Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
14
Disclosed reports
0
Subdomains
3,938

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains3,938

Subdomains of Avalara
NameScopeFirst seen
studio.avalara.comIn scope2026-11-14
adapter.studio.avalara.comIn scope2026-11-14
www.adapter.studio.avalara.comIn scope2026-11-14
connector.studio.avalara.comIn scope2026-11-14
dr.connector.studio.avalara.comIn scope2026-11-14
sbx.connector.studio.avalara.comtestIn scope2026-11-14
wildcard.sbx.connector.studio.avalara.comtestIn scope2026-11-14
wildcard.connector.studio.avalara.comIn scope2026-11-14
extractor.studio.avalara.comIn scope2026-11-14
eu.extractor.studio.avalara.comIn scope2026-11-14
api.eu-west-1.extractor.studio.avalara.comapiIn scope2026-11-14
www.api.eu-west-1.extractor.studio.avalara.comapiIn scope2026-11-14
services.eu-west-1.extractor.studio.avalara.comIn scope2026-11-14
www.services.eu-west-1.extractor.studio.avalara.comIn scope2026-11-14
wildcard.eu.extractor.studio.avalara.comIn scope2026-11-14
wildcard.extractor.studio.avalara.comIn scope2026-11-14
www.extractor.studio.avalara.comIn scope2026-11-14
sbx.studio.avalara.comtestIn scope2026-11-14
adapter.sbx.studio.avalara.comtestIn scope2026-11-14
www.adapter.sbx.studio.avalara.comtestIn scope2026-11-14
extractor.sbx.studio.avalara.comtestIn scope2026-11-14
wildcard.extractor.sbx.studio.avalara.comtestIn scope2026-11-14
www.extractor.sbx.studio.avalara.comtestIn scope2026-11-14
wildcard.sbx.studio.avalara.comtestIn scope2026-11-14
extractor.services.studio.avalara.comIn scope2026-11-14
www.extractor.services.studio.avalara.comIn scope2026-11-14
extractor.sbx.services.studio.avalara.comtestIn scope2026-11-14
www.extractor.sbx.services.studio.avalara.comtestIn scope2026-11-14
wildcard.studio.avalara.comIn scope2026-11-14
styleguide.avalara.comIn scope2026-11-14
sre-test.styleguide.avalara.comtestIn scope2026-11-14
chat.support.avalara.comIn scope2026-11-14
taxratesapi.avalara.comIn scope2026-11-14
test-jcm-101.avalara.comtestIn scope2026-11-14
testa.avalara.comIn scope2026-11-14
testb.avalara.comIn scope2026-11-14
testwithgithub.avalara.comIn scope2026-11-14
thegrove.avalara.comIn scope2026-11-14
api.thegrove.avalara.comapiIn scope2026-11-14
tracking.avalara.comIn scope2026-11-14
tradecompliance.avalara.comIn scope2026-11-14
training.avalara.comIn scope2026-11-14
trainorange.avalara.comIn scope2026-11-14
transferpricing.avalara.comIn scope2026-11-14
translations-webhook.avalara.comIn scope2026-11-14
trk.avalara.comIn scope2026-11-14
trk2.avalara.comIn scope2026-11-14
trust.avalara.comIn scope2026-11-14
trustfile.avalara.comIn scope2026-11-14
api.trustfile.avalara.comapiIn scope2026-11-14
app.trustfile.avalara.comIn scope2026-11-14
atp.trustfile.avalara.comIn scope2026-11-14
blackhole-sandbox.trustfile.avalara.comtestIn scope2026-11-14
blackhole-staging.trustfile.avalara.comstagingIn scope2026-11-14
docs.trustfile.avalara.comIn scope2026-11-14
learn.trustfile.avalara.comIn scope2026-11-14
www.learn.trustfile.avalara.comIn scope2026-11-14
new.trustfile.avalara.comIn scope2026-11-14
qboextractor.trustfile.avalara.comIn scope2026-11-14
stable.trustfile.avalara.comIn scope2026-11-14
stable-api.trustfile.avalara.comapiIn scope2026-11-14
staging.trustfile.avalara.comstagingIn scope2026-11-14
trustfilebharat.avalara.comIn scope2026-11-14
api.uat.avalara.comapi, testIn scope2026-11-14
uatjira.avalara.comIn scope2026-11-14
uatwiki.avalara.comIn scope2026-11-14
ue-identity.avalara.comauthIn scope2026-11-14
updates.avalara.comIn scope2026-11-14
advancedrules.us-east-1.avalara.comIn scope2026-11-14
api.us-east-1.avalara.comapiIn scope2026-11-14
excise.us-east-1.avalara.comIn scope2026-11-14
identity.us-east-1.avalara.comauthIn scope2026-11-14
identity-health.us-east-1.avalara.comauthIn scope2026-11-14
avagateway.cai02.int.us-east-1.avalara.comIn scope2026-11-14
identity.int.us-east-1.avalara.comauthIn scope2026-11-14
advancedrules.sbx.us-east-1.avalara.comtestIn scope2026-11-14
identity.sbx.us-east-1.avalara.comauth, testIn scope2026-11-14
superapi.uat.us-east-1.avalara.comtestIn scope2026-11-14
avagateway.cgi01.int.us-east1.avalara.comIn scope2026-11-14
api.us-west-2.avalara.comapiIn scope2026-11-14
identity.us-west-2.avalara.comauthIn scope2026-11-14
avagateway.cai01.int.us-west-2.avalara.comIn scope2026-11-14
identity.int.us-west-2.avalara.comauthIn scope2026-11-14
identity.sbx.us-west-2.avalara.comauth, testIn scope2026-11-14
wildcard.studio.sbx.us-west-2.avalara.comtestIn scope2026-11-14
wildcard.studio.us-west-2.avalara.comIn scope2026-11-14
api.uat.us-west-2.avalara.comapi, testIn scope2026-11-14
avagateway.cgi02.int.us-west3.avalara.comIn scope2026-11-14
208.177.24.59.ptr.us.avalara.comIn scope2026-11-14
usermanagement.avalara.comIn scope2026-11-14
vat-risk-assessment.avalara.comIn scope2026-11-14
vat-tax-liability-evaluator.avalara.comIn scope2026-11-14
vatlive.avalara.comIn scope2026-11-14
sre-test.vatlive.avalara.comtestIn scope2026-11-14
vatreporting.avalara.comIn scope2026-11-14
bff.vatreporting.avalara.comIn scope2026-11-14
omni.vatreporting.avalara.comIn scope2026-11-14
vatreturns.avalara.comIn scope2026-11-14
api.vatreturns.avalara.comapiIn scope2026-11-14
vda.avalara.comIn scope2026-11-14

3,938 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.