Bug bounty program
AV
Avalara
- Platform
- HackerOne
- Bounties
- None
- Assets in scope
- 14
- Disclosed reports
- 0
- Subdomains
- 3,936
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains3,936
| Name | Scope | First seen |
|---|---|---|
| sandbox.account.avalara.comtest | In scope | 2026-11-14 |
| sandbox.admin.avalara.comadmin, test | In scope | 2026-11-14 |
| okta-avalara.ai-qa.avalara.comauth, test | In scope | 2026-11-14 |
| sre-test.alternativemotorfuels.avalara.comtest | In scope | 2026-11-14 |
| perf.landedcost.api.avalara.comapi, test | In scope | 2026-11-14 |
| sandbox.landedcost.api.avalara.comapi, test | In scope | 2026-11-14 |
| qa.onboarding.api.avalara.comapi, test | In scope | 2026-11-14 |
| sandbox.onboarding.api.avalara.comapi, test | In scope | 2026-11-14 |
| sandbox.auiworkflow.avalara.comtest | In scope | 2026-11-14 |
| sre-test.auth.avalara.comauth, test | In scope | 2026-11-14 |
| test.auth1.avalara.comauth, test | In scope | 2026-11-14 |
| avalara-servicedesk-test.avalara.comtest | In scope | 2026-11-14 |
| beveragealcohol-test.avalara.comtest | In scope | 2026-11-14 |
| www.beveragealcohol-test.avalara.comtest | In scope | 2026-11-14 |
| sre-test.blog.avalara.comtest | In scope | 2026-11-14 |
| qa-eb.buy.avalara.comtest | In scope | 2026-11-14 |
| sandbox.buy.avalara.comtest | In scope | 2026-11-14 |
| sre-test.communicationstaxrates.avalara.comtest | In scope | 2026-11-14 |
| sre-test.community.avalara.comtest | In scope | 2026-11-14 |
| demo.avalara.comtest | In scope | 2026-11-14 |
| sbx.documentlocker.avalara.comtest | In scope | 2026-11-14 |
| wildcard.sbx.documentlocker.avalara.comtest | In scope | 2026-11-14 |
| nate-test-use1.edge.avalara.comtest | In scope | 2026-11-14 |
| sbx.edge.avalara.comtest | In scope | 2026-11-14 |
| sbx-aws-usw2-sah02.edge.avalara.comtest | In scope | 2026-11-14 |
| sbx-gcp-usw3-sgs02.edge.avalara.comtest | In scope | 2026-11-14 |
| sbx-midwest.edge.avalara.comtest | In scope | 2026-11-14 |
| sbx-west.edge.avalara.comtest | In scope | 2026-11-14 |
| einvoicing.prv-sbx.elr.avalara.comtest | In scope | 2026-11-14 |
| returns-api.sbx.emea.avalara.comapi, test | In scope | 2026-11-14 |
| sl.sbx.emea.avalara.comtest | In scope | 2026-11-14 |
| vat-mapper-ui.sbx.emea.avalara.comtest | In scope | 2026-11-14 |
| address-service.sbx.eu-west-1.avalara.comtest | In scope | 2026-11-14 |
| api.sbx.eu-west-1.avalara.comapi, test | In scope | 2026-11-14 |
| avatax.sbx.eu-west-1.avalara.comtest | In scope | 2026-11-14 |
| avatax-api.sbx.eu-west-1.avalara.comapi, test | In scope | 2026-11-14 |
| identity.sbx.eu-west-1.avalara.comauth, test | In scope | 2026-11-14 |
| rest.sbx.eu-west-1.avalara.comtest | In scope | 2026-11-14 |
| restv1.sbx.eu-west-1.avalara.comtest | In scope | 2026-11-14 |
| sre-test.exciserates.avalara.comtest | In scope | 2026-11-14 |
| prom-sbx.excisesbx.avalara.comtest | In scope | 2026-11-14 |
| sbx.cip.exemptions.avalara.comtest | In scope | 2026-11-14 |
| wildcard.sbx.cip.exemptions.avalara.comtest | In scope | 2026-11-14 |
| sbx.gencert.exemptions.avalara.comtest | In scope | 2026-11-14 |
| wildcard.sbx.gencert.exemptions.avalara.comtest | In scope | 2026-11-14 |
| sbx.jobs.exemptions.avalara.comtest | In scope | 2026-11-14 |
| sbx.exemptions.avalara.comtest | In scope | 2026-11-14 |
| api.sbx.exemptions.avalara.comapi, test | In scope | 2026-11-14 |
| wildcard.sbx.exemptions.avalara.comtest | In scope | 2026-11-14 |
| sbx.ttr-migration.exemptions.avalara.comtest | In scope | 2026-11-14 |
| wildcard.sbx.ttr-migration.exemptions.avalara.comtest | In scope | 2026-11-14 |
| sbx.web.exemptions.avalara.comtest | In scope | 2026-11-14 |
| api.sbx.web.exemptions.avalara.comapi, test | In scope | 2026-11-14 |
| wildcard.sbx.web.exemptions.avalara.comtest | In scope | 2026-11-14 |
| sre-test.fatca.avalara.comtest | In scope | 2026-11-14 |
| sre-test.fuel.avalara.comtest | In scope | 2026-11-14 |
| sre-test.fuelinvoicing.avalara.comtest | In scope | 2026-11-14 |
| shopifyapp.connector.sbx.gcp.avalara.comtest | In scope | 2026-11-14 |
| gw-vpn-test-it.avalara.comtest, vpn | In scope | 2026-11-14 |
| sandbox.home.avalara.comtest | In scope | 2026-11-14 |
| identity-sbx.avalara.comauth, test | In scope | 2026-11-14 |
| sbx.bahlsen.inposia.avalara.comtest | In scope | 2026-11-14 |
| sandbox.integrations.avalara.comtest | In scope | 2026-11-14 |
| sbx-app.mylodgetax.avalara.comtest | In scope | 2026-11-14 |
| sre-test.offers.avalara.comtest | In scope | 2026-11-14 |
| sbx.onestudio.avalara.comtest | In scope | 2026-11-14 |
| sre-test.partners.avalara.comtest | In scope | 2026-11-14 |
| qa-ait-voluntarycompliance.avalara.comtest | In scope | 2026-11-14 |
| qa-ati-voluntarycompliance.avalara.comtest | In scope | 2026-11-14 |
| sandbox.reports.avalara.comtest | In scope | 2026-11-14 |
| sre-test.salestax.avalara.comtest | In scope | 2026-11-14 |
| checkmarx-qa.sanjuan.avalara.comtest | In scope | 2026-11-14 |
| irmjenkins-qa.sanjuan.avalara.comtest | In scope | 2026-11-14 |
| oktasso-sbx-primary.sanjuan.avalara.comtest | In scope | 2026-11-14 |
| oktasso-sbx-secondary.sanjuan.avalara.comtest | In scope | 2026-11-14 |
| prof-service-qa.sanjuan.avalara.comtest | In scope | 2026-11-14 |
| whitesource.qa.sanjuan.avalara.comtest | In scope | 2026-11-14 |
| threadfix-qa.sanjuan.avalara.comtest | In scope | 2026-11-14 |
| 1099.sbx.avalara.comtest | In scope | 2026-11-14 |
| www.1099.sbx.avalara.comtest | In scope | 2026-11-14 |
| account.sbx.avalara.comtest | In scope | 2026-11-14 |
| acu.sbx.avalara.comtest | In scope | 2026-11-14 |
| www.acu.sbx.avalara.comtest | In scope | 2026-11-14 |
| advancedrules.sbx.avalara.comtest | In scope | 2026-11-14 |
| aionboardingbff.sbx.avalara.comtest | In scope | 2026-11-14 |
| api.sbx.avalara.comapi, test | In scope | 2026-11-14 |
| exemptions.api.sbx.avalara.comapi, test | In scope | 2026-11-14 |
| google.api.sbx.avalara.comapi, test | In scope | 2026-11-14 |
| app.sbx.avalara.comtest | In scope | 2026-11-14 |
| webplatform.app.sbx.avalara.comtest | In scope | 2026-11-14 |
| atp.sbx.avalara.comtest | In scope | 2026-11-14 |
| atr.sbx.avalara.comtest | In scope | 2026-11-14 |
| avapayar.sbx.avalara.comtest | In scope | 2026-11-14 |
| hscode.avatax.sbx.avalara.comtest | In scope | 2026-11-14 |
| avawriter-webhook.sbx.avalara.comtest | In scope | 2026-11-14 |
| avi.sbx.avalara.comtest | In scope | 2026-11-14 |
| avi-gcp.sbx.avalara.comtest | In scope | 2026-11-14 |
| avi-oci.sbx.avalara.comtest | In scope | 2026-11-14 |
| beveragealcohol.sbx.avalara.comtest | In scope | 2026-11-14 |
| www.beveragealcohol.sbx.avalara.comtest | In scope | 2026-11-14 |
3,936 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.