Bug bounty program
FO
Ford
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Subdomain takeover on usclsapipma.cv.ford.comAnalysed#484420 | Access Control | 2019-03-24 | – | 105 |
Subdomains70,322
| Name | Scope | First seen |
|---|---|---|
| www.a2staging.ford.comstaging | In scope | 2026-11-14 |
| beta.academycenter.ford.comstaging | In scope | 2026-11-14 |
| www.beta.academycenter.ford.comstaging | In scope | 2026-11-14 |
| staging.accessories.ford.comstaging | In scope | 2026-11-14 |
| beta.accountmanager.ford.comstaging | In scope | 2026-11-14 |
| www.adas-zabbix-preprod.ford.commonitoring, staging | In scope | 2026-11-14 |
| www.staging.datainterfacedashboard.adas.ford.comstaging | In scope | 2026-11-14 |
| wwwdev2.preview.aem-engineering.ford.comstaging | In scope | 2026-11-14 |
| www.preview.aemeng.ford.comstaging | In scope | 2026-11-14 |
| wwwac.preview.aemeng.ford.comstaging | In scope | 2026-11-14 |
| wwwdev.preview.aemeng.ford.comstaging | In scope | 2026-11-14 |
| wwwdev2.preview.aemeng.ford.comstaging | In scope | 2026-11-14 |
| wwwdev2ac.preview.aemeng.ford.comstaging | In scope | 2026-11-14 |
| wwwdevac.preview.aemeng.ford.comstaging | In scope | 2026-11-14 |
| wwwstg.preview.aemeng.ford.comstaging | In scope | 2026-11-14 |
| wwwstgac.preview.aemeng.ford.comstaging | In scope | 2026-11-14 |
| www.aerovision-stage.ford.comstaging | In scope | 2026-11-14 |
| edp-console-preprod.ai.ford.comadmin, staging | In scope | 2026-11-14 |
| stage.alexaremotelogin.ford.comstaging | In scope | 2026-11-14 |
| alpha-match.ford.comstaging | In scope | 2026-11-14 |
| www.alpha-match.ford.comstaging | In scope | 2026-11-14 |
| analytics-rtsa-cl-preprod.ford.comstaging | In scope | 2026-11-14 |
| analytics-rtsa-preprod.ford.comstaging | In scope | 2026-11-14 |
| api-preprod.anypointsa.ford.comapi, staging | In scope | 2026-11-14 |
| api-stg.ap.ford.comapi, staging | In scope | 2026-11-14 |
| api-stg.int.ap.ford.comapi, staging | In scope | 2026-11-14 |
| api-stg.pivpn.ap.ford.comapi, staging | In scope | 2026-11-14 |
| www-ocp-preprod.eblesswav.api.ford.comapi, staging | In scope | 2026-11-14 |
| stg.api.ford.comapi, staging | In scope | 2026-11-14 |
| apicollector-stage-gcp.ford.comstaging | In scope | 2026-11-14 |
| stg.apigeedev.ford.comstaging | In scope | 2026-11-14 |
| api-publisher-china-stage.apiplatform-tooling.ford.comapi, staging | In scope | 2026-11-14 |
| apim-publisher-preprod.apiplatform-tooling.ford.comstaging | In scope | 2026-11-14 |
| api-explorer.stage.apiplatform-tooling.ford.comapi, staging | In scope | 2026-11-14 |
| apicatalog-service-providers.stage.apiplatform-tooling.ford.comstaging | In scope | 2026-11-14 |
| publisher-events-request-svc.stage.apiplatform-tooling.ford.comstaging | In scope | 2026-11-14 |
| single-point-publisher.stage.apiplatform-tooling.ford.comstaging | In scope | 2026-11-14 |
| apipublisher-helloappfortesting-preprod.apiplatform.ford.comstaging | In scope | 2026-11-14 |
| gfin-stg.cf.app.ford.comstaging | In scope | 2026-11-14 |
| gfin-wbdoservice-stage.cf.app.ford.comstaging | In scope | 2026-11-14 |
| gfin-wbdoservice-stg.cf.app.ford.comstaging | In scope | 2026-11-14 |
| grid-stage-demand-management.cf.app.ford.comadmin, staging | In scope | 2026-11-14 |
| grid-stage-enrollment-broker.cf.app.ford.comstaging | In scope | 2026-11-14 |
| grid-stage-enrollment-web.cf.app.ford.comstaging | In scope | 2026-11-14 |
| om-reservation-checker-ui-stg.cf.app.ford.comstaging | In scope | 2026-11-14 |
| api-preprod-swcm.pp.cf.app.ford.comapi, staging | In scope | 2026-11-14 |
| api-stg01e-gcp.pp.cf.app.ford.comapi, staging | In scope | 2026-11-14 |
| api-stg01e-gcp2.pp.cf.app.ford.comapi, staging | In scope | 2026-11-14 |
| bcca-hmpc-ingest-preprod.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-heartbeat-edc1pd-preprod.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-heartbeat-edc2pd-preprod.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-heartbeat-gcpeuat.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-heartbeat-gcpuat.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| dataexplorer-service-stg.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| fleetaccount-stage.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| gcct-preprod.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| gep-preprod.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| ici-ws-ingest-active-preprod.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| lcv-mdi-ingest-preprod.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| loyalty-webpages-bundle-stage-can.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| loyalty-webpages-bundle-stage-eu.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| loyalty-webpages-bundle-stage-stealth.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| loyalty-webpages-bundle-stage-usa.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| loyalty-webpages-react-redirect-stage.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preprod-api-focsalesops-dlr.pp.cf.app.ford.comapi, staging | In scope | 2026-11-14 |
| preprod-api-tpd-dlr.pp.cf.app.ford.comapi, staging | In scope | 2026-11-14 |
| preprod-d2d-dealers-tpd-dlr.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preprod-dsi-accountings-tpd-dlr.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preprod-exporters-focsalesops-dlr.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preprod-home-tpd-dlr.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preprod-programs-tpd-dlr.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preprod-reports-tpd-dlr.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preprod-vehicles-focsalesops-dlr.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preview-developer.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| rtsa-neutral-server-preprod.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| stage-developer.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| stg-fppwbx-gcp.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| stg-fwbx-gcp.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| stg-hccc-dashboard-gcp.pp.cf.app.ford.comadmin, staging | In scope | 2026-11-14 |
| stg-ocpp-gcp.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| stg-ocpp-gcp-gcp.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| stg-swb.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| stg-wallboxsupport.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| www-developerportal-stage-gcp.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| www-fccs-stg-gcp.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| wwwuat-avcci-stg-found-items-search.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| wwwuat-avcci-stg-lost-and-found-assist.pp.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preview-mach-e.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-gcs-auth.prod.cf.app.ford.comauth, staging | In scope | 2026-11-14 |
| canary-heartbeat-edc1pd.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-heartbeat-edc2pd.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-heartbeat-gcpepde.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-heartbeat-gcppde.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| canary-heartbeat-gcppde2.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| fpi-stage-ext.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| fpi-stage-ext-secondary.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| grid-stage-demand-management.prod.cf.app.ford.comadmin, staging | In scope | 2026-11-14 |
| grid-stage-enrollment-broker.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| grid-stage-enrollment-web.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
| preview-mach-e.prod.cf.app.ford.comstaging | In scope | 2026-11-14 |
70,322 names are covered by the program's own scope; 22 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.