Bug bounty program
FO
Ford
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Subdomain takeover on usclsapipma.cv.ford.comAnalysed#484420 | Access Control | 2019-03-24 | – | 105 |
Subdomains70,322
| Name | Scope | First seen |
|---|---|---|
| auth.accessories.ford.comauth | In scope | 2026-11-14 |
| adminforddev3auth.ford.comauth | In scope | 2026-11-14 |
| admin-dev-iam.app.ford.comadmin, auth, dev | In scope | 2026-11-14 |
| admin-iam.app.ford.comadmin, auth | In scope | 2026-11-14 |
| admin-qa-iam.app.ford.comadmin, auth, test | In scope | 2026-11-14 |
| cas-demo2.app.ford.comauth, test | In scope | 2026-11-14 |
| cas-testazure.app.ford.comauth | In scope | 2026-11-14 |
| fdsp-auth.cf.app.ford.comauth | In scope | 2026-11-14 |
| wwwqa-faust-idp.pp.cf.app.ford.comauth | In scope | 2026-11-14 |
| auth-fdspcl-dlr.prod.cf.app.ford.comauth | In scope | 2026-11-14 |
| auth-fdspcl2-dlr.prod.cf.app.ford.comauth | In scope | 2026-11-14 |
| canary-gcs-auth.prod.cf.app.ford.comauth, staging | In scope | 2026-11-14 |
| fd-sso-edc1.prod.cf.app.ford.comauth | In scope | 2026-11-14 |
| fd-sso-edc2.prod.cf.app.ford.comauth | In scope | 2026-11-14 |
| fd-usr-sso-login-sys.prod.cf.app.ford.comauth | In scope | 2026-11-14 |
| fdsp-auth.prod.cf.app.ford.comauth | In scope | 2026-11-14 |
| identity-management.prod.cf.app.ford.comadmin, auth | In scope | 2026-11-14 |
| www-faust-idp.prod.cf.app.ford.comauth | In scope | 2026-11-14 |
| client-dev-iam.app.ford.comauth, dev | In scope | 2026-11-14 |
| client-iam.app.ford.comauth | In scope | 2026-11-14 |
| client-qa-iam.app.ford.comauth, test | In scope | 2026-11-14 |
| clientbridge-dev-iam.app.ford.comauth, dev | In scope | 2026-11-14 |
| clientbridge-iam.app.ford.comauth | In scope | 2026-11-14 |
| clientbridge-qa-iam.app.ford.comauth, test | In scope | 2026-11-14 |
| dev-iam.app.ford.comauth, dev | In scope | 2026-11-14 |
| iam.app.ford.comauth | In scope | 2026-11-14 |
| qa-iam.app.ford.comauth, test | In scope | 2026-11-14 |
| sync-iam.app.ford.comauth | In scope | 2026-11-14 |
| syncdev-iam.app.ford.comauth | In scope | 2026-11-14 |
| syncqa-iam.app.ford.comauth | In scope | 2026-11-14 |
| wwwdev-fcsd-project-adfs.app.ford.comauth | In scope | 2026-11-14 |
| auth-fdspcl-dlr-vip-ashadc07-cf-rprxy1-19.ash.ford.comauth | In scope | 2026-11-14 |
| auth-fdspcl2-dlr-vip-ashadc07-cf-rprxy1-19.ash.ford.comauth | In scope | 2026-11-14 |
| authagent-auth-vip-ashadc07-cf-rprxy1-19.ash.ford.comauth | In scope | 2026-11-14 |
| authagent-auth2-vip-ashadc07-cf-rprxy1-19.ash.ford.comauth | In scope | 2026-11-14 |
| authagent-lincoln-auth-vip-ashadc07-cf-rprxy1-19.ash.ford.comauth | In scope | 2026-11-14 |
| authagentebuy-lnc-auth-vip-ashadc07-cf-rprxy1e.ash.ford.comauth | In scope | 2026-11-14 |
| authagenteshop-lnc-auth-vip-ashadc07-cf-rprxy1e.ash.ford.comauth | In scope | 2026-11-14 |
| canary-gcs-auth-vip-ashadc07-cf-rprxy1e.ash.ford.comauth, staging | In scope | 2026-11-14 |
| faust-idp-qa-vip-ashadc07-cf-rprxy2-19.ash.ford.comauth, test | In scope | 2026-11-14 |
| faust-idp-vip-ashadc07-cf-rprxy1-19.ash.ford.comauth | In scope | 2026-11-14 |
| fd-sso-edc1-vip-ashadc07-cf-rprxy2-19.ash.ford.comauth | In scope | 2026-11-14 |
| fd-sso-edc2-vip-ashadc07-cf-rprxy2-19.ash.ford.comauth | In scope | 2026-11-14 |
| fdsp-auth-vip-ashadc07-cf-rprxy1-19.ash.ford.comauth | In scope | 2026-11-14 |
| identity-management-vip-ashadc07-cf-rprxy1-19.ash.ford.comadmin, auth | In scope | 2026-11-14 |
| auth.ford.comauth | In scope | 2026-11-14 |
| auth-b2bparts.ford.comauth | In scope | 2026-11-14 |
| www.auth-test.ford.comauth, test | In scope | 2026-11-14 |
| auth-dealer.b2bparts.ford.comauth | In scope | 2026-11-14 |
| b2e-1f-auth.ford.comauth | In scope | 2026-11-14 |
| cas-cert199wild1prod.caas.ford.comauth | In scope | 2026-11-14 |
| cas-demo1.caas.ford.comauth, test | In scope | 2026-11-14 |
| cas-demo2.caas.ford.comauth, test | In scope | 2026-11-14 |
| auth.caasdev.ford.comauth | In scope | 2026-11-14 |
| hub-auth.caasdev.ford.comauth | In scope | 2026-11-14 |
| cachefordqa1auth.ford.comauth | In scope | 2026-11-14 |
| auth.canary-gcs.ford.comauth, staging | In scope | 2026-11-14 |
| sso.caribe.ford.comauth | In scope | 2026-11-14 |
| sso.x6.caribe.ford.comauth | In scope | 2026-11-14 |
| cas.ford.comauth | In scope | 2026-11-14 |
| cas-cert199extprod.ford.comauth | In scope | 2026-11-14 |
| cas-testazure.ford.comauth | In scope | 2026-11-14 |
| www.dev.cas.ford.comauth, dev | In scope | 2026-11-14 |
| www.cas.ford.comauth | In scope | 2026-11-14 |
| www-pcf.cas.ford.comauth | In scope | 2026-11-14 |
| wwwdev.cas.ford.comauth | In scope | 2026-11-14 |
| wwwedu.cas.ford.comauth | In scope | 2026-11-14 |
| wwwqa.cas.ford.comauth | In scope | 2026-11-14 |
| wwwstg.cas.ford.comauth | In scope | 2026-11-14 |
| wwwuat.cas.ford.comauth | In scope | 2026-11-14 |
| login.centroamerica.ford.comauth | In scope | 2026-11-14 |
| sso.centroamerica.ford.comauth | In scope | 2026-11-14 |
| sso.x6.centroamerica.ford.comauth | In scope | 2026-11-14 |
| login.pd01.awsuseast01.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.pd01.awsuseast01.cf.ford.comauth | In scope | 2026-11-14 |
| login.pp01.awsuseast01.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.pp01.awsuseast01.cf.ford.comauth | In scope | 2026-11-14 |
| login.sb01.awsuseast01.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.sb01.awsuseast01.cf.ford.comauth | In scope | 2026-11-14 |
| login.pd01.awsuswest02.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.pd01.awsuswest02.cf.ford.comauth | In scope | 2026-11-14 |
| login.pp01.awsuswest02.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.pp01.awsuswest02.cf.ford.comauth | In scope | 2026-11-14 |
| login.sb01.awsuswest02.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.sb01.awsuswest02.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.cl-cn-east-preprod01.cf.ford.comauth, staging | In scope | 2026-11-14 |
| login.sys.cl-cn-east-prod01.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.cl-cn-east-sandbox01.cf.ford.comauth, test | In scope | 2026-11-14 |
| login.sys.cl-cn-north-preprod01.cf.ford.comauth, staging | In scope | 2026-11-14 |
| login.sys.cl-cn-north-prod01.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.cl-cn-north-sandbox01.cf.ford.comauth, test | In scope | 2026-11-14 |
| login.cl-cn-preprod01.cf.ford.comauth, staging | In scope | 2026-11-14 |
| login.cl-cn-prod01.cf.ford.comauth | In scope | 2026-11-14 |
| login.cl-cn-sandbox01.cf.ford.comauth, test | In scope | 2026-11-14 |
| login.cl-dev01.cf.ford.comauth, dev | In scope | 2026-11-14 |
| login.sys.cl-dev01.cf.ford.comauth, dev | In scope | 2026-11-14 |
| login.cl-dev02.cf.ford.comauth, dev | In scope | 2026-11-14 |
| login.sys.cl-east-dev02.cf.ford.comauth, dev | In scope | 2026-11-14 |
| geostorm-auth.apps.cl-east-prod01.cf.ford.comauth | In scope | 2026-11-14 |
| login.sys.cl-east-prod01.cf.ford.comauth | In scope | 2026-11-14 |
70,322 names are covered by the program's own scope; 22 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.