Bug bounty program
NU
Nutanix
Most upvoted reports4
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| OPEN REDIRECT#1369806 | Open Redirect | 2022-01-04 | – | 9 |
| Local file disclosure through SSRF at next.nutanix.com#471520 | Server-Side Request Forgery | 2022-04-25 | – | 7 |
| AWS S3 bucket writeable for authenticated AWS users#881004 | Authentication | 2020-05-26 | – | 6 |
| Open Redirect at https://www.nutanix.com/tw/login via icid parameter#1131753 | Open Redirect | 2021-08-31 | – | 5 |
Subdomains4,029
| Name | Scope | First seen |
|---|---|---|
| abcdefg.nutanix.com | In scope | 2026-11-14 |
| aemstage.nutanix.com | In scope | 2026-11-14 |
| ahv.nutanix.com | In scope | 2026-11-14 |
| acdc.ahv.nutanix.com | In scope | 2026-11-14 |
| ai.nutanix.com | In scope | 2026-11-14 |
| uep2.7.ai.nutanix.com | In scope | 2026-11-14 |
| www.uep2.7.ai.nutanix.com | In scope | 2026-11-14 |
| a100.ai.nutanix.com | In scope | 2026-11-14 |
| www.a100.ai.nutanix.com | In scope | 2026-11-14 |
| a9ea6e41b4f534b33bb922583a38c105-469658181.ai.nutanix.com | In scope | 2026-11-14 |
| www.a9ea6e41b4f534b33bb922583a38c105-469658181.ai.nutanix.com | In scope | 2026-11-14 |
| adityak-nai.ai.nutanix.com | In scope | 2026-11-14 |
| agents.ai.nutanix.com | In scope | 2026-11-14 |
| www.agents.ai.nutanix.com | In scope | 2026-11-14 |
| ai-ntnx-sera.ai.nutanix.com | In scope | 2026-11-14 |
| www.ai-ntnx-sera.ai.nutanix.com | In scope | 2026-11-14 |
| aish-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| www.aish-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| b300.ai.nutanix.com | In scope | 2026-11-14 |
| www.b300.ai.nutanix.com | In scope | 2026-11-14 |
| backup.ai.nutanix.comdata | In scope | 2026-11-14 |
| claudetest.ai.nutanix.com | In scope | 2026-11-14 |
| demouep.ai.nutanix.com | In scope | 2026-11-14 |
| east-1-b300.ai.nutanix.com | In scope | 2026-11-14 |
| east-b200.ai.nutanix.com | In scope | 2026-11-14 |
| www.east-b200.ai.nutanix.com | In scope | 2026-11-14 |
| firedrake.ai.nutanix.com | In scope | 2026-11-14 |
| h100.ai.nutanix.com | In scope | 2026-11-14 |
| www.h100.ai.nutanix.com | In scope | 2026-11-14 |
| h200.ai.nutanix.com | In scope | 2026-11-14 |
| h200-1.ai.nutanix.com | In scope | 2026-11-14 |
| www.h200-1.ai.nutanix.com | In scope | 2026-11-14 |
| www.h200.ai.nutanix.com | In scope | 2026-11-14 |
| haifa.ai.nutanix.com | In scope | 2026-11-14 |
| hkn12.ai.nutanix.com | In scope | 2026-11-14 |
| www.hkn12.ai.nutanix.com | In scope | 2026-11-14 |
| hritik-2-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| www.hritik-2-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| hritik-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| www.hritik-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| hritik-nai-26.ai.nutanix.com | In scope | 2026-11-14 |
| www.hritik-nai-26.ai.nutanix.com | In scope | 2026-11-14 |
| jay-remote-1.ai.nutanix.comvpn | In scope | 2026-11-14 |
| www.jay-remote-1.ai.nutanix.comvpn | In scope | 2026-11-14 |
| jay-remote-2.ai.nutanix.comvpn | In scope | 2026-11-14 |
| www.jay-remote-2.ai.nutanix.comvpn | In scope | 2026-11-14 |
| johnu.ai.nutanix.com | In scope | 2026-11-14 |
| www.johnu.ai.nutanix.com | In scope | 2026-11-14 |
| loadtest.ai.nutanix.com | In scope | 2026-11-14 |
| www.loadtest.ai.nutanix.com | In scope | 2026-11-14 |
| mock-cassette-server.ai.nutanix.com | In scope | 2026-11-14 |
| mock-server.ai.nutanix.com | In scope | 2026-11-14 |
| ntnx.ai.nutanix.com | In scope | 2026-11-14 |
| nusentinel.ai.nutanix.com | In scope | 2026-11-14 |
| www.nusentinel.ai.nutanix.com | In scope | 2026-11-14 |
| pentest.ai.nutanix.com | In scope | 2026-11-14 |
| pentest-1.ai.nutanix.com | In scope | 2026-11-14 |
| www.pentest-1.ai.nutanix.com | In scope | 2026-11-14 |
| www.pentest.ai.nutanix.com | In scope | 2026-11-14 |
| pm27.ai.nutanix.com | In scope | 2026-11-14 |
| www.pm27.ai.nutanix.com | In scope | 2026-11-14 |
| pmdev.ai.nutanix.com | In scope | 2026-11-14 |
| www.pmdev.ai.nutanix.com | In scope | 2026-11-14 |
| ravenna.ai.nutanix.com | In scope | 2026-11-14 |
| remote-nai-25.ai.nutanix.comvpn | In scope | 2026-11-14 |
| www.remote-nai-25.ai.nutanix.comvpn | In scope | 2026-11-14 |
| remote-nai-26.ai.nutanix.comvpn | In scope | 2026-11-14 |
| www.remote-nai-26.ai.nutanix.comvpn | In scope | 2026-11-14 |
| reno-rtx.ai.nutanix.com | In scope | 2026-11-14 |
| www.reno-rtx.ai.nutanix.com | In scope | 2026-11-14 |
| rerank.ai.nutanix.com | In scope | 2026-11-14 |
| www.rerank.ai.nutanix.com | In scope | 2026-11-14 |
| rohit-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| www.rohit-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| shoury-1.ai.nutanix.com | In scope | 2026-11-14 |
| www.shoury-1.ai.nutanix.com | In scope | 2026-11-14 |
| shoury-test.ai.nutanix.comtest | In scope | 2026-11-14 |
| sneh.ai.nutanix.com | In scope | 2026-11-14 |
| soleng-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| www.soleng-dev.ai.nutanix.comdev | In scope | 2026-11-14 |
| soleng-hgx.ai.nutanix.com | In scope | 2026-11-14 |
| tyta-b300.ai.nutanix.com | In scope | 2026-11-14 |
| www.tyta-b300.ai.nutanix.com | In scope | 2026-11-14 |
| uep.ai.nutanix.com | In scope | 2026-11-14 |
| uep-beta.ai.nutanix.comstaging | In scope | 2026-11-14 |
| www.uep-beta.ai.nutanix.comstaging | In scope | 2026-11-14 |
| uep-cluster.ai.nutanix.com | In scope | 2026-11-14 |
| www.uep-cluster.ai.nutanix.com | In scope | 2026-11-14 |
| www.uep.ai.nutanix.com | In scope | 2026-11-14 |
| vijay-test.ai.nutanix.comtest | In scope | 2026-11-14 |
| www.vijay-test.ai.nutanix.comtest | In scope | 2026-11-14 |
| www.ai.nutanix.com | In scope | 2026-11-14 |
| yash.ai.nutanix.com | In scope | 2026-11-14 |
| www.yash.ai.nutanix.com | In scope | 2026-11-14 |
| amsgp.nutanix.com | In scope | 2026-11-14 |
| analytics-api.nutanix.comapi | In scope | 2026-11-14 |
| analytics-api-blue.nutanix.comapi | In scope | 2026-11-14 |
| analytics-api-green.nutanix.comapi | In scope | 2026-11-14 |
| testdrive.aos.nutanix.com | In scope | 2026-11-14 |
| apguest.nutanix.com | In scope | 2026-11-14 |
4,023 names are covered by the program's own scope; 7 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.