Bug bounty program
FO
Ford
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Subdomain takeover on usclsapipma.cv.ford.comAnalysed#484420 | Access Control | 2019-03-24 | – | 105 |
Subdomains70,322
| Name | Scope | First seen |
|---|---|---|
| helloappfortesting-internal.pp1011.apiplatform-tooling.ford.cominternal | In scope | 2026-11-14 |
| api-stars-dealer-employee-list.prod.cf.app.ford.comapi, internal | In scope | 2026-11-14 |
| corp-sts-ext.prod.cf.app.ford.cominternal | In scope | 2026-11-14 |
| corp-sts-ext.app.ford.cominternal | In scope | 2026-11-14 |
| corp-sts-ext-l7.app.ford.cominternal | In scope | 2026-11-14 |
| employee.art.ford.cominternal | In scope | 2026-11-14 |
| api-stars-dealer-employee-list-vip-ashadc07-cf-rprxy1-19.ash.ford.comapi, internal | In scope | 2026-11-14 |
| corp-sts-ext-l7-vip-ashadc01-rprxy1-19.ash.ford.cominternal | In scope | 2026-11-14 |
| corp-sts-ext-vip-ashadc07-cf-rprxy1e.ash.ford.cominternal | In scope | 2026-11-14 |
| corp-sts-ext-vip-ashburn_prod.ash.ford.cominternal | In scope | 2026-11-14 |
| http-echo-internal-pp1620.caasdev.ford.cominternal | In scope | 2026-11-14 |
| api-stars-dealer-employee-list-vip-chiadc07-cf-rprxy1-19.chi.ford.comapi, internal | In scope | 2026-11-14 |
| corp-sts-ext-l7-vip-chiadc01-rprxy1-19.chi.ford.cominternal | In scope | 2026-11-14 |
| corp-sts-ext-vip-ashadc01-rprxy1-19.chi.ford.cominternal | In scope | 2026-11-14 |
| corp-sts-ext-vip-chiadc01-rprxy1-19.chi.ford.cominternal | In scope | 2026-11-14 |
| corp-sts-ext-vip-chiadc07-cf-rprxy1e.chi.ford.cominternal | In scope | 2026-11-14 |
| corp-sts-ext-vip-chicago_prod.chi.ford.cominternal | In scope | 2026-11-14 |
| api.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-dev.corp.ford.comapi, dev, internal | In scope | 2026-11-14 |
| api-prf.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-qat.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-stg.corp.ford.comapi, internal, staging | In scope | 2026-11-14 |
| gxlb-v1-vanity-api.corp.ford.comapi, internal | In scope | 2026-11-14 |
| gxlb-v1-vanity-api-dev.corp.ford.comapi, dev, internal | In scope | 2026-11-14 |
| gxlb-vanity-api.corp.ford.comapi, internal | In scope | 2026-11-14 |
| gxlb-vanity-api-dev.corp.ford.comapi, dev, internal | In scope | 2026-11-14 |
| api.int.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-dev.int.corp.ford.comapi, dev, internal | In scope | 2026-11-14 |
| api-prf.int.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-qat.int.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-stg.int.corp.ford.comapi, internal, staging | In scope | 2026-11-14 |
| api.pivpn.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-dev.pivpn.corp.ford.comapi, dev, internal | In scope | 2026-11-14 |
| api-prf.pivpn.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-qat.pivpn.corp.ford.comapi, internal | In scope | 2026-11-14 |
| api-stg.pivpn.corp.ford.comapi, internal, staging | In scope | 2026-11-14 |
| corporate.ford.cominternal | In scope | 2026-11-14 |
| author.corporate.ford.cominternal | In scope | 2026-11-14 |
| author-wwwqa.corporate.ford.cominternal | In scope | 2026-11-14 |
| jobs.corporate.ford.cominternal | In scope | 2026-11-14 |
| origin.corporate.ford.cominternal | In scope | 2026-11-14 |
| prodpublish.corporate.ford.cominternal | In scope | 2026-11-14 |
| prodpublishmg.corporate.ford.cominternal | In scope | 2026-11-14 |
| qapublish.corporate.ford.cominternal | In scope | 2026-11-14 |
| qapublishmg.corporate.ford.cominternal | In scope | 2026-11-14 |
| secure.corporate.ford.cominternal | In scope | 2026-11-14 |
| securedev.corporate.ford.cominternal | In scope | 2026-11-14 |
| securedevmg.corporate.ford.cominternal | In scope | 2026-11-14 |
| secureedu.corporate.ford.cominternal | In scope | 2026-11-14 |
| secureedumg.corporate.ford.cominternal | In scope | 2026-11-14 |
| secureedumg1.corporate.ford.cominternal | In scope | 2026-11-14 |
| securemg.corporate.ford.cominternal | In scope | 2026-11-14 |
| secureqa.corporate.ford.cominternal | In scope | 2026-11-14 |
| secureqamg.corporate.ford.cominternal | In scope | 2026-11-14 |
| www.corporate.ford.cominternal | In scope | 2026-11-14 |
| wwwdev.corporate.ford.cominternal | In scope | 2026-11-14 |
| wwwedu.corporate.ford.cominternal | In scope | 2026-11-14 |
| wwwqa.corporate.ford.cominternal | In scope | 2026-11-14 |
| dsfm-internal.ford.cominternal | In scope | 2026-11-14 |
| employees.ford.cominternal | In scope | 2026-11-14 |
| qa.employees.ford.cominternal, test | In scope | 2026-11-14 |
| www2.employees.ford.cominternal | In scope | 2026-11-14 |
| wwwdev60.employees.ford.cominternal | In scope | 2026-11-14 |
| wwwmg.employees.ford.cominternal | In scope | 2026-11-14 |
| corporate.extspt.ford.cominternal | In scope | 2026-11-14 |
| api-internal.eza.ford.comapi, internal | In scope | 2026-11-14 |
| api-internal-uat.eza.ford.comapi, internal, test | In scope | 2026-11-14 |
| api-internal.fcp.ford.comapi, internal | In scope | 2026-11-14 |
| devapi-internal.fcp.ford.cominternal | In scope | 2026-11-14 |
| pd1020-api-internal.fcp.ford.comapi, internal | In scope | 2026-11-14 |
| pd1021-api-internal.fcp.ford.comapi, internal | In scope | 2026-11-14 |
| sandboxapi-internal.fcp.ford.cominternal | In scope | 2026-11-14 |
| stageapi-internal.fcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-e.dv1690.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pd1010.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pd1012.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pd1200.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-e.pd1400.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pd1411.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pd1412.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1010.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1011.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1012.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1070.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-e.pp1400.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1410.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1411.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1412.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1413.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| alfa-console-router-intranet-caas-gcp.custapps-i.pp1802.caas.gcp.ford.comadmin, internal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-i.pp1802.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| router-intranet-caas-gcp.custapps-e.st1690.caas.gcp.ford.cominternal | In scope | 2026-11-14 |
| internal-migration.ford.cominternal | In scope | 2026-11-14 |
| wwwdev.dataloadapi.apps.internal.ford.cominternal | In scope | 2026-11-14 |
| corporate.gateway.iqt.ford.cominternal | In scope | 2026-11-14 |
| ahc-internal-gw.nls.ford.cominternal | In scope | 2026-11-14 |
| chi-internal-gw.nls.ford.cominternal | In scope | 2026-11-14 |
| fra-internal-gw.nls.ford.cominternal | In scope | 2026-11-14 |
| sg-internal-gw.nls.ford.cominternal | In scope | 2026-11-14 |
| internal-migration-test-tls2.app.nst.ford.cominternal, test | In scope | 2026-11-14 |
70,322 names are covered by the program's own scope; 22 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.