Skip to content

Bug bounty program

MB

Marriott Bug Bounty Program

Platform
HackerOne
Bounties
Pays
Assets in scope
59
Disclosed reports
0
Subdomains
5,220

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains5,220

Subdomains of Marriott Bug Bounty Program
NameScopeFirst seen
prometheus.ose39-poc-infra-eng.aws-use1.cloud.marriott.commonitoringNot in the scope2026-11-14
prometheus-alrt.ose39-poc-infra-eng.aws-use1.cloud.marriott.commonitoringNot in the scope2026-11-14
restp-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp1-devtest1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp1-perf1-aws-us-east-1.aws-use1.cloud.marriott.comtestNot in the scope2026-11-14
restp1-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp10-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp11-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp12-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp13-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp14-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp2-perf1-aws-us-east-1.aws-use1.cloud.marriott.comtestNot in the scope2026-11-14
restp2-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp3-perf1-aws-us-east-1.aws-use1.cloud.marriott.comtestNot in the scope2026-11-14
restp3-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp4-perf1-aws-us-east-1.aws-use1.cloud.marriott.comtestNot in the scope2026-11-14
restp4-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp5-perf1-aws-us-east-1.aws-use1.cloud.marriott.comtestNot in the scope2026-11-14
restp5-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp6-perf1-aws-us-east-1.aws-use1.cloud.marriott.comtestNot in the scope2026-11-14
restp6-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp7-perf1-aws-us-east-1.aws-use1.cloud.marriott.comtestNot in the scope2026-11-14
restp7-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp8-perf1-aws-us-east-1.aws-use1.cloud.marriott.comtestNot in the scope2026-11-14
restp8-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
restp9-prod1-aws-us-east-1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
rhsatprdcapaws1.aws-use1.cloud.marriott.comNot in the scope2026-11-14
vault.aws-use1.cloud.marriott.comtoolsNot in the scope2026-11-14
ose-prod39-red.aws-usw2.cloud.marriott.comNot in the scope2026-11-14
rhsat-prd-cap-1.azu-wus2.cloud.marriott.comNot in the scope2026-11-14
daisy-ambari.cloud.marriott.comNot in the scope2026-11-14
daisy-jupyter.cloud.marriott.comtoolsNot in the scope2026-11-14
daisy-livy.cloud.marriott.comNot in the scope2026-11-14
daisy-rstudio.cloud.marriott.comNot in the scope2026-11-14
daisy-spark.cloud.marriott.comNot in the scope2026-11-14
dcfgatewayc21dev1.cloud.marriott.comdevIn scope2026-11-14
dcfgatewayc21tst1.cloud.marriott.comIn scope2026-11-14
disaster-search.cloud.marriott.comNot in the scope2026-11-14
docs.cloud.marriott.comNot in the scope2026-11-14
enterprise-auth-app-api-eaaprod13.cloud.marriott.comapi, authNot in the scope2026-11-14
enterpriseauth-api-eaaprod13.cloud.marriott.comapiNot in the scope2026-11-14
itdc.cloud.marriott.comNot in the scope2026-11-14
itdcdev.cloud.marriott.comNot in the scope2026-11-14
kafkarestproxyconsumerprod1.cloud.marriott.comNot in the scope2026-11-14
kafkarestproxyproducerprod1.cloud.marriott.comNot in the scope2026-11-14
ngnixprxy4wechataliprd.cloud.marriott.comNot in the scope2026-11-14
ose-dev39-vxbyb.cloud.marriott.comdevNot in the scope2026-11-14
alertmanager-openshift-metrics.ose-dev39-vxbyb.cloud.marriott.comdev, monitoringNot in the scope2026-11-14
alerts-openshift-metrics.ose-dev39-vxbyb.cloud.marriott.comdev, monitoringNot in the scope2026-11-14
hawkular-metrics.ose-dev39-vxbyb.cloud.marriott.comdev, monitoringNot in the scope2026-11-14
heketi-storage-glusterfs.ose-dev39-vxbyb.cloud.marriott.comdevNot in the scope2026-11-14
prometheus-openshift-metrics.ose-dev39-vxbyb.cloud.marriott.comdev, monitoringNot in the scope2026-11-14
ose-dev39-vxbyr.cloud.marriott.comdevNot in the scope2026-11-14
alertmanager-openshift-metrics.ose-dev39-vxbyr.cloud.marriott.comdev, monitoringNot in the scope2026-11-14
alerts-openshift-metrics.ose-dev39-vxbyr.cloud.marriott.comdev, monitoringNot in the scope2026-11-14
hawkular-metrics.ose-dev39-vxbyr.cloud.marriott.comdev, monitoringNot in the scope2026-11-14
heketi-storage-glusterfs.ose-dev39-vxbyr.cloud.marriott.comdevNot in the scope2026-11-14
prometheus-openshift-metrics.ose-dev39-vxbyr.cloud.marriott.comdev, monitoringNot in the scope2026-11-14
ose-perf39-vxbyb.cloud.marriott.comtestNot in the scope2026-11-14
ose-prod39-vxasb.cloud.marriott.comNot in the scope2026-11-14
ose-prod39-vxasr.cloud.marriott.comNot in the scope2026-11-14
ose-prod39-vxbyb.cloud.marriott.comNot in the scope2026-11-14
ose-prod39-vxbyr.cloud.marriott.comNot in the scope2026-11-14
portal.cloud.marriott.comNot in the scope2026-11-14
accounts-api.prod13.cloud.marriott.comapiNot in the scope2026-11-14
adaptiveauth-eaa.prod13.cloud.marriott.comNot in the scope2026-11-14
enrollments-api.prod13.cloud.marriott.comapiNot in the scope2026-11-14
enterpriseauth-eaa.prod13.cloud.marriott.comNot in the scope2026-11-14
suggestions-api.prod13.cloud.marriott.comapiNot in the scope2026-11-14
swaccactivity-api.prod13.cloud.marriott.comapiNot in the scope2026-11-14
tokenexchange-eaa.prod13.cloud.marriott.comNot in the scope2026-11-14
ose-eng39.red-east.cloud.marriott.comNot in the scope2026-11-14
restp-perf-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
restp1-perf1-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
restp2-perf1-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
restp3-perf1-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
restp4-perf1-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
restp5-perf1-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
restp6-perf1-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
restp7-perf1-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
restp8-perf1-aws-us-east-1.cloud.marriott.comtestNot in the scope2026-11-14
rhsat-prd-cap-prd08-1.cloud.marriott.comNot in the scope2026-11-14
rhsat-prd-cap-prd09-1.cloud.marriott.comNot in the scope2026-11-14
rhsat-prd-cap-prd10-1.cloud.marriott.comNot in the scope2026-11-14
splunk-phantom01.cloud.marriott.commonitoringNot in the scope2026-11-14
splunk-phantom01-nonprod.cloud.marriott.commonitoringNot in the scope2026-11-14
splunk-phantom02.cloud.marriott.commonitoringNot in the scope2026-11-14
splunk-phantom02-nonprod.cloud.marriott.commonitoringNot in the scope2026-11-14
starfinder-reports.cloud.marriott.comNot in the scope2026-11-14
tokenexchange-api-eaaprod13.cloud.marriott.comapiNot in the scope2026-11-14
dtr.tools.cloud.marriott.comNot in the scope2026-11-14
dtr-old.tools.cloud.marriott.comlegacyNot in the scope2026-11-14
dtr-useast.tools.cloud.marriott.comNot in the scope2026-11-14
dtr-uswest.tools.cloud.marriott.comNot in the scope2026-11-14
elevate-ftp2.tools.cloud.marriott.comdataNot in the scope2026-11-14
fortify1.tools.cloud.marriott.comNot in the scope2026-11-14
jira.tools.cloud.marriott.comtoolsNot in the scope2026-11-14
ucp.tools.cloud.marriott.comNot in the scope2026-11-14
atomic.ugips-perf.cloud.marriott.comtestNot in the scope2026-11-14
vault.cloud.marriott.comtoolsNot in the scope2026-11-14

97 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.