Bug bounty program
MB
Marriott Bug Bounty Program
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 59
- Disclosed reports
- 0
- Subdomains
- 5,220
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains5,220
| Name | Scope | First seen |
|---|---|---|
| accounts-api-prod10.marriott.comapi | Not in the scope | 2026-11-14 |
| accounts-api-prod8.marriott.comapi | Not in the scope | 2026-11-14 |
| accounts-api-prod9.marriott.comapi | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaaprod10.marriott.comapi | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaaprod8.marriott.comapi | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaaprod9.marriott.comapi | Not in the scope | 2026-11-14 |
| api.marriott.comapi | Not in the scope | 2026-11-14 |
| api-mistudio.marriott.comapi | Not in the scope | 2026-11-14 |
| api-mistudio-uat.marriott.comapi, test | In scope | 2026-11-14 |
| accounts.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| adaptiveauth.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| enrollments.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| enterprise-auth-app.api-prodr.marriott.comapi, auth | Not in the scope | 2026-11-14 |
| enterpriseauth.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| suggestions.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| swaccactivity.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| tokenexchange.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| wechat.api.marriott.comapi | In scope | 2026-11-14 |
| apigw1c21dev.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| apigw1c22dev.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| apigw1c23prf.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw1c2tst.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw5c21prf1.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw6c21prf1.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw6c23prf.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw.prod.gw.eapi.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw.prod13.gw.eapi.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw.prod13green.gw.eapi.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw.prod16.gw.eapi.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw.prod16blue.gw.eapi.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw.prod17.gw.eapi.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-b-prd1-euw2.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-b-prd1-use1.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-b-prd1-usw2.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-g-prd1-euw2.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-g-prd1-use1.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-g-prd1-usw2.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-prd1-euw2.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-prd1-use1.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-prd1-usw2.fnd-akana.prd1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw.gw.eapi.prf1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-b-prf1-use1.fnd-akana.prf1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-b-prf1-usw2.fnd-akana.prf1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-g-prf1-use1.fnd-akana.prf1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-g-prf1-usw2.fnd-akana.prf1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-prf1-use1.fnd-akana.prf1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw-prf1-usw2.fnd-akana.prf1.cld.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw.gw.eapi.stg1.cld.marriott.comapi, staging | Not in the scope | 2026-11-14 |
| apigw.foundcap-akana-stg1.stguse1.cld.marriott.comapi, staging | Not in the scope | 2026-11-14 |
| apigw-b.foundcap-akana-stg1.stguse1.cld.marriott.comapi, staging | Not in the scope | 2026-11-14 |
| apigw-g.foundcap-akana-stg1.stguse1.cld.marriott.comapi, staging | Not in the scope | 2026-11-14 |
| apigw.foundcap-akana-stg1.stgusw2.cld.marriott.comapi, staging | Not in the scope | 2026-11-14 |
| apigw-b.foundcap-akana-stg1.stgusw2.cld.marriott.comapi, staging | Not in the scope | 2026-11-14 |
| apigw-g.foundcap-akana-stg1.stgusw2.cld.marriott.comapi, staging | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaaprod13.cloud.marriott.comapi | Not in the scope | 2026-11-14 |
| enterprise-auth-app-api-eaaprod13.cloud.marriott.comapi, auth | Not in the scope | 2026-11-14 |
| enterpriseauth-api-eaaprod13.cloud.marriott.comapi | Not in the scope | 2026-11-14 |
| accounts-api.prod13.cloud.marriott.comapi | Not in the scope | 2026-11-14 |
| enrollments-api.prod13.cloud.marriott.comapi | Not in the scope | 2026-11-14 |
| suggestions-api.prod13.cloud.marriott.comapi | Not in the scope | 2026-11-14 |
| swaccactivity-api.prod13.cloud.marriott.comapi | Not in the scope | 2026-11-14 |
| tokenexchange-api-eaaprod13.cloud.marriott.comapi | Not in the scope | 2026-11-14 |
| enrollments-api-prod10.marriott.comapi | Not in the scope | 2026-11-14 |
| enrollments-api-prod8.marriott.comapi | Not in the scope | 2026-11-14 |
| enrollments-api-prod9.marriott.comapi | Not in the scope | 2026-11-14 |
| enterprise-auth-app-api-eaaprod10.marriott.comapi, auth | Not in the scope | 2026-11-14 |
| enterprise-auth-app-api-eaaprod8.marriott.comapi, auth | Not in the scope | 2026-11-14 |
| enterprise-auth-app-api-eaaprod9.marriott.comapi, auth | Not in the scope | 2026-11-14 |
| enterpriseauth-api-eaaprod10.marriott.comapi | Not in the scope | 2026-11-14 |
| enterpriseauth-api-eaaprod8.marriott.comapi | Not in the scope | 2026-11-14 |
| enterpriseauth-api-eaaprod9.marriott.comapi | Not in the scope | 2026-11-14 |
| lacek-cx-api-prod.marriott.comapi | Not in the scope | 2026-11-14 |
| lacek-cx-api-test.marriott.comapi, test | Not in the scope | 2026-11-14 |
| api.mhub.marriott.comapi | Not in the scope | 2026-11-14 |
| dev.api.mhub.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| ply-dev.api.mhub.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| uat.api.mhub.marriott.comapi, test | Not in the scope | 2026-11-14 |
| mlad-api.marriott.comapi | Not in the scope | 2026-11-14 |
| api.mtrust.marriott.comapi | Not in the scope | 2026-11-14 |
| accounts-api-dev1.ose-devtest-vxbyr.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| accounts-api-tst1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaadev1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaatst1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| api-dev.ose-devtest-vxbyr.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| enrollments-api-dev1.ose-devtest-vxbyr.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| enrollments-api-tst1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| enterprise-auth-app-api-eaadev1.ose-devtest-vxbyr.marriott.comapi, auth | Not in the scope | 2026-11-14 |
| enterprise-auth-app-api-eaatst1.ose-devtest-vxbyr.marriott.comapi, auth | Not in the scope | 2026-11-14 |
| enterpriseauth-api-eaadev1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| enterpriseauth-api-eaatst1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| suggestions-api-dev1.ose-devtest-vxbyr.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| suggestions-api-tst1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| swaccactivity-api-dev1.ose-devtest-vxbyr.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| swaccactivity-api-tst1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| tokenexchange-api-eaadev1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| tokenexchange-api-eaatst1.ose-devtest-vxbyr.marriott.comapi | Not in the scope | 2026-11-14 |
| accounts-api-perf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| accounts-api-uat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaaperf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaauat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
97 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.