026-11-14 |
| transferpricing.avalara.com | In scope | 2026-11-14 |
| translations-webhook.avalara.com | In scope | 2026-11-14 |
| trk.avalara.com | In scope | 2026-11-14 |
| trk2.avalara.com | In scope | 2026-11-14 |
| trust.avalara.com | In scope | 2026-11-14 |
| trustfile.avalara.com | In scope | 2026-11-14 |
| api.trustfile.avalara.comapi | In scope | 2026-11-14 |
| app.trustfile.avalara.com | In scope | 2026-11-14 |
| atp.trustfile.avalara.com | In scope | 2026-11-14 |
| blackhole-sandbox.trustfile.avalara.comtest | In scope | 2026-11-14 |
| blackhole-staging.trustfile.avalara.comstaging | In scope | 2026-11-14 |
| docs.trustfile.avalara.com | In scope | 2026-11-14 |
| learn.trustfile.avalara.com | In scope | 2026-11-14 |
| www.learn.trustfile.avalara.com | In scope | 2026-11-14 |
| new.trustfile.avalara.com | In scope | 2026-11-14 |
| qboextractor.trustfile.avalara.com | In scope | 2026-11-14 |
| stable.trustfile.avalara.com | In scope | 2026-11-14 |
| stable-api.trustfile.avalara.comapi | In scope | 2026-11-14 |
| staging.trustfile.avalara.comstaging | In scope | 2026-11-14 |
| trustfilebharat.avalara.com | In scope | 2026-11-14 |
| api.uat.avalara.comapi, test | In scope | 2026-11-14 |
| uatjira.avalara.com | In scope | 2026-11-14 |
| uatwiki.avalara.com | In scope | 2026-11-14 |
| ue-identity.avalara.comauth | In scope | 2026-11-14 |
| updates.avalara.com | In scope | 2026-11-14 |
| advancedrules.us-east-1.avalara.com | In scope | 2026-11-14 |
| api.us-east-1.avalara.comapi | In scope | 2026-11-14 |
| excise.us-east-1.avalara.com | In scope | 2026-11-14 |
| identity.us-east-1.avalara.comauth | In scope | 2026-11-14 |
| identity-health.us-east-1.avalara.comauth | In scope | 2026-11-14 |
| avagateway.cai02.int.us-east-1.avalara.com | In scope | 2026-11-14 |
| identity.int.us-east-1.avalara.comauth | In scope | 2026-11-14 |
| advancedrules.sbx.us-east-1.avalara.comtest | In scope | 2026-11-14 |
| identity.sbx.us-east-1.avalara.comauth, test | In scope | 2026-11-14 |
| superapi.uat.us-east-1.avalara.comtest | In scope | 2026-11-14 |
| avagateway.cgi01.int.us-east1.avalara.com | In scope | 2026-11-14 |
| api.us-west-2.avalara.comapi | In scope | 2026-11-14 |
| identity.us-west-2.avalara.comauth | In scope | 2026-11-14 |
| avagateway.cai01.int.us-west-2.avalara.com | In scope | 2026-11-14 |
| identity.int.us-west-2.avalara.comauth | In scope | 2026-11-14 |
| identity.sbx.us-west-2.avalara.comauth, test | In scope | 2026-11-14 |
| wildcard.studio.sbx.us-west-2.avalara.comtest | In scope | 2026-11-14 |
| wildcard.studio.us-west-2.avalara.com | In scope | 2026-11-14 |
| api.uat.us-west-2.avalara.comapi, test | In scope | 2026-11-14 |
| avagateway.cgi02.int.us-west3.avalara.com | In scope | 2026-11-14 |
| 208.177.24.59.ptr.us.avalara.com | In scope | 2026-11-14 |
| usermanagement.avalara.com | In scope | 2026-11-14 |
| vat-risk-assessment.avalara.com | In scope | 2026-11-14 |
| vat-tax-liability-evaluator.avalara.com | In scope | 2026-11-14 |
| vatlive.avalara.com | In scope | 2026-11-14 |
| sre-test.vatlive.avalara.comtest | In scope | 2026-11-14 |
| vatreporting.avalara.com | In scope | 2026-11-14 |
| bff.vatreporting.avalara.com | In scope | 2026-11-14 |
| omni.vatreporting.avalara.com | In scope | 2026-11-14 |
| vatreturns.avalara.com | In scope | 2026-11-14 |
| api.vatreturns.avalara.comapi | In scope | 2026-11-14 |
| vda.avalara.com | In scope | 2026-11-14 |
3,938 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.