Bug bounty program
FO
Ford
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Subdomain takeover on usclsapipma.cv.ford.comAnalysed#484420 | Access Control | 2019-03-24 | – | 105 |
Subdomains70,322
| Name | Scope | First seen |
|---|---|---|
| adas-zabbix-d.ford.commonitoring | In scope | 2026-11-14 |
| www.adas-zabbix-d.ford.commonitoring | In scope | 2026-11-14 |
| adas-zabbix-pp.ford.commonitoring | In scope | 2026-11-14 |
| www.adas-zabbix-pp.ford.commonitoring | In scope | 2026-11-14 |
| www.adas-zabbix-preprod.ford.commonitoring, staging | In scope | 2026-11-14 |
| status.fp.agenda.ford.commonitoring | In scope | 2026-11-14 |
| status.fpdev.agenda.ford.commonitoring | In scope | 2026-11-14 |
| status.fpqa.agenda.ford.commonitoring | In scope | 2026-11-14 |
| bc-grafana.app.ford.commonitoring | In scope | 2026-11-14 |
| bc-grafana-dev.app.ford.comdev, monitoring | In scope | 2026-11-14 |
| status-fpqa-agenda.pp.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| test-monitor.pp.cf.app.ford.commonitoring, test | In scope | 2026-11-14 |
| uvissuites-logging-service-qa.pp.cf.app.ford.commonitoring, test | In scope | 2026-11-14 |
| status-fp-agenda.prod.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| uvissuites-logging-service.prod.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| vows-bulk-call-off-status-ui-prod-dlr.prod.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| vows-dealer-status-reporting-ui-prod-dlr.prod.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| vows-single-status-trans-hist-ui-prod-dlr.prod.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| vows-status-analysis-detail-ui-prod-dlr.prod.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| www-pdo-sdp-metrics.prod.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| uvissuites-logging-service.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| uvissuites-logging-service-qa.cf.app.ford.commonitoring, test | In scope | 2026-11-14 |
| www-pdo-sdp-metrics.cf.app.ford.commonitoring | In scope | 2026-11-14 |
| bc-grafana.cloud.app.ford.commonitoring | In scope | 2026-11-14 |
| bc-grafana-dev.cloud.app.ford.comdev, monitoring | In scope | 2026-11-14 |
| launch-metrics-mfg-analytics-gcp.cloud.app.ford.commonitoring | In scope | 2026-11-14 |
| fwd1-ext-qa-splunk.app.ford.commonitoring, test | In scope | 2026-11-14 |
| fwd1-ext-splunk.app.ford.commonitoring | In scope | 2026-11-14 |
| fwd2-ext-qa-splunk.app.ford.commonitoring, test | In scope | 2026-11-14 |
| fwd2-ext-splunk.app.ford.commonitoring | In scope | 2026-11-14 |
| grafana-vault.app.ford.commonitoring, tools | In scope | 2026-11-14 |
| grafana-vault-dev.app.ford.comdev, monitoring, tools | In scope | 2026-11-14 |
| grafana-vault-test.app.ford.commonitoring, test, tools | In scope | 2026-11-14 |
| hec-ext-qa-splunk.app.ford.commonitoring, test | In scope | 2026-11-14 |
| hec-ext-qa-sticky-splunk.app.ford.commonitoring, test | In scope | 2026-11-14 |
| hec-ext-splunk.app.ford.commonitoring | In scope | 2026-11-14 |
| syslog-ext-qa-splunk.app.ford.commonitoring, test | In scope | 2026-11-14 |
| syslog-ext-splunk.app.ford.commonitoring | In scope | 2026-11-14 |
| syslogsec-ext-qa-splunk.app.ford.commonitoring, test | In scope | 2026-11-14 |
| syslogsec-ext-splunk.app.ford.commonitoring | In scope | 2026-11-14 |
| fwd1-ext-qa-splunk-vip-ashadc01-rprxy2.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| fwd1-ext-qa-splunk-vip-ashadc01-rprxy2-19.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| fwd1-ext-splunk-vip-ashadc01-rprxy1.ash.ford.commonitoring | In scope | 2026-11-14 |
| fwd2-ext-qa-splunk-vip-ashadc01-rprxy2.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| fwd2-ext-qa-splunk-vip-ashadc01-rprxy2-19.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| fwd2-ext-splunk-vip-ashadc01-rprxy1.ash.ford.commonitoring | In scope | 2026-11-14 |
| hec-ext-qa-splunk-vip-ashadc01-rprxy2.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| hec-ext-qa-splunk-vip-ashadc01-rprxy2-19.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| hec-ext-qa-sticky-splunk-vip-ashadc01-rprxy2.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| hec-ext-qa-sticky-splunk-vip-ashadc01-rprxy2-19.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| hec-ext-splunk-vip-ashadc01-rprxy1.ash.ford.commonitoring | In scope | 2026-11-14 |
| hec-ext-sticky-splunk-vip-ashadc01-rprxy1.ash.ford.commonitoring | In scope | 2026-11-14 |
| pdo-sdp-metrics-vip-ashadc07-cf-rprxy1-19.ash.ford.commonitoring | In scope | 2026-11-14 |
| status-fp-agenda-vip-ashadc07-cf-rprxy1-19.ash.ford.commonitoring | In scope | 2026-11-14 |
| status-fpqa-agenda-vip-ashadc07-cf-rprxy2-19.ash.ford.commonitoring | In scope | 2026-11-14 |
| syslog-ext-qa-splunk-vip-ashadc01-rprxy2.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| syslog-ext-qa-splunk-vip-ashadc01-rprxy2-19.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| syslog-ext-splunk-vip-ashadc01-rprxy1.ash.ford.commonitoring | In scope | 2026-11-14 |
| syslogsec-ext-qa-splunk-vip-ashadc01-rprxy2-19.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| syslogsec-ext-splunk-vip-ashadc01-rprxy1-19.ash.ford.commonitoring | In scope | 2026-11-14 |
| test-monitor-vip-ashadc07-cf-rprxy2-19.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| uvissuites-logging-service-qa-vip-ashadc07-cf-rprxy2-19.ash.ford.commonitoring, test | In scope | 2026-11-14 |
| uvissuites-logging-service-vip-ashadc07-cf-rprxy1-19.ash.ford.commonitoring | In scope | 2026-11-14 |
| vows-bulk-call-off-status-ui-prod-dlr-vip-ashadc07-cf-rprxy1-19.ash.ford.commonitoring | In scope | 2026-11-14 |
| vows-dealer-status-reporting-ui-prod-dlr-vip-ashadc07-cf-rprxy1.ash.ford.commonitoring | In scope | 2026-11-14 |
| vows-single-status-trans-hist-ui-prod-dlr-vip-ashadc07-cf-rprxy.ash.ford.commonitoring | In scope | 2026-11-14 |
| vows-status-analysis-detail-ui-prod-dlr-vip-ashadc07-cf-rprxy1.ash.ford.commonitoring | In scope | 2026-11-14 |
| alertmanager.astro.ford.commonitoring | In scope | 2026-11-14 |
| grafana.astro.ford.commonitoring | In scope | 2026-11-14 |
| kibana.astro.ford.commonitoring | In scope | 2026-11-14 |
| prometheus.astro.ford.commonitoring | In scope | 2026-11-14 |
| alertmanager.astrodev.ford.commonitoring | In scope | 2026-11-14 |
| grafana.astrodev.ford.commonitoring | In scope | 2026-11-14 |
| kibana.astrodev.ford.commonitoring | In scope | 2026-11-14 |
| prometheus.astrodev.ford.commonitoring | In scope | 2026-11-14 |
| alertmanager.astropp.ford.commonitoring | In scope | 2026-11-14 |
| grafana.astropp.ford.commonitoring | In scope | 2026-11-14 |
| kibana.astropp.ford.commonitoring | In scope | 2026-11-14 |
| prometheus.astropp.ford.commonitoring | In scope | 2026-11-14 |
| alertmanager.astrosbx.ford.commonitoring | In scope | 2026-11-14 |
| grafana.astrosbx.ford.commonitoring | In scope | 2026-11-14 |
| kibana.astrosbx.ford.commonitoring | In scope | 2026-11-14 |
| prometheus.astrosbx.ford.commonitoring | In scope | 2026-11-14 |
| alertmanager.astrotest.ford.commonitoring | In scope | 2026-11-14 |
| grafana.astrotest.ford.commonitoring | In scope | 2026-11-14 |
| kibana.astrotest.ford.commonitoring | In scope | 2026-11-14 |
| prometheus.astrotest.ford.commonitoring | In scope | 2026-11-14 |
| bc-grafana.ford.commonitoring | In scope | 2026-11-14 |
| bc-grafana-dev.ford.comdev, monitoring | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pd02.azinsouth01.caas.ford.commonitoring | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pd01.azinwest01.caas.ford.commonitoring | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pd01.edc.caas.ford.commonitoring | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pd02.edc.caas.ford.commonitoring | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pd03.edc.caas.ford.commonitoring | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pd04.edc.caas.ford.commonitoring | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pd05.edc.caas.ford.commonitoring | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pp01.edc.caas.ford.commonitoring | In scope | 2026-11-14 |
| grafana-dev.caasdev.ford.comdev, monitoring | In scope | 2026-11-14 |
| grafana-qa.caasdev.ford.commonitoring, test | In scope | 2026-11-14 |
| caas-usage-metrics.apps.pd06.caasdev.ford.commonitoring | In scope | 2026-11-14 |
70,322 names are covered by the program's own scope; 22 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.