Skip to content
Connect AISign inSign up free

Bug bounty program

NU

Nutanix

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
17
Disclosed reports
4
Subdomains
4,029
Vendor on CyberSIXT
Nutanix (3 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of Nutanix
ReportWeaknessDisclosedBountyVotes
OPEN REDIRECT#1369806Open Redirect2022-01-04–9
Local file disclosure through SSRF at next.nutanix.com#471520Server-Side Request Forgery2022-04-25–7
AWS S3 bucket writeable for authenticated AWS users#881004Authentication2020-05-26–6
Open Redirect at https://www.nutanix.com/tw/login via icid parameter#1131753Open Redirect2021-08-31–5

Subdomains4,029

Root
Scope
Name suggests
First seen
Text file4,029 names
Subdomains of Nutanix
NameScopeFirst seen
www.eu-west-2.dev-xi.nutanix.comdevIn scope2026-11-14
splunk.dev-xi.nutanix.comdev, monitoringIn scope2026-11-14
api.k8s.splunk.dev-xi.nutanix.comapi, dev, monitoring, toolsIn scope2026-11-14
api.internal.k8s.splunk.dev-xi.nutanix.comapi, dev, internal, monitoring, toolsIn scope2026-11-14
kolide.splunk.dev-xi.nutanix.comdev, monitoringIn scope2026-11-14
searchhead.main.splunk.dev-xi.nutanix.comdev, monitoringIn scope2026-11-14
uk-1.dev-xi.nutanix.comdevIn scope2026-11-14
www.uk-1.dev-xi.nutanix.comdevIn scope2026-11-14
xig-nginx.uk-1.dev-xi.nutanix.comdevIn scope2026-11-14
us-east-1.dev-xi.nutanix.comdevIn scope2026-11-14
wildcard.us-east-1.dev-xi.nutanix.comdevIn scope2026-11-14
www.us-east-1.dev-xi.nutanix.comdevIn scope2026-11-14
xig-nginx.us-east-1.dev-xi.nutanix.comdevIn scope2026-11-14
us-east-1a.dev-xi.nutanix.comdevIn scope2026-11-14
us-west-1.dev-xi.nutanix.comdevIn scope2026-11-14
wildcard.us-west-1.dev-xi.nutanix.comdevIn scope2026-11-14
www.us-west-1.dev-xi.nutanix.comdevIn scope2026-11-14
xig-nginx.us-west-1.dev-xi.nutanix.comdevIn scope2026-11-14
www.dev-xi.nutanix.comdevIn scope2026-11-14
jenkins.karbonator.dev.nutanix.comci, devIn scope2026-11-14
www.jenkins.karbonator.dev.nutanix.comci, devIn scope2026-11-14
security.karbonator.dev.nutanix.comdevIn scope2026-11-14
www.security.karbonator.dev.nutanix.comdevIn scope2026-11-14
sonarqube.karbonator.dev.nutanix.comdev, toolsIn scope2026-11-14
www.sonarqube.karbonator.dev.nutanix.comdev, toolsIn scope2026-11-14
o1.dev.nutanix.comdevIn scope2026-11-14
prism-analytics.dev.nutanix.comdevIn scope2026-11-14
www.prism-analytics.dev.nutanix.comdevIn scope2026-11-14
secretservices.dev.nutanix.comdevIn scope2026-11-14
service.xray.dev.nutanix.comdevIn scope2026-11-14
www.service.xray.dev.nutanix.comdevIn scope2026-11-14
developer.nutanix.comIn scope2026-11-14
developers.nutanix.comIn scope2026-11-14
www.developers.nutanix.comIn scope2026-11-14
digitalbriefcase.nutanix.comIn scope2026-11-14
dns.nutanix.comIn scope2026-11-14
docebo-callback.nutanix.comIn scope2026-11-14
docs.nutanix.comIn scope2026-11-14
download.nutanix.comIn scope2026-11-14
www.download.nutanix.comIn scope2026-11-14
dowww.nutanix.comIn scope2026-11-14
buildinfo.drmeng.nutanix.comIn scope2026-11-14
buster.drmeng.nutanix.comIn scope2026-11-14
buster-jobs-drm3-2.drmeng.nutanix.comIn scope2026-11-14
buster-staging.drmeng.nutanix.comstagingIn scope2026-11-14
www.buster.drmeng.nutanix.comIn scope2026-11-14
ill-prod.drmeng.nutanix.comIn scope2026-11-14
perf-next.drmeng.nutanix.comtestIn scope2026-11-14
prtmonitor.drmeng.nutanix.comIn scope2026-11-14
sandbox.drmeng.nutanix.comtestIn scope2026-11-14
drt-gsaconnmgr.nutanix.comIn scope2026-11-14
drt-it-netscaler.nutanix.comvpnIn scope2026-11-14
drt-it-netscaler01.nutanix.comvpnIn scope2026-11-14
drt-it-netscaler02.nutanix.comvpnIn scope2026-11-14
drt-search.nutanix.comIn scope2026-11-14
drtitxdsfprd1.nutanix.comIn scope2026-11-14
drtitxdsfprd2.nutanix.comIn scope2026-11-14
drtitxendcprd1.nutanix.comIn scope2026-11-14
drtredirect.nutanix.comIn scope2026-11-14
drtsa.nutanix.comIn scope2026-11-14
ds.nutanix.comIn scope2026-11-14
dyn.nutanix.comIn scope2026-11-14
artifactory-test.dyn.nutanix.comtest, toolsIn scope2026-11-14
blritcorpdcprd4.dyn.nutanix.comIn scope2026-11-14
endor.dyn.nutanix.comIn scope2026-11-14
ldap.dyn.nutanix.comIn scope2026-11-14
lday.dyn.nutanix.comIn scope2026-11-14
tyoitcorpdcprd1.dyn.nutanix.comIn scope2026-11-14
tyoitcorpdcprd2.dyn.nutanix.comIn scope2026-11-14
eai.nutanix.comIn scope2026-11-14
eai-test.nutanix.comtestIn scope2026-11-14
elevate.nutanix.comIn scope2026-11-14
careerpath.emea.nutanix.comIn scope2026-11-14
organon.emea.nutanix.comIn scope2026-11-14
organon-dev.emea.nutanix.comdevIn scope2026-11-14
organon-front-01.emea.nutanix.comIn scope2026-11-14
organon-front-02.emea.nutanix.comIn scope2026-11-14
organon-front-03.emea.nutanix.comIn scope2026-11-14
organon-front-04.emea.nutanix.comIn scope2026-11-14
organon-worker-01.emea.nutanix.comIn scope2026-11-14
organon-worker-02.emea.nutanix.comIn scope2026-11-14
organon-worker-03.emea.nutanix.comIn scope2026-11-14
organon-worker-04.emea.nutanix.comIn scope2026-11-14
organon-worker-05.emea.nutanix.comIn scope2026-11-14
www.organon.emea.nutanix.comIn scope2026-11-14
rocket.emea.nutanix.comIn scope2026-11-14
emeapartnerxtribe.nutanix.comIn scope2026-11-14
eng.nutanix.comIn scope2026-11-14
artifactory-pc.eng.nutanix.comtoolsIn scope2026-11-14
artifactory-prod-objects.eng.nutanix.comtoolsIn scope2026-11-14
awx.eng.nutanix.comIn scope2026-11-14
www.awx.eng.nutanix.comIn scope2026-11-14
blackduck.eng.nutanix.comIn scope2026-11-14
blackduck-test.eng.nutanix.comtestIn scope2026-11-14
www.blackduck-test.eng.nutanix.comtestIn scope2026-11-14
www.blackduck.eng.nutanix.comIn scope2026-11-14
concord.eng.nutanix.comIn scope2026-11-14
concord-dev.eng.nutanix.comdevIn scope2026-11-14
www.concord-dev.eng.nutanix.comdevIn scope2026-11-14
www.concord.eng.nutanix.comIn scope2026-11-14

4,023 names are covered by the program's own scope; 7 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated