Bug bounty program
HH
Hyatt Hotels
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Hyatt WeChat Secret, Baidu AK Secret, and mysql db credentials inadvertantly made publicly available#478813 | No weakness recorded | – | $300 | 16 |
Subdomains3,607
| Name | Scope | First seen |
|---|---|---|
| coralgables.hyatt.com | Not in the scope | 2026-11-14 |
| www.coralgables.hyatt.com | Not in the scope | 2026-11-14 |
| core-linecrm.hyatt.com | Not in the scope | 2026-11-14 |
| corpgate.hyatt.com | Not in the scope | 2026-11-14 |
| credit.hyatt.com | Not in the scope | 2026-11-14 |
| www.credit.hyatt.com | Not in the scope | 2026-11-14 |
| crl.hyatt.com | Not in the scope | 2026-11-14 |
| crowncenter.hyatt.com | Not in the scope | 2026-11-14 |
| www.crowncenter.hyatt.com | Not in the scope | 2026-11-14 |
| crs.hyatt.com | Not in the scope | 2026-11-14 |
| www.crs.hyatt.com | Not in the scope | 2026-11-14 |
| crsdev.hyatt.com | Not in the scope | 2026-11-14 |
| crsqa.hyatt.com | Not in the scope | 2026-11-14 |
| crsuat.hyatt.com | Not in the scope | 2026-11-14 |
| crystalcity.hyatt.com | Not in the scope | 2026-11-14 |
| www.crystalcity.hyatt.com | Not in the scope | 2026-11-14 |
| cscmail.hyatt.com | Not in the scope | 2026-11-14 |
| csgway.hyatt.com | Not in the scope | 2026-11-14 |
| curacao.hyatt.com | Not in the scope | 2026-11-14 |
| www.curacao.hyatt.com | Not in the scope | 2026-11-14 |
| custhub.hyatt.com | Not in the scope | 2026-11-14 |
| www.custhub.hyatt.com | Not in the scope | 2026-11-14 |
| custsurvey.hyatt.com | Not in the scope | 2026-11-14 |
| daleprostrfieldsuites.hyatt.com | Not in the scope | 2026-11-14 |
| dallas.hyatt.com | Not in the scope | 2026-11-14 |
| www.dallas.hyatt.com | Not in the scope | 2026-11-14 |
| dallasregency.hyatt.com | Not in the scope | 2026-11-14 |
| www.dallasregency.hyatt.com | Not in the scope | 2026-11-14 |
| dataapi.hyatt.com | Not in the scope | 2026-11-14 |
| www.dataapi.hyatt.com | Not in the scope | 2026-11-14 |
| dearborn.hyatt.com | Not in the scope | 2026-11-14 |
| www.dearborn.hyatt.com | Not in the scope | 2026-11-14 |
| deerfield.hyatt.com | Not in the scope | 2026-11-14 |
| www.deerfield.hyatt.com | Not in the scope | 2026-11-14 |
| delano.hyatt.com | Not in the scope | 2026-11-14 |
| www.delano.hyatt.com | Not in the scope | 2026-11-14 |
| delhi.hyatt.com | Not in the scope | 2026-11-14 |
| www.delhi.hyatt.com | Not in the scope | 2026-11-14 |
| dendvdiplomat.hyatt.com | Not in the scope | 2026-11-14 |
| www.dendvdiplomat.hyatt.com | Not in the scope | 2026-11-14 |
| denovdiplomat-v.hyatt.com | Not in the scope | 2026-11-14 |
| denverregency.hyatt.com | Not in the scope | 2026-11-14 |
| www.denverregency.hyatt.com | Not in the scope | 2026-11-14 |
| atlanta.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| boston.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| chicago.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| dallasfortworth.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| denver.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| fortlauderdale.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| losangeles.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| losangelesorangecounty.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| miami.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| newjersey.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| newyork.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| newyorkcity.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| orangecounty.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| orlando.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| philadelphia.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| phoenix.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| sanantonio.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| sandiego.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| sanfrancisco.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| sanfranciscooaklandsanjose.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| sarasota.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| scottsdale.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| seattle.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| tampa.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| washingtondc.destinations.hyatt.com | Not in the scope | 2026-11-14 |
| deutschland.hyatt.com | Not in the scope | 2026-11-14 |
| dev.hyatt.comdev | Not in the scope | 2026-11-14 |
| eoi.dev.hyatt.comdev | Not in the scope | 2026-11-14 |
| internal-eoi.dev.hyatt.comdev, internal | Not in the scope | 2026-11-14 |
| wfm.dev.hyatt.comdev | Not in the scope | 2026-11-14 |
| www.wfm.dev.hyatt.comdev | Not in the scope | 2026-11-14 |
| devhcm9.hyatt.com | Not in the scope | 2026-11-14 |
| devhcm92.hyatt.com | Not in the scope | 2026-11-14 |
| www.devhcm92.hyatt.com | Not in the scope | 2026-11-14 |
| devsftp.hyatt.com | Not in the scope | 2026-11-14 |
| www.devsftp.hyatt.com | Not in the scope | 2026-11-14 |
| dfwairport.hyatt.com | Not in the scope | 2026-11-14 |
| www.dfwairport.hyatt.com | Not in the scope | 2026-11-14 |
| discover.hyatt.com | Not in the scope | 2026-11-14 |
| dmzftp.hyatt.com | Not in the scope | 2026-11-14 |
| doharesidences.hyatt.com | Not in the scope | 2026-11-14 |
| doradobeach.hyatt.com | Not in the scope | 2026-11-14 |
| downtowndenver.hyatt.com | Not in the scope | 2026-11-14 |
| drh-dip-v.hyatt.com | Not in the scope | 2026-11-14 |
| www.drh-dip-v.hyatt.com | Not in the scope | 2026-11-14 |
| drh-dip2-v.hyatt.com | Not in the scope | 2026-11-14 |
| www.drh-dip2-v.hyatt.com | Not in the scope | 2026-11-14 |
| driskill.hyatt.com | Not in the scope | 2026-11-14 |
| www.driskill.hyatt.com | Not in the scope | 2026-11-14 |
| drohismsdip1.hyatt.com | Not in the scope | 2026-11-14 |
| drohismsdip2.hyatt.com | Not in the scope | 2026-11-14 |
| drsftp.hyatt.com | Not in the scope | 2026-11-14 |
| drv-diplomat-v.hyatt.com | Not in the scope | 2026-11-14 |
| www.drv-diplomat-v.hyatt.com | Not in the scope | 2026-11-14 |
| dubai.hyatt.com | Not in the scope | 2026-11-14 |
| restaurants.dubai.hyatt.com | Not in the scope | 2026-11-14 |
| www.restaurants.dubai.hyatt.com | Not in the scope | 2026-11-14 |
15 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.