Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
59
Disclosed reports
1
Subdomains
3,607

Most upvoted reports1

Most upvoted reports of Hyatt Hotels
ReportWeaknessDisclosedBountyVotes
Hyatt WeChat Secret, Baidu AK Secret, and mysql db credentials inadvertantly made publicly available#478813No weakness recorded–$30016

Subdomains3,607

Subdomains of Hyatt Hotels
NameScopeFirst seen
micollab.aruba.hyatt.comNot in the scope2026-11-14
www.aruba.hyatt.comNot in the scope2026-11-14
jakarta.aryaduta.hyatt.comNot in the scope2026-11-14
www.jakarta.aryaduta.hyatt.comNot in the scope2026-11-14
aspen.hyatt.comNot in the scope2026-11-14
www.aspen.hyatt.comNot in the scope2026-11-14
assets.hyatt.comIn scope2026-11-14
assets-d.hyatt.comNot in the scope2026-11-14
assets-staging.hyatt.comstagingNot in the scope2026-11-14
www.assets-staging.hyatt.comstagingNot in the scope2026-11-14
www.assets.hyatt.comNot in the scope2026-11-14
atlanta.hyatt.comNot in the scope2026-11-14
www.atlanta.hyatt.comNot in the scope2026-11-14
atlantamidtown.hyatt.comNot in the scope2026-11-14
www.atlantamidtown.hyatt.comNot in the scope2026-11-14
atlantaperimetervillachristina.hyatt.comNot in the scope2026-11-14
www.atlantaperimetervillachristina.hyatt.comNot in the scope2026-11-14
atlantaregency.hyatt.comNot in the scope2026-11-14
www.atlantaregency.hyatt.comNot in the scope2026-11-14
atlantasuites.hyatt.comNot in the scope2026-11-14
www.atlantasuites.hyatt.comNot in the scope2026-11-14
auckland.hyatt.comNot in the scope2026-11-14
austin.hyatt.comNot in the scope2026-11-14
www.austin.hyatt.comNot in the scope2026-11-14
australia.hyatt.comNot in the scope2026-11-14
author-assets.hyatt.comNot in the scope2026-11-14
author-assets-staging.hyatt.comstagingNot in the scope2026-11-14
www.author-assets-staging.hyatt.comstagingNot in the scope2026-11-14
author-ecm.hyatt.comNot in the scope2026-11-14
autodiscover.hyatt.commailNot in the scope2026-11-14
avialongbeach.hyatt.comNot in the scope2026-11-14
www.avialongbeach.hyatt.comNot in the scope2026-11-14
avianapa.hyatt.comNot in the scope2026-11-14
www.avianapa.hyatt.comNot in the scope2026-11-14
aviasavannah.hyatt.comNot in the scope2026-11-14
www.aviasavannah.hyatt.comNot in the scope2026-11-14
aviathewoodlands.hyatt.comNot in the scope2026-11-14
www.aviathewoodlands.hyatt.comNot in the scope2026-11-14
baku.hyatt.comNot in the scope2026-11-14
www.baku.hyatt.comNot in the scope2026-11-14
bali.hyatt.comNot in the scope2026-11-14
baltimore.hyatt.comNot in the scope2026-11-14
www.baltimore.hyatt.comNot in the scope2026-11-14
bangkok.hyatt.comNot in the scope2026-11-14
www.bangkok.hyatt.comNot in the scope2026-11-14
beavercreek.hyatt.comNot in the scope2026-11-14
www.beavercreek.hyatt.comNot in the scope2026-11-14
beavercreekresidences.hyatt.comNot in the scope2026-11-14
www.beavercreekresidences.hyatt.comNot in the scope2026-11-14
belgrade.hyatt.comNot in the scope2026-11-14
bellagio.hyatt.comNot in the scope2026-11-14
www.bellagio.hyatt.comNot in the scope2026-11-14
belle-mc.hyatt.comNot in the scope2026-11-14
bellevue.hyatt.comNot in the scope2026-11-14
philadelphia.bellevue.hyatt.comNot in the scope2026-11-14
www.philadelphia.bellevue.hyatt.comNot in the scope2026-11-14
www.bellevue.hyatt.comNot in the scope2026-11-14
bellevuehouse.hyatt.comNot in the scope2026-11-14
www.bellevuehouse.hyatt.comNot in the scope2026-11-14
bellevueregency.hyatt.comNot in the scope2026-11-14
www.bellevueregency.hyatt.comNot in the scope2026-11-14
benhurtest.hyatt.comNot in the scope2026-11-14
www.benhurtest.hyatt.comNot in the scope2026-11-14
berlin.hyatt.comNot in the scope2026-11-14
www.berlin.hyatt.comNot in the scope2026-11-14
bethesda.hyatt.comNot in the scope2026-11-14
www.bethesda.hyatt.comNot in the scope2026-11-14
bi.hyatt.comNot in the scope2026-11-14
www.bi.hyatt.comNot in the scope2026-11-14
biapps.hyatt.comNot in the scope2026-11-14
www.biapps.hyatt.comNot in the scope2026-11-14
biappsdemo.hyatt.comNot in the scope2026-11-14
biappsprod.hyatt.comNot in the scope2026-11-14
bicloud.hyatt.comNot in the scope2026-11-14
biclouddev.hyatt.comNot in the scope2026-11-14
www.biclouddev.hyatt.comNot in the scope2026-11-14
biclouduat.hyatt.comNot in the scope2026-11-14
www.biclouduat.hyatt.comNot in the scope2026-11-14
birmingham.hyatt.comNot in the scope2026-11-14
www.birmingham.hyatt.comNot in the scope2026-11-14
bishkek.hyatt.comNot in the scope2026-11-14
www.bishkek.hyatt.comNot in the scope2026-11-14
biuat.hyatt.comNot in the scope2026-11-14
www.biuat.hyatt.comNot in the scope2026-11-14
bk.hyatt.comNot in the scope2026-11-14
blog.hyatt.comNot in the scope2026-11-14
experience.blog.hyatt.comNot in the scope2026-11-14
www.blog.hyatt.comNot in the scope2026-11-14
bonaventure.hyatt.comNot in the scope2026-11-14
www.bonaventure.hyatt.comNot in the scope2026-11-14
booker.hyatt.comNot in the scope2026-11-14
booker01.hyatt.comNot in the scope2026-11-14
booker02.hyatt.comNot in the scope2026-11-14
booker03.hyatt.comNot in the scope2026-11-14
booker04.hyatt.comNot in the scope2026-11-14
boston.hyatt.comNot in the scope2026-11-14
bostonfinancial.hyatt.comNot in the scope2026-11-14
www.bostonfinancial.hyatt.comNot in the scope2026-11-14
bostonharbor.hyatt.comNot in the scope2026-11-14
www.bostonharbor.hyatt.comNot in the scope2026-11-14

15 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.