Bug bounty program
RB
Rivian Bug Bounty
- Platform
- Intigriti
- Bounties
- Pays
- Assets in scope
- 9
- Disclosed reports
- 0
- Subdomains
- 154
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains154
| Name | Scope | First seen |
|---|---|---|
| api.rivian.comapi | In scope | |
| things.api.rivian.comapi | In scope | |
| assets.rivian.com | Listed out of scope | |
| basecamp.rivian.com | In scope | |
| legacy.basecamp.rivian.comlegacy | In scope | |
| procurement.basecamp.rivian.com | In scope | |
| business.rivian.com | In scope | |
| careers.rivian.com | Listed out of scope | |
| www.careers.rivian.com | In scope | |
| voem.stage.ccc.rivian.comstaging | In scope | |
| cdn.rivian.com | In scope | |
| cid.rivian.com | In scope | |
| cloud.rivian.com | In scope | |
| dev.cmp.rivian.comdev | In scope | |
| qa.cmp.rivian.comtest | In scope | |
| email.comms.rivian.com | In scope | |
| dev.connectivity.rivian.comdev | In scope | |
| qa.connectivity.rivian.comtest | In scope | |
| dev.ct.rivian.comdev | In scope | |
| dashboard.rivian.comadmin | In scope | |
| demovehicles.rivian.com | Listed out of scope | |
| dev.rivian.comdev | In scope | |
| api.dev.rivian.comapi, dev | In scope | |
| ccc.api.dev.rivian.comapi, dev | In scope | |
| ue1.api.dev.rivian.comapi, dev | In scope | |
| gtm.dev.rivian.comdev | In scope | |
| origin.dev.rivian.comdev | In scope | |
| ec1.origin.dev.rivian.comdev | In scope | |
| ue1.origin.dev.rivian.comdev | In scope | |
| rubicon.dev.rivian.comdev | In scope | |
| things.dev.rivian.comdev | In scope | |
| discourse.rivian.com | In scope | |
| dev.dm.rivian.comdev | In scope | |
| qa.dm.rivian.comtest | In scope | |
| stage.dm.rivian.comstaging | In scope | |
| downloads.rivian.com | In scope | |
| e.rivian.com | In scope | |
| click.e.rivian.com | In scope | |
| cloud.e.rivian.com | Listed out of scope | |
| image.e.rivian.com | In scope | |
| mta.e.rivian.com | In scope | |
| view.e.rivian.com | Listed out of scope | |
| events.rivian.com | In scope | |
| feedback.rivian.com | Listed out of scope | |
| gcp-iap.rivian.com | In scope | |
| gearshop.rivian.com | In scope | |
| go.rivian.com | In scope | |
| gogoogle.rivian.com | In scope | |
| googleguide.rivian.com | In scope | |
| gtm.rivian.com | In scope | |
| guestlogin.rivian.com | In scope | |
| useast.guestlogin.rivian.com | In scope | |
| www.useast.guestlogin.rivian.com | In scope | |
| uswest.guestlogin.rivian.com | In scope | |
| www.guestlogin.rivian.com | In scope | |
| hec.rivian.com | In scope | |
| images.rivian.com | In scope | |
| internal.rivian.cominternal | In scope | |
| internal-staging.rivian.cominternal, staging | In scope | |
| internalshop.rivian.com | Listed out of scope | |
| investors.rivian.com | In scope | |
| landing.rivian.com | In scope | |
| link.rivian.com | In scope | |
| www.link.rivian.com | In scope | |
| media.rivian.com | Listed out of scope | |
| notification-ue1.rivian.com | In scope | |
| offlease.rivian.com | In scope | |
| ue1.stage.origin.rivian.comstaging | In scope | |
| uw2.stage.origin.rivian.comstaging | In scope | |
| outbound1.rivian.com | In scope | |
| outbound2.rivian.com | In scope | |
| p.rivian.com | In scope | |
| granite.p.rivian.com | In scope | |
| limestone.p.rivian.com | In scope | |
| preorders.rivian.com | In scope | |
| preorders-staging-abq9.rivian.comstaging | In scope | |
| prism.rivian.com | In scope | |
| prod.rivian.com | In scope | |
| api.prod.rivian.comapi | In scope | |
| ue1.api.prod.rivian.comapi | In scope | |
| uw2.api.prod.rivian.comapi | In scope | |
| gtm.prod.rivian.com | In scope | |
| charge.gtm.prod.rivian.com | In scope | |
| things.gtm.prod.rivian.com | In scope | |
| origin.prod.rivian.com | In scope | |
| ec1.origin.prod.rivian.com | In scope | |
| ew1.origin.prod.rivian.com | In scope | |
| ue1.origin.prod.rivian.com | In scope | |
| charge.ue1.origin.prod.rivian.com | In scope | |
| wildcard.ue1.origin.prod.rivian.com | In scope | |
| uw2.origin.prod.rivian.com | In scope | |
| charge.uw2.origin.prod.rivian.com | In scope | |
| wildcard.uw2.origin.prod.rivian.com | In scope | |
| rubicon.prod.rivian.com | In scope | |
| controller.ue1.prod.rivian.com | In scope | |
| controller.uw2.prod.rivian.com | In scope | |
| products.rivian.com | In scope | |
| qa.rivian.comtest | In scope | |
| api.qa.rivian.comapi, test | In scope | |
| uw2.api.qa.rivian.comapi, test | In scope |
145 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 15 Nov 2026.