Skip to content
Connect AISign inSign up free

Bug bounty program

NU

Nutanix

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
17
Disclosed reports
4
Subdomains
4,029
Vendor on CyberSIXT
Nutanix (3 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of Nutanix
ReportWeaknessDisclosedBountyVotes
OPEN REDIRECT#1369806Open Redirect2022-01-04–9
Local file disclosure through SSRF at next.nutanix.com#471520Server-Side Request Forgery2022-04-25–7
AWS S3 bucket writeable for authenticated AWS users#881004Authentication2020-05-26–6
Open Redirect at https://www.nutanix.com/tw/login via icid parameter#1131753Open Redirect2021-08-31–5

Subdomains4,029

Root
Scope
Name suggests
First seen
Text file4,029 names
Subdomains of Nutanix
NameScopeFirst seen
apguest01.nutanix.comIn scope2026-11-14
apguest02.nutanix.comIn scope2026-11-14
api-reviews.nutanix.comapiIn scope2026-11-14
api-sonarqube.nutanix.comapi, toolsIn scope2026-11-14
apikeys.nutanix.comIn scope2026-11-14
www.apikeys.nutanix.comIn scope2026-11-14
arlo.nutanix.comIn scope2026-11-14
robertkarg.artbs.nutanix.comIn scope2026-11-14
assets.nutanix.comIn scope2026-11-14
athena.nutanix.comIn scope2026-11-14
autodiscover.nutanix.commailIn scope2026-11-14
aws-proxy-artifactory-edge.nutanix.comtoolsIn scope2026-11-14
secretservices.aws.nutanix.comIn scope2026-11-14
axis-bank-flow.nutanix.comIn scope2026-11-14
azure-support.nutanix.comIn scope2026-11-14
wildcard.azure-support.nutanix.comIn scope2026-11-14
beam.nutanix.comIn scope2026-11-14
api.beam.nutanix.comapiIn scope2026-11-14
assets.beam.nutanix.comIn scope2026-11-14
blog.beam.nutanix.comIn scope2026-11-14
cdn.beam.nutanix.comIn scope2026-11-14
dev.beam.nutanix.comdevIn scope2026-11-14
searchlight-dev.beam.nutanix.comdevIn scope2026-11-14
www.searchlight-dev.beam.nutanix.comdevIn scope2026-11-14
showback.beam.nutanix.comIn scope2026-11-14
showback-ssl.beam.nutanix.comIn scope2026-11-14
status.beam.nutanix.commonitoringIn scope2026-11-14
support.beam.nutanix.comIn scope2026-11-14
billing.nutanix.comIn scope2026-11-14
billing-api.nutanix.comapiIn scope2026-11-14
billing-jobs.nutanix.comIn scope2026-11-14
bizftp.nutanix.comIn scope2026-11-14
blr2gp.nutanix.comIn scope2026-11-14
blrgp.nutanix.comIn scope2026-11-14
blrsa.nutanix.comIn scope2026-11-14
boomi.nutanix.comIn scope2026-11-14
boomi-stage.nutanix.comstagingIn scope2026-11-14
www.boomi-stage.nutanix.comstagingIn scope2026-11-14
www.boomi.nutanix.comIn scope2026-11-14
bootcamp.nutanix.comIn scope2026-11-14
bootcamps.nutanix.comIn scope2026-11-14
brand.nutanix.comIn scope2026-11-14
buckets.nutanix.comIn scope2026-11-14
calendar.nutanix.comIn scope2026-11-14
calm.nutanix.comIn scope2026-11-14
calm-demo.nutanix.comtestIn scope2026-11-14
www.calm-demo.nutanix.comtestIn scope2026-11-14
wildcard.calm.nutanix.comIn scope2026-11-14
carbonestimator.nutanix.comIn scope2026-11-14
careers.nutanix.comIn scope2026-11-14
case-api.nutanix.comapiIn scope2026-11-14
cdn.nutanix.comIn scope2026-11-14
central.nutanix.comIn scope2026-11-14
wildcard.domains.central.nutanix.comIn scope2026-11-14
certifications.nutanix.comIn scope2026-11-14
channelinsights.nutanix.comIn scope2026-11-14
chat.nutanix.comIn scope2026-11-14
prism.chat.nutanix.comIn scope2026-11-14
www.chat.nutanix.comIn scope2026-11-14
ci.nutanix.comciIn scope2026-11-14
ciphercheck.nutanix.comIn scope2026-11-14
citrixready.nutanix.comIn scope2026-11-14
cloud.nutanix.comIn scope2026-11-14
cloud-internal.nutanix.cominternalIn scope2026-11-14
artifactory.cloud-internal.nutanix.cominternal, toolsIn scope2026-11-14
wildcard.artifactory.cloud-internal.nutanix.cominternal, toolsIn scope2026-11-14
dev.cloud-internal.nutanix.comdev, internalIn scope2026-11-14
downloads-nc2centos7mis.dev.cloud-internal.nutanix.comdev, internalIn scope2026-11-14
downloads-nc2miromis.dev.cloud-internal.nutanix.comdev, internalIn scope2026-11-14
staging.cloud-internal.nutanix.cominternal, stagingIn scope2026-11-14
dev.cloud.nutanix.comdevIn scope2026-11-14
echo-fips.dev.cloud.nutanix.comdevIn scope2026-11-14
rp.dev.cloud.nutanix.comdevIn scope2026-11-14
downloads.cloud.nutanix.comIn scope2026-11-14
downloads-staging.cloud.nutanix.comstagingIn scope2026-11-14
staging.cloud.nutanix.comstagingIn scope2026-11-14
codereview.nutanix.comIn scope2026-11-14
collector.nutanix.comIn scope2026-11-14
collector-blue.nutanix.comIn scope2026-11-14
collector-green.nutanix.comIn scope2026-11-14
common.nutanix.comIn scope2026-11-14
connect.nutanix.comIn scope2026-11-14
console.nutanix.comadminIn scope2026-11-14
console-staging.nutanix.comadmin, stagingIn scope2026-11-14
api.console.nutanix.comadmin, apiIn scope2026-11-14
api-staging.console.nutanix.comadmin, api, stagingIn scope2026-11-14
assets.console.nutanix.comadminIn scope2026-11-14
assets-staging.console.nutanix.comadmin, stagingIn scope2026-11-14
cch.console.nutanix.comadminIn scope2026-11-14
cch-staging.console.nutanix.comadmin, stagingIn scope2026-11-14
cpanel-backend.console.nutanix.comadminIn scope2026-11-14
cpanel-backend-staging.console.nutanix.comadmin, stagingIn scope2026-11-14
downloads.console.nutanix.comadminIn scope2026-11-14
downloads-staging.console.nutanix.comadmin, stagingIn scope2026-11-14
gateway-external-api.console.nutanix.comadmin, apiIn scope2026-11-14
gateway-external-api-staging.console.nutanix.comadmin, api, stagingIn scope2026-11-14
img.console.nutanix.comadminIn scope2026-11-14
img-staging.console.nutanix.comadmin, stagingIn scope2026-11-14
logging.console.nutanix.comadmin, monitoringIn scope2026-11-14
logging-staging.console.nutanix.comadmin, monitoring, stagingIn scope2026-11-14

4,023 names are covered by the program's own scope; 7 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated