Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
17
Disclosed reports
4
Subdomains
4,029
Vendor on CyberSIXT
Nutanix (3 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of Nutanix
ReportWeaknessDisclosedBountyVotes
OPEN REDIRECT#1369806Open Redirect2022-01-04–9
Local file disclosure through SSRF at next.nutanix.com#471520Server-Side Request Forgery2022-04-25–7
AWS S3 bucket writeable for authenticated AWS users#881004Authentication2020-05-26–6
Open Redirect at https://www.nutanix.com/tw/login via icid parameter#1131753Open Redirect2021-08-31–5

Subdomains4,029

Subdomains of Nutanix
NameScopeFirst seen
confluence.eng.nutanix.comtoolsIn scope2026-11-14
confluence-test.eng.nutanix.comtest, toolsIn scope2026-11-14
www.confluence-test.eng.nutanix.comtest, toolsIn scope2026-11-14
www.confluence.eng.nutanix.comtoolsIn scope2026-11-14
confluencedc-test.eng.nutanix.comtestIn scope2026-11-14
www.confluencedc-test.eng.nutanix.comtestIn scope2026-11-14
coverity.eng.nutanix.comIn scope2026-11-14
www.coverity.eng.nutanix.comIn scope2026-11-14
api.cycode.eng.nutanix.comapiIn scope2026-11-14
app.cycode.eng.nutanix.comIn scope2026-11-14
nexus.dev.eng.nutanix.comdev, toolsIn scope2026-11-14
drt-eo-quay-poc.eng.nutanix.comIn scope2026-11-14
gerrit.eng.nutanix.comIn scope2026-11-14
github.eng.nutanix.comgitIn scope2026-11-14
harbor.eng.nutanix.comtoolsIn scope2026-11-14
www.harbor.eng.nutanix.comtoolsIn scope2026-11-14
jarvis.eng.nutanix.comIn scope2026-11-14
jita.eng.nutanix.comIn scope2026-11-14
jita-dev.eng.nutanix.comdevIn scope2026-11-14
jenkins.karbonator.eng.nutanix.comciIn scope2026-11-14
www.jenkins.karbonator.eng.nutanix.comciIn scope2026-11-14
security.karbonator.eng.nutanix.comIn scope2026-11-14
www.security.karbonator.eng.nutanix.comIn scope2026-11-14
sonarqube.karbonator.eng.nutanix.comtoolsIn scope2026-11-14
www.sonarqube.karbonator.eng.nutanix.comtoolsIn scope2026-11-14
karma2.eng.nutanix.comIn scope2026-11-14
www.karma2.eng.nutanix.comIn scope2026-11-14
maas-dpro.eng.nutanix.comIn scope2026-11-14
maas-stage-dpro.eng.nutanix.comstagingIn scope2026-11-14
myuicluster.eng.nutanix.comIn scope2026-11-14
www.myuicluster.eng.nutanix.comIn scope2026-11-14
nc2-cost-estimator.eng.nutanix.comIn scope2026-11-14
nc2-cost-estimatore.eng.nutanix.comIn scope2026-11-14
nuhportal.eng.nutanix.comIn scope2026-11-14
nuhportal-backup.eng.nutanix.comdataIn scope2026-11-14
nuhportal-dev.eng.nutanix.comdevIn scope2026-11-14
nuhportal-devhq.eng.nutanix.comIn scope2026-11-14
nuhportal-oem.eng.nutanix.comIn scope2026-11-14
www.nuhportal.eng.nutanix.comIn scope2026-11-14
nusigma.eng.nutanix.comIn scope2026-11-14
www.nusigma.eng.nutanix.comIn scope2026-11-14
nx.eng.nutanix.comIn scope2026-11-14
osl-ep-electric-cloud-manager-prod-1.eng.nutanix.comadminIn scope2026-11-14
oxygen-fusion-review.eng.nutanix.comIn scope2026-11-14
www.oxygen-fusion-review.eng.nutanix.comIn scope2026-11-14
p10y.eng.nutanix.comIn scope2026-11-14
phx-objects-prod-1.p10y.eng.nutanix.comIn scope2026-11-14
panacea.eng.nutanix.comIn scope2026-11-14
panacea-dev.eng.nutanix.comdevIn scope2026-11-14
panacea-metrics.eng.nutanix.commonitoringIn scope2026-11-14
phren.eng.nutanix.comIn scope2026-11-14
phren-staging.eng.nutanix.comstagingIn scope2026-11-14
www.phren-staging.eng.nutanix.comstagingIn scope2026-11-14
www.phren.eng.nutanix.comIn scope2026-11-14
phx-shorturls.eng.nutanix.comIn scope2026-11-14
pi.eng.nutanix.comIn scope2026-11-14
rdm.eng.nutanix.comIn scope2026-11-14
secretservices.eng.nutanix.comIn scope2026-11-14
tokenmanager.eng.nutanix.comIn scope2026-11-14
uicluster.eng.nutanix.comIn scope2026-11-14
www.uicluster.eng.nutanix.comIn scope2026-11-14
vcf9-operations-vm.eng.nutanix.comIn scope2026-11-14
x.eng.nutanix.comIn scope2026-11-14
xgear.eng.nutanix.comIn scope2026-11-14
www.xgear.eng.nutanix.comIn scope2026-11-14
engage.nutanix.comIn scope2026-11-14
engenablement.nutanix.comIn scope2026-11-14
epoch.nutanix.comIn scope2026-11-14
api-spinnaker.epoch.nutanix.comapi, ciIn scope2026-11-14
demo-epoch.epoch.nutanix.comtestIn scope2026-11-14
dev-main.epoch.nutanix.comdevIn scope2026-11-14
docs.epoch.nutanix.comIn scope2026-11-14
lm.epoch.nutanix.comIn scope2026-11-14
login.epoch.nutanix.comauthIn scope2026-11-14
spinnaker.epoch.nutanix.comciIn scope2026-11-14
euc.nutanix.comIn scope2026-11-14
www.euc.nutanix.comIn scope2026-11-14
event.nutanix.comIn scope2026-11-14
events.nutanix.comListed out of scope2026-11-14
eventsurveys.nutanix.comIn scope2026-11-14
excellence.nutanix.comIn scope2026-11-14
expansion-explorer.nutanix.comIn scope2026-11-14
experience.nutanix.comIn scope2026-11-14
expo.nutanix.comIn scope2026-11-14
fa.nutanix.comIn scope2026-11-14
fa-dev.nutanix.comdevIn scope2026-11-14
fa-qa.nutanix.comtestIn scope2026-11-14
fa-scale.nutanix.comIn scope2026-11-14
fa-stage.nutanix.comstagingIn scope2026-11-14
feature-licensing.nutanix.comIn scope2026-11-14
feature-licensing-api.nutanix.comapiIn scope2026-11-14
feature-portal.nutanix.comIn scope2026-11-14
feedback-api.nutanix.comapiIn scope2026-11-14
feedback-api-blue.nutanix.comapiIn scope2026-11-14
feedback-api-green.nutanix.comapiIn scope2026-11-14
ferry.nutanix.comIn scope2026-11-14
flow.nutanix.comIn scope2026-11-14
axis-bank.flow.nutanix.comIn scope2026-11-14
sc-dev.flow.nutanix.comdevIn scope2026-11-14
fp-callback.nutanix.comIn scope2026-11-14

4,023 names are covered by the program's own scope; 7 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.