Skip to content
Sign in

Bug bounty program

HH

Hyatt Hotels

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
59
Disclosed reports
1
Subdomains
3,607

Most upvoted reports1

Most upvoted reports of Hyatt Hotels
ReportWeaknessDisclosedBountyVotes
Hyatt WeChat Secret, Baidu AK Secret, and mysql db credentials inadvertantly made publicly available#478813No weakness recorded–$30016

Subdomains3,607

Root
Scope
Name suggests
First seen
Text file3,607 names
Subdomains of Hyatt Hotels
NameScopeFirst seen
48lex.hyatt.comNot in the scope2026-11-14
www.48lex.hyatt.comNot in the scope2026-11-14
about.hyatt.comNot in the scope2026-11-14
acapulco.hyatt.comNot in the scope2026-11-14
access.hyatt.comvpnNot in the scope2026-11-14
adelaide.hyatt.comNot in the scope2026-11-14
www.adelaide.hyatt.comNot in the scope2026-11-14
go.advisors.hyatt.comNot in the scope2026-11-14
albuquerque.hyatt.comNot in the scope2026-11-14
www.albuquerque.hyatt.comNot in the scope2026-11-14
ali.hyatt.comNot in the scope2026-11-14
ali1.hyatt.comNot in the scope2026-11-14
ali2.hyatt.comNot in the scope2026-11-14
allinclusive.hyatt.comNot in the scope2026-11-14
www.allinclusive.hyatt.comNot in the scope2026-11-14
www.almaty.hyatt.comNot in the scope2026-11-14
amigopod.hyatt.comNot in the scope2026-11-14
amman.hyatt.comNot in the scope2026-11-14
www.amman.hyatt.comNot in the scope2026-11-14
analytics.hyatt.comNot in the scope2026-11-14
www.analytics.hyatt.comNot in the scope2026-11-14
andaz.hyatt.comNot in the scope2026-11-14
newyork.5thavenue.andaz.hyatt.comNot in the scope2026-11-14
www.newyork.5thavenue.andaz.hyatt.comNot in the scope2026-11-14
amsterdamprinsengracht.andaz.hyatt.comNot in the scope2026-11-14
www.amsterdamprinsengracht.andaz.hyatt.comNot in the scope2026-11-14
delhi.andaz.hyatt.comNot in the scope2026-11-14
www.delhi.andaz.hyatt.comNot in the scope2026-11-14
london.liverpoolstreet.andaz.hyatt.comNot in the scope2026-11-14
www.london.liverpoolstreet.andaz.hyatt.comNot in the scope2026-11-14
londonliverpoolstreet.andaz.hyatt.comNot in the scope2026-11-14
www.londonliverpoolstreet.andaz.hyatt.comNot in the scope2026-11-14
maui.andaz.hyatt.comNot in the scope2026-11-14
www.maui.andaz.hyatt.comNot in the scope2026-11-14
mayakoba.andaz.hyatt.comNot in the scope2026-11-14
www.mayakoba.andaz.hyatt.comNot in the scope2026-11-14
munichschwabingertor.andaz.hyatt.comNot in the scope2026-11-14
www.munichschwabingertor.andaz.hyatt.comNot in the scope2026-11-14
napa.andaz.hyatt.comNot in the scope2026-11-14
www.napa.andaz.hyatt.comNot in the scope2026-11-14
newyork5thavenue.andaz.hyatt.comNot in the scope2026-11-14
www.newyork5thavenue.andaz.hyatt.comNot in the scope2026-11-14
ottawa.andaz.hyatt.comNot in the scope2026-11-14
www.ottawa.andaz.hyatt.comNot in the scope2026-11-14
palmsprings.andaz.hyatt.comNot in the scope2026-11-14
www.palmsprings.andaz.hyatt.comNot in the scope2026-11-14
papagayo.andaz.hyatt.comNot in the scope2026-11-14
www.papagayo.andaz.hyatt.comNot in the scope2026-11-14
amsterdam.prinsengracht.andaz.hyatt.comNot in the scope2026-11-14
www.amsterdam.prinsengracht.andaz.hyatt.comNot in the scope2026-11-14
sandiego.andaz.hyatt.comNot in the scope2026-11-14
www.sandiego.andaz.hyatt.comNot in the scope2026-11-14
sandiegomaltiposandiego.andaz.hyatt.comNot in the scope2026-11-14
savannah.andaz.hyatt.comNot in the scope2026-11-14
www.savannah.andaz.hyatt.comNot in the scope2026-11-14
scottsdale.andaz.hyatt.comNot in the scope2026-11-14
www.scottsdale.andaz.hyatt.comNot in the scope2026-11-14
shanghai.andaz.hyatt.comNot in the scope2026-11-14
www.shanghai.andaz.hyatt.comNot in the scope2026-11-14
singapore.andaz.hyatt.comNot in the scope2026-11-14
www.singapore.andaz.hyatt.comNot in the scope2026-11-14
tokyo.andaz.hyatt.comNot in the scope2026-11-14
www.tokyo.andaz.hyatt.comNot in the scope2026-11-14
wallstreet.andaz.hyatt.comNot in the scope2026-11-14
newyork.wallstreet.andaz.hyatt.comNot in the scope2026-11-14
www.newyork.wallstreet.andaz.hyatt.comNot in the scope2026-11-14
www.wallstreet.andaz.hyatt.comNot in the scope2026-11-14
westhollywood.andaz.hyatt.comNot in the scope2026-11-14
www.westhollywood.andaz.hyatt.comNot in the scope2026-11-14
www.andaz.hyatt.comNot in the scope2026-11-14
apex-tbaitest.hyatt.comNot in the scope2026-11-14
api.hyatt.comapiNot in the scope2026-11-14
api-int.hyatt.comapiNot in the scope2026-11-14
api-wechat-uat.hyatt.comapi, testNot in the scope2026-11-14
apibahn.hyatt.comNot in the scope2026-11-14
apibahn-int.hyatt.comNot in the scope2026-11-14
apibahn-stg.hyatt.comstagingNot in the scope2026-11-14
apibahn-uat.hyatt.comtestNot in the scope2026-11-14
www.apibahn.hyatt.comNot in the scope2026-11-14
apigee.hyatt.comNot in the scope2026-11-14
apigw.hyatt.comapiNot in the scope2026-11-14
apigw-int.hyatt.comapiNot in the scope2026-11-14
apigw-stg.hyatt.comapi, stagingNot in the scope2026-11-14
apigw-uat.hyatt.comapi, testNot in the scope2026-11-14
apihub.hyatt.comNot in the scope2026-11-14
apihub-int.hyatt.comNot in the scope2026-11-14
apihub-stg.hyatt.comstagingNot in the scope2026-11-14
apihub-uat.hyatt.comtestNot in the scope2026-11-14
eoiproxy.apihub.hyatt.comNot in the scope2026-11-14
app-assets.hyatt.comNot in the scope2026-11-14
apps.hyatt.comNot in the scope2026-11-14
appsfot.hyatt.comNot in the scope2026-11-14
appsmock.hyatt.comNot in the scope2026-11-14
appsqa.hyatt.comNot in the scope2026-11-14
appsuat.hyatt.comNot in the scope2026-11-14
aria.hyatt.comNot in the scope2026-11-14
www.aria.hyatt.comNot in the scope2026-11-14
arlington.hyatt.comNot in the scope2026-11-14
www.arlington.hyatt.comNot in the scope2026-11-14
aruba.hyatt.comNot in the scope2026-11-14

15 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in