Bug bounty program
HH
Hyatt Hotels
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Hyatt WeChat Secret, Baidu AK Secret, and mysql db credentials inadvertantly made publicly available#478813 | No weakness recorded | – | $300 | 16 |
Subdomains3,607
| Name | Scope | First seen |
|---|---|---|
| micollab.aruba.hyatt.com | Not in the scope | 2026-11-14 |
| www.aruba.hyatt.com | Not in the scope | 2026-11-14 |
| jakarta.aryaduta.hyatt.com | Not in the scope | 2026-11-14 |
| www.jakarta.aryaduta.hyatt.com | Not in the scope | 2026-11-14 |
| aspen.hyatt.com | Not in the scope | 2026-11-14 |
| www.aspen.hyatt.com | Not in the scope | 2026-11-14 |
| assets.hyatt.com | In scope | 2026-11-14 |
| assets-d.hyatt.com | Not in the scope | 2026-11-14 |
| assets-staging.hyatt.comstaging | Not in the scope | 2026-11-14 |
| www.assets-staging.hyatt.comstaging | Not in the scope | 2026-11-14 |
| www.assets.hyatt.com | Not in the scope | 2026-11-14 |
| atlanta.hyatt.com | Not in the scope | 2026-11-14 |
| www.atlanta.hyatt.com | Not in the scope | 2026-11-14 |
| atlantamidtown.hyatt.com | Not in the scope | 2026-11-14 |
| www.atlantamidtown.hyatt.com | Not in the scope | 2026-11-14 |
| atlantaperimetervillachristina.hyatt.com | Not in the scope | 2026-11-14 |
| www.atlantaperimetervillachristina.hyatt.com | Not in the scope | 2026-11-14 |
| atlantaregency.hyatt.com | Not in the scope | 2026-11-14 |
| www.atlantaregency.hyatt.com | Not in the scope | 2026-11-14 |
| atlantasuites.hyatt.com | Not in the scope | 2026-11-14 |
| www.atlantasuites.hyatt.com | Not in the scope | 2026-11-14 |
| auckland.hyatt.com | Not in the scope | 2026-11-14 |
| austin.hyatt.com | Not in the scope | 2026-11-14 |
| www.austin.hyatt.com | Not in the scope | 2026-11-14 |
| australia.hyatt.com | Not in the scope | 2026-11-14 |
| author-assets.hyatt.com | Not in the scope | 2026-11-14 |
| author-assets-staging.hyatt.comstaging | Not in the scope | 2026-11-14 |
| www.author-assets-staging.hyatt.comstaging | Not in the scope | 2026-11-14 |
| author-ecm.hyatt.com | Not in the scope | 2026-11-14 |
| autodiscover.hyatt.commail | Not in the scope | 2026-11-14 |
| avialongbeach.hyatt.com | Not in the scope | 2026-11-14 |
| www.avialongbeach.hyatt.com | Not in the scope | 2026-11-14 |
| avianapa.hyatt.com | Not in the scope | 2026-11-14 |
| www.avianapa.hyatt.com | Not in the scope | 2026-11-14 |
| aviasavannah.hyatt.com | Not in the scope | 2026-11-14 |
| www.aviasavannah.hyatt.com | Not in the scope | 2026-11-14 |
| aviathewoodlands.hyatt.com | Not in the scope | 2026-11-14 |
| www.aviathewoodlands.hyatt.com | Not in the scope | 2026-11-14 |
| baku.hyatt.com | Not in the scope | 2026-11-14 |
| www.baku.hyatt.com | Not in the scope | 2026-11-14 |
| bali.hyatt.com | Not in the scope | 2026-11-14 |
| baltimore.hyatt.com | Not in the scope | 2026-11-14 |
| www.baltimore.hyatt.com | Not in the scope | 2026-11-14 |
| bangkok.hyatt.com | Not in the scope | 2026-11-14 |
| www.bangkok.hyatt.com | Not in the scope | 2026-11-14 |
| beavercreek.hyatt.com | Not in the scope | 2026-11-14 |
| www.beavercreek.hyatt.com | Not in the scope | 2026-11-14 |
| beavercreekresidences.hyatt.com | Not in the scope | 2026-11-14 |
| www.beavercreekresidences.hyatt.com | Not in the scope | 2026-11-14 |
| belgrade.hyatt.com | Not in the scope | 2026-11-14 |
| bellagio.hyatt.com | Not in the scope | 2026-11-14 |
| www.bellagio.hyatt.com | Not in the scope | 2026-11-14 |
| belle-mc.hyatt.com | Not in the scope | 2026-11-14 |
| bellevue.hyatt.com | Not in the scope | 2026-11-14 |
| philadelphia.bellevue.hyatt.com | Not in the scope | 2026-11-14 |
| www.philadelphia.bellevue.hyatt.com | Not in the scope | 2026-11-14 |
| www.bellevue.hyatt.com | Not in the scope | 2026-11-14 |
| bellevuehouse.hyatt.com | Not in the scope | 2026-11-14 |
| www.bellevuehouse.hyatt.com | Not in the scope | 2026-11-14 |
| bellevueregency.hyatt.com | Not in the scope | 2026-11-14 |
| www.bellevueregency.hyatt.com | Not in the scope | 2026-11-14 |
| benhurtest.hyatt.com | Not in the scope | 2026-11-14 |
| www.benhurtest.hyatt.com | Not in the scope | 2026-11-14 |
| berlin.hyatt.com | Not in the scope | 2026-11-14 |
| www.berlin.hyatt.com | Not in the scope | 2026-11-14 |
| bethesda.hyatt.com | Not in the scope | 2026-11-14 |
| www.bethesda.hyatt.com | Not in the scope | 2026-11-14 |
| bi.hyatt.com | Not in the scope | 2026-11-14 |
| www.bi.hyatt.com | Not in the scope | 2026-11-14 |
| biapps.hyatt.com | Not in the scope | 2026-11-14 |
| www.biapps.hyatt.com | Not in the scope | 2026-11-14 |
| biappsdemo.hyatt.com | Not in the scope | 2026-11-14 |
| biappsprod.hyatt.com | Not in the scope | 2026-11-14 |
| bicloud.hyatt.com | Not in the scope | 2026-11-14 |
| biclouddev.hyatt.com | Not in the scope | 2026-11-14 |
| www.biclouddev.hyatt.com | Not in the scope | 2026-11-14 |
| biclouduat.hyatt.com | Not in the scope | 2026-11-14 |
| www.biclouduat.hyatt.com | Not in the scope | 2026-11-14 |
| birmingham.hyatt.com | Not in the scope | 2026-11-14 |
| www.birmingham.hyatt.com | Not in the scope | 2026-11-14 |
| bishkek.hyatt.com | Not in the scope | 2026-11-14 |
| www.bishkek.hyatt.com | Not in the scope | 2026-11-14 |
| biuat.hyatt.com | Not in the scope | 2026-11-14 |
| www.biuat.hyatt.com | Not in the scope | 2026-11-14 |
| bk.hyatt.com | Not in the scope | 2026-11-14 |
| blog.hyatt.com | Not in the scope | 2026-11-14 |
| experience.blog.hyatt.com | Not in the scope | 2026-11-14 |
| www.blog.hyatt.com | Not in the scope | 2026-11-14 |
| bonaventure.hyatt.com | Not in the scope | 2026-11-14 |
| www.bonaventure.hyatt.com | Not in the scope | 2026-11-14 |
| booker.hyatt.com | Not in the scope | 2026-11-14 |
| booker01.hyatt.com | Not in the scope | 2026-11-14 |
| booker02.hyatt.com | Not in the scope | 2026-11-14 |
| booker03.hyatt.com | Not in the scope | 2026-11-14 |
| booker04.hyatt.com | Not in the scope | 2026-11-14 |
| boston.hyatt.com | Not in the scope | 2026-11-14 |
| bostonfinancial.hyatt.com | Not in the scope | 2026-11-14 |
| www.bostonfinancial.hyatt.com | Not in the scope | 2026-11-14 |
| bostonharbor.hyatt.com | Not in the scope | 2026-11-14 |
| www.bostonharbor.hyatt.com | Not in the scope | 2026-11-14 |
15 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.