Bug bounty program
Marriott Bug Bounty Program
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 59
- Disclosed reports
- 0
- Subdomains
- 5,220
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains5,220
| Name | Scope | First seen |
|---|---|---|
| api-mistudio.marriott.comapi | Not in the scope | 2026-11-14 |
| api-mistudio-uat.marriott.comapi, test | In scope | 2026-11-14 |
| accounts.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| adaptiveauth.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| enrollments.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| enterprise-auth-app.api-prodr.marriott.comapi, auth | Not in the scope | 2026-11-14 |
| enterpriseauth.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| suggestions.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| swaccactivity.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| tokenexchange.api-prodr.marriott.comapi | Not in the scope | 2026-11-14 |
| wechat.api.marriott.comapi | In scope | 2026-11-14 |
| apiapachecustomgwc11dev1.marriott.comdev | Not in the scope | 2026-11-14 |
| apiasperf_a1.marriott.com | Not in the scope | 2026-11-14 |
| apicustomgwapachec11tst1.marriott.com | Not in the scope | 2026-11-14 |
| apigatewayc11prd.marriott.com | Not in the scope | 2026-11-14 |
| apigatewayc11prfa.marriott.com | Not in the scope | 2026-11-14 |
| apigatewayc11tst.marriott.com | Not in the scope | 2026-11-14 |
| apigatewayc11tst1.marriott.com | Not in the scope | 2026-11-14 |
| apigatewayc12prd.marriott.com | Not in the scope | 2026-11-14 |
| apigatewaydpdevsgw.marriott.com | Not in the scope | 2026-11-14 |
| apigatewaydpperfsgw.marriott.com | Not in the scope | 2026-11-14 |
| apigatewaydpsgw.marriott.com | Not in the scope | 2026-11-14 |
| apigatewaydptstsgw.marriott.com | Not in the scope | 2026-11-14 |
| apigw1c21dev.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| apigw1c22dev.marriott.comapi, dev | Not in the scope | 2026-11-14 |
| apigw1c23prf.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw1c2tst.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw5c21prf1.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw6c21prf1.marriott.comapi | Not in the scope | 2026-11-14 |
| apigw6c23prf.marriott.comapi | Not in the scope | 2026-11-14 |
| apigwc11prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc11prfa.marriott.com | Not in the scope | 2026-11-14 |
| apigwc11tst1.marriott.com | Not in the scope | 2026-11-14 |
| apigwc12prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc13prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc21prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc21prf1.marriott.com | Not in the scope | 2026-11-14 |
| apigwc21prf3.marriott.com | Not in the scope | 2026-11-14 |
| apigwc21tst1.marriott.com | Not in the scope | 2026-11-14 |
| apigwc22node2prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc22node3prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc22prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc23node2prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc23node3prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc23prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc31prd.marriott.com | Not in the scope | 2026-11-14 |
| apigwc41prd.marriott.com | Not in the scope | 2026-11-14 |
| apimsggw1c21dev.marriott.comdev | Not in the scope | 2026-11-14 |
| apimsggw1c21prd.marriott.com | Not in the scope | 2026-11-14 |
| apimsggw1c21prf.marriott.com | Not in the scope | 2026-11-14 |
| apimsggw1c22prd.marriott.com | Not in the scope | 2026-11-14 |
| apimsggw2c21prd.marriott.com | Not in the scope | 2026-11-14 |
| apimsggw2c21prf.marriott.com | Not in the scope | 2026-11-14 |
| apimsggw2c22prd.marriott.com | Not in the scope | 2026-11-14 |
| apisgwclientc21prd.marriott.com | Not in the scope | 2026-11-14 |
| app.marriott.com | Not in the scope | 2026-11-14 |
| app-insiders.marriott.com | In scope | 2026-11-14 |
| www.app-insiders.marriott.com | Not in the scope | 2026-11-14 |
| appvolumes.marriott.com | Not in the scope | 2026-11-14 |
| arabic.marriott.com | Not in the scope | 2026-11-14 |
| arabic-careers.marriott.com | Not in the scope | 2026-11-14 |
| www.arabic-careers.marriott.com | Not in the scope | 2026-11-14 |
| booking.arabic.marriott.com | Not in the scope | 2026-11-14 |
| clean.arabic.marriott.com | Not in the scope | 2026-11-14 |
| www.clean.arabic.marriott.com | Not in the scope | 2026-11-14 |
| origin-www.arabic.marriott.com | Not in the scope | 2026-11-14 |
| www.arabic.marriott.com | Not in the scope | 2026-11-14 |
| args.marriott.com | Not in the scope | 2026-11-14 |
| www.args.marriott.com | Not in the scope | 2026-11-14 |
| aries-prodreplica.marriott.com | Not in the scope | 2026-11-14 |
| www.arabic.aries-prodreplica.marriott.com | Not in the scope | 2026-11-14 |
| engage.aries-prodreplica.marriott.com | Not in the scope | 2026-11-14 |
| www.engage.aries-prodreplica.marriott.com | Not in the scope | 2026-11-14 |
| www.espanol.aries-prodreplica.marriott.com | Not in the scope | 2026-11-14 |
| www.aries-prodreplica.marriott.com | Not in the scope | 2026-11-14 |
| perf1.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.perf1.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| perf2.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.perf2.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| perf3.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.perf3.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| perf4.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.perf4.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| preprod.aries.marriott.comstaging | Not in the scope | 2026-11-14 |
| www.preprod.aries.marriott.comstaging | Not in the scope | 2026-11-14 |
| preprodengage.aries.marriott.com | Not in the scope | 2026-11-14 |
| www.preprodengage.aries.marriott.com | Not in the scope | 2026-11-14 |
| uat01.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.uat01.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| uat02.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.uat02.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| uat03.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.uat03.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| uat04.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.uat04.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| uat05.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.uat05.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| uat06.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| www.uat06.aries.marriott.comtest | Not in the scope | 2026-11-14 |
| uat07.aries.marriott.comtest | Not in the scope | 2026-11-14 |
97 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.