Bug bounty program
AV
Avalara
- Platform
- HackerOne
- Bounties
- None
- Assets in scope
- 14
- Disclosed reports
- 0
- Subdomains
- 3,938
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains3,938
| Name | Scope | First seen |
|---|---|---|
| classyvue-stage.3ce.comstaging | In scope | 2026-11-14 |
| stg.advancedrules.avalara.comstaging | In scope | 2026-11-14 |
| staging.avexsolutions.avalara.comstaging | In scope | 2026-11-14 |
| staging-eb.buy.avalara.comstaging | In scope | 2026-11-14 |
| staging.smallbusiness-europe.avalara.comstaging | In scope | 2026-11-14 |
| assessment.staging.smallbusiness-europe.avalara.comstaging | In scope | 2026-11-14 |
| bff.staging.smallbusiness-europe.avalara.comstaging | In scope | 2026-11-14 |
| forms.staging.smallbusiness-europe.avalara.comstaging | In scope | 2026-11-14 |
| vatreporting.staging.avalara.comstaging | In scope | 2026-11-14 |
| avapayar.stg.avalara.comstaging | In scope | 2026-11-14 |
| cashapp.stg.avalara.comstaging | In scope | 2026-11-14 |
| blackhole-staging.trustfile.avalara.comstaging | In scope | 2026-11-14 |
| staging.trustfile.avalara.comstaging | In scope | 2026-11-14 |
| metrics.staging.avatax.avalara.iomonitoring, staging | In scope | 2026-11-14 |
| epsilon.stg.eu-west-1.aws.avalara.iostaging | In scope | 2026-11-14 |
| wildcard.epsilon.stg.eu-west-1.aws.avalara.iostaging | In scope | 2026-11-14 |
| stg.aws.avalara.iostaging | In scope | 2026-11-14 |
| alpha.dev.us-west-2.aws.avalara.iodev, staging | In scope | 2026-11-14 |
| wildcard.alpha.dev.us-west-2.aws.avalara.iodev, staging | In scope | 2026-11-14 |
| beta.dev.us-west-2.aws.avalara.iodev, staging | In scope | 2026-11-14 |
| gamma.stg.us-west-2.aws.avalara.iostaging | In scope | 2026-11-14 |
| filevalidator-wss.gamma.stg.us-west-2.aws.avalara.iostaging | In scope | 2026-11-14 |
| wildcard.gamma.stg.us-west-2.aws.avalara.iostaging | In scope | 2026-11-14 |
| tcs-beta.ci.avalara.ioci, staging | In scope | 2026-11-14 |
| staging.emea.avalara.iostaging | In scope | 2026-11-14 |
| fluentd-sre-emea.staging.emea.avalara.iostaging | In scope | 2026-11-14 |
| haplo-platform-impendulo.staging.emea.avalara.iostaging | In scope | 2026-11-14 |
| stg.gcp.avalara.iostaging | In scope | 2026-11-14 |
| wildcard.alpha.dev.us-east1.gcp.avalara.iodev, staging | In scope | 2026-11-14 |
| gamma.stg.us-east1.gcp.avalara.iostaging | In scope | 2026-11-14 |
| wildcard.gamma.stg.us-east1.gcp.avalara.iostaging | In scope | 2026-11-14 |
| little-joe.stg.us-east1.gcp.avalara.iostaging | In scope | 2026-11-14 |
| wildcard.alpha.dev.us-phoenix-1.oci.avalara.iodev, staging | In scope | 2026-11-14 |
| stg.onestudio.avalara.iostaging | In scope | 2026-11-14 |
| artifacts-beta.platform.avalara.iostaging | In scope | 2026-11-14 |
| artifacts.staging.platform.avalara.iostaging | In scope | 2026-11-14 |
| docker.staging.platform.avalara.iostaging, tools | In scope | 2026-11-14 |
| docs.staging.platform.avalara.iostaging | In scope | 2026-11-14 |
| metrics.staging.platform.avalara.iomonitoring, staging | In scope | 2026-11-14 |
| scm.staging.platform.avalara.iogit, staging | In scope | 2026-11-14 |
| secrets.staging.platform.avalara.iostaging | In scope | 2026-11-14 |
| artifacts-beta.platform.qa.avalara.iostaging, test | In scope | 2026-11-14 |
| tcs-beta.qa.avalara.iostaging, test | In scope | 2026-11-14 |
| trls-beta.qa.avalara.iostaging, test | In scope | 2026-11-14 |
| stg.mylodgetax.raas.avalara.iostaging | In scope | 2026-11-14 |
| wildcard.stg.mylodgetax.raas.avalara.iostaging | In scope | 2026-11-14 |
| tcs-beta.sbx.avalara.iostaging, test | In scope | 2026-11-14 |
| trls-beta.sbx.avalara.iostaging, test | In scope | 2026-11-14 |
| taxcode.staging.avalara.iostaging | In scope | 2026-11-14 |
| addresstool.stg.avalara.iostaging | In scope | 2026-11-14 |
| adminconsole.stg.avalara.iostaging | In scope | 2026-11-14 |
| api.stg.avalara.ioapi, staging | In scope | 2026-11-14 |
| google.api.stg.avalara.ioapi, staging | In scope | 2026-11-14 |
| avatax.stg.avalara.iostaging | In scope | 2026-11-14 |
| compliance-service.stg.avalara.iostaging | In scope | 2026-11-14 |
| ecms.stg.avalara.iostaging | In scope | 2026-11-14 |
| excise.stg.avalara.iostaging | In scope | 2026-11-14 |
| aspx.excise.stg.avalara.iostaging | In scope | 2026-11-14 |
| pen.excise.stg.avalara.iostaging | In scope | 2026-11-14 |
| prom.excise.stg.avalara.iostaging | In scope | 2026-11-14 |
| prom-db.excise.stg.avalara.iodata, staging | In scope | 2026-11-14 |
| stg.excise.stg.avalara.iostaging | In scope | 2026-11-14 |
| webapp.excise.stg.avalara.iostaging | In scope | 2026-11-14 |
| google.stg.avalara.iostaging | In scope | 2026-11-14 |
| iam-ds.stg.avalara.ioauth, staging | In scope | 2026-11-14 |
| identity.stg.avalara.ioauth, staging | In scope | 2026-11-14 |
| aa.identity.stg.avalara.ioauth, staging | In scope | 2026-11-14 |
| internal-api.stg.avalara.ioapi, internal, staging | In scope | 2026-11-14 |
| internal-avatax.stg.avalara.iointernal, staging | In scope | 2026-11-14 |
| internal-rest.stg.avalara.iointernal, staging | In scope | 2026-11-14 |
| lodging.stg.avalara.iostaging | In scope | 2026-11-14 |
| ai.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| annotate.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| ard.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| ava-bot.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| ava-stx.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| avi.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| azula.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| bumblebee.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| cadence-web.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| captcha-solver.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| carol.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| carol-api.midgard.stg.avalara.ioapi, staging | In scope | 2026-11-14 |
| catalog.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| catalog-api.midgard.stg.avalara.ioapi, staging | In scope | 2026-11-14 |
| catalog-ml.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| category-intent.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| cerebro.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| chat.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| chat-agent.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| clearml-api.midgard.stg.avalara.ioapi, staging | In scope | 2026-11-14 |
| clearml-app.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| clearml-files.midgard.stg.avalara.iodata, staging | In scope | 2026-11-14 |
| content-qa.midgard.stg.avalara.iostaging, test | In scope | 2026-11-14 |
| continuum.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| continuum-workflows.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| dataquality.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| docker-registry.midgard.stg.avalara.iostaging, tools | In scope | 2026-11-14 |
| falcon.midgard.stg.avalara.iostaging | In scope | 2026-11-14 |
| grafana.midgard.stg.avalara.iomonitoring, staging | In scope | 2026-11-14 |
3,938 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.