Skip to content

Bug bounty program

MB

Marriott Bug Bounty Program

Platform
HackerOne
Bounties
Pays
Assets in scope
59
Disclosed reports
0
Subdomains
5,220

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains5,220

Subdomains of Marriott Bug Bounty Program
NameScopeFirst seen
autodiscover.eleganthotels.commailNot in the scope2026-11-14
exchange.eleganthotels.commailNot in the scope2026-11-14
mail.eleganthotels.commailNot in the scope2026-11-14
webmail.eleganthotels.commailNot in the scope2026-11-14
autodiscover.adddev.marriott.commailNot in the scope2026-11-14
autodiscover.addev.marriott.commailNot in the scope2026-11-14
autodiscover.marriott.commailNot in the scope2026-11-14
mail.stage.careercompass.marriott.commail, stagingNot in the scope2026-11-14
webmail.stage.careercompass.marriott.commail, stagingNot in the scope2026-11-14
exchange.marriott.commailNot in the scope2026-11-14
exchange2003.marriott.commailNot in the scope2026-11-14
exchange2010.marriott.commailNot in the scope2026-11-14
mail.marriott.commailNot in the scope2026-11-14
mail-alt1.marriott.commailNot in the scope2026-11-14
mail-rdc.marriott.commailNot in the scope2026-11-14
mail2.marriott.commailNot in the scope2026-11-14
owa.marriott.commailIn scope2026-11-14
owa-2f.marriott.commailNot in the scope2026-11-14
legacy.owa.marriott.comlegacy, mailNot in the scope2026-11-14
autodiscover.secmail.marriott.commailNot in the scope2026-11-14
owa.secmail.marriott.commailNot in the scope2026-11-14
smtp.marriott.commailNot in the scope2026-11-14
smtp01.marriott.commailNot in the scope2026-11-14
smtp02.marriott.commailNot in the scope2026-11-14
smtp03.marriott.commailNot in the scope2026-11-14
smtp04.marriott.commailNot in the scope2026-11-14
smtp05.marriott.commailNot in the scope2026-11-14
smtp06.marriott.commailNot in the scope2026-11-14
smtp07.marriott.commailNot in the scope2026-11-14
smtp08.marriott.commailNot in the scope2026-11-14
smtp09.marriott.commailNot in the scope2026-11-14
smtp10.marriott.commailNot in the scope2026-11-14
smtp11.marriott.commailNot in the scope2026-11-14
smtp12.marriott.commailNot in the scope2026-11-14
smtp13.marriott.commailNot in the scope2026-11-14
smtp14.marriott.commailNot in the scope2026-11-14
smtp15.marriott.commailNot in the scope2026-11-14
webmail.marriott.commailNot in the scope2026-11-14
webmail-2f.marriott.commailNot in the scope2026-11-14
autodiscover.ritzcarlton.commailListed out of scope2026-11-14
smtp.ritzcarlton.commailListed out of scope2026-11-14
autodiscover.starwoodhotels.commailNot in the scope2026-11-14
mail.starwoodhotels.commailNot in the scope2026-11-14
mail5.starwoodhotels.commailNot in the scope2026-11-14
owa.starwoodhotels.commailNot in the scope2026-11-14
owa2k.starwoodhotels.commailNot in the scope2026-11-14
pop3.starwoodhotels.commailNot in the scope2026-11-14
smtp.starwoodhotels.commailNot in the scope2026-11-14

97 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.