Bug bounty program
MB
Marriott Bug Bounty Program
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 59
- Disclosed reports
- 0
- Subdomains
- 5,220
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains5,220
| Name | Scope | First seen |
|---|---|---|
| accounts-api-perf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| accounts-api-uat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaaperf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| adaptiveauth-api-eaauat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| adaptiveauth-eaa-perf1.ose-perf2-vxbyr.marriott.comtest | Not in the scope | 2026-11-14 |
| adaptiveauth-eaa-uat1.ose-perf2-vxbyr.marriott.comtest | Not in the scope | 2026-11-14 |
| enrollments-api-perf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| enrollments-api-uat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| enterpriapi-eaauat1.ose-perf2-vxbyr.marriott.comtest | Not in the scope | 2026-11-14 |
| enterprise-auth-app-api-eaaperf1.ose-perf2-vxbyr.marriott.comapi, auth, test | Not in the scope | 2026-11-14 |
| enterprise-auth-app-api-eaauat1.ose-perf2-vxbyr.marriott.comapi, auth, test | Not in the scope | 2026-11-14 |
| enterpriseauth-api-eaaperf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| enterpriseauth-api-eaauat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| enterpriseauth-eaa-perf1.ose-perf2-vxbyr.marriott.comtest | Not in the scope | 2026-11-14 |
| enterpriseauth-eaa-uat1.ose-perf2-vxbyr.marriott.comtest | Not in the scope | 2026-11-14 |
| suggestions-api-perf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| suggestions-api-uat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| swaccactivity-api-perf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| swaccactivity-api-uat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| tokenexchange-api-eaaperf1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| tokenexchange-api-eaauat1.ose-perf2-vxbyr.marriott.comapi, test | Not in the scope | 2026-11-14 |
| tokenexchange-eaa-perf1.ose-perf2-vxbyr.marriott.comtest | Not in the scope | 2026-11-14 |
| tokenexchange-eaa-uat1.ose-perf2-vxbyr.marriott.comtest | Not in the scope | 2026-11-14 |
| couchbase-ram-e2e.ose-perf2.marriott.comtest | Not in the scope | 2026-11-14 |
| ose-prod-vxasr.marriott.com | Not in the scope | 2026-11-14 |
| ccx.ose-prod-vxasr.marriott.com | Not in the scope | 2026-11-14 |
| ccx-backend.ose-prod-vxasr.marriott.com | Not in the scope | 2026-11-14 |
| mcu.ose-prod-vxasr.marriott.com | Not in the scope | 2026-11-14 |
| ose-prod-vxby.marriott.com | Not in the scope | 2026-11-14 |
| ose-prod-vxbyb.marriott.com | Not in the scope | 2026-11-14 |
| ose-prod-vxbyr.marriott.com | Not in the scope | 2026-11-14 |
| ccx.ose-prod-vxbyr.marriott.com | Not in the scope | 2026-11-14 |
| ccx-backend.ose-prod-vxbyr.marriott.com | Not in the scope | 2026-11-14 |
| kibana.logging.ose-prod-vxbyr.marriott.commonitoring | Not in the scope | 2026-11-14 |
| mcu.ose-prod-vxbyr.marriott.com | Not in the scope | 2026-11-14 |
| hawkular-metrics.openshift-infra.ose-prod-vxbyr.marriott.commonitoring | Not in the scope | 2026-11-14 |
| ccx.ose-prod-vxdlr.marriott.com | Not in the scope | 2026-11-14 |
| ccx-backend.ose-prod-vxdlr.marriott.com | Not in the scope | 2026-11-14 |
| mcu.ose-prod-vxdlr.marriott.com | Not in the scope | 2026-11-14 |
| outdoors.marriott.com | Not in the scope | 2026-11-14 |
| preprod.outdoors.marriott.comstaging | Not in the scope | 2026-11-14 |
| uat.outdoors.marriott.comtest | Not in the scope | 2026-11-14 |
| www.outdoors.marriott.com | Not in the scope | 2026-11-14 |
| outlook.marriott.com | Not in the scope | 2026-11-14 |
| outlookanywhere.marriott.com | Not in the scope | 2026-11-14 |
| outlookanywhere-2f.marriott.com | Not in the scope | 2026-11-14 |
| owa.marriott.commail | In scope | 2026-11-14 |
| owa-2f.marriott.commail | Not in the scope | 2026-11-14 |
| legacy.owa.marriott.comlegacy, mail | Not in the scope | 2026-11-14 |
| oysclouddev.marriott.com | Not in the scope | 2026-11-14 |
| admin.oyscloudprf.marriott.comadmin | Not in the scope | 2026-11-14 |
| appdata.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| goals.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| gpoanalytics.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| groupods.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| grouppricing.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| grpforecast.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| inventory.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| policies.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| projections.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| property.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| rateods.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| revenueplanning.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| security.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| strategy.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| trnforecast.oyscloudprf.marriott.com | Not in the scope | 2026-11-14 |
| oyscloudtst.marriott.com | Not in the scope | 2026-11-14 |
| pacsys.marriott.com | Not in the scope | 2026-11-14 |
| pages.marriott.com | Not in the scope | 2026-11-14 |
| pam-testalb.marriott.com | Not in the scope | 2026-11-14 |
| pam-testalbdr.marriott.com | Not in the scope | 2026-11-14 |
| passions.marriott.com | Not in the scope | 2026-11-14 |
| passwordchallenge.marriott.com | In scope | 2026-11-14 |
| passwordchallengedev.marriott.com | Not in the scope | 2026-11-14 |
| passwordchallengeuat.marriott.com | In scope | 2026-11-14 |
| payfactors.marriott.com | Not in the scope | 2026-11-14 |
| www.payfactors.marriott.com | Not in the scope | 2026-11-14 |
| payoffer.marriott.com | Not in the scope | 2026-11-14 |
| dev.payoffer.marriott.comdev | Not in the scope | 2026-11-14 |
| www.dev.payoffer.marriott.comdev | Not in the scope | 2026-11-14 |
| test.payoffer.marriott.comtest | Not in the scope | 2026-11-14 |
| www.test.payoffer.marriott.comtest | Not in the scope | 2026-11-14 |
| www.payoffer.marriott.com | Not in the scope | 2026-11-14 |
| peg.marriott.com | Not in the scope | 2026-11-14 |
| www.peg.marriott.com | Not in the scope | 2026-11-14 |
| perf-expediaclient.marriott.comtest | Not in the scope | 2026-11-14 |
| qrcode.perf.marriott.comtest | Not in the scope | 2026-11-14 |
| perf03.marriott.comtest | Not in the scope | 2026-11-14 |
| www.perf03.marriott.comtest | Not in the scope | 2026-11-14 |
| pisw15ae.marriott.com | Not in the scope | 2026-11-14 |
| pisw15fep1webext.marriott.com | Not in the scope | 2026-11-14 |
| pisw15wapswebext.marriott.com | Not in the scope | 2026-11-14 |
| pisw15wc.marriott.com | Not in the scope | 2026-11-14 |
| plusone.marriott.com | Not in the scope | 2026-11-14 |
| preprod.plusone.marriott.comstaging | Not in the scope | 2026-11-14 |
| uat.plusone.marriott.comtest | Not in the scope | 2026-11-14 |
| ply-wls-dev.marriott.comdev | Not in the scope | 2026-11-14 |
| ios.signature.poctest.marriott.com | Not in the scope | 2026-11-14 |
| points.marriott.com | Not in the scope | 2026-11-14 |
| points-redemption.marriott.com | Not in the scope | 2026-11-14 |
97 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.