Bug bounty program
NU
Nutanix
Most upvoted reports4
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| OPEN REDIRECT#1369806 | Open Redirect | 2022-01-04 | – | 9 |
| Local file disclosure through SSRF at next.nutanix.com#471520 | Server-Side Request Forgery | 2022-04-25 | – | 7 |
| AWS S3 bucket writeable for authenticated AWS users#881004 | Authentication | 2020-05-26 | – | 6 |
| Open Redirect at https://www.nutanix.com/tw/login via icid parameter#1131753 | Open Redirect | 2021-08-31 | – | 5 |
Subdomains4,029
| Name | Scope | First seen |
|---|---|---|
| confluence.eng.nutanix.comtools | In scope | 2026-11-14 |
| confluence-test.eng.nutanix.comtest, tools | In scope | 2026-11-14 |
| www.confluence-test.eng.nutanix.comtest, tools | In scope | 2026-11-14 |
| www.confluence.eng.nutanix.comtools | In scope | 2026-11-14 |
| confluencedc-test.eng.nutanix.comtest | In scope | 2026-11-14 |
| www.confluencedc-test.eng.nutanix.comtest | In scope | 2026-11-14 |
| coverity.eng.nutanix.com | In scope | 2026-11-14 |
| www.coverity.eng.nutanix.com | In scope | 2026-11-14 |
| api.cycode.eng.nutanix.comapi | In scope | 2026-11-14 |
| app.cycode.eng.nutanix.com | In scope | 2026-11-14 |
| nexus.dev.eng.nutanix.comdev, tools | In scope | 2026-11-14 |
| drt-eo-quay-poc.eng.nutanix.com | In scope | 2026-11-14 |
| gerrit.eng.nutanix.com | In scope | 2026-11-14 |
| github.eng.nutanix.comgit | In scope | 2026-11-14 |
| harbor.eng.nutanix.comtools | In scope | 2026-11-14 |
| www.harbor.eng.nutanix.comtools | In scope | 2026-11-14 |
| jarvis.eng.nutanix.com | In scope | 2026-11-14 |
| jita.eng.nutanix.com | In scope | 2026-11-14 |
| jita-dev.eng.nutanix.comdev | In scope | 2026-11-14 |
| jenkins.karbonator.eng.nutanix.comci | In scope | 2026-11-14 |
| www.jenkins.karbonator.eng.nutanix.comci | In scope | 2026-11-14 |
| security.karbonator.eng.nutanix.com | In scope | 2026-11-14 |
| www.security.karbonator.eng.nutanix.com | In scope | 2026-11-14 |
| sonarqube.karbonator.eng.nutanix.comtools | In scope | 2026-11-14 |
| www.sonarqube.karbonator.eng.nutanix.comtools | In scope | 2026-11-14 |
| karma2.eng.nutanix.com | In scope | 2026-11-14 |
| www.karma2.eng.nutanix.com | In scope | 2026-11-14 |
| maas-dpro.eng.nutanix.com | In scope | 2026-11-14 |
| maas-stage-dpro.eng.nutanix.comstaging | In scope | 2026-11-14 |
| myuicluster.eng.nutanix.com | In scope | 2026-11-14 |
| www.myuicluster.eng.nutanix.com | In scope | 2026-11-14 |
| nc2-cost-estimator.eng.nutanix.com | In scope | 2026-11-14 |
| nc2-cost-estimatore.eng.nutanix.com | In scope | 2026-11-14 |
| nuhportal.eng.nutanix.com | In scope | 2026-11-14 |
| nuhportal-backup.eng.nutanix.comdata | In scope | 2026-11-14 |
| nuhportal-dev.eng.nutanix.comdev | In scope | 2026-11-14 |
| nuhportal-devhq.eng.nutanix.com | In scope | 2026-11-14 |
| nuhportal-oem.eng.nutanix.com | In scope | 2026-11-14 |
| www.nuhportal.eng.nutanix.com | In scope | 2026-11-14 |
| nusigma.eng.nutanix.com | In scope | 2026-11-14 |
| www.nusigma.eng.nutanix.com | In scope | 2026-11-14 |
| nx.eng.nutanix.com | In scope | 2026-11-14 |
| osl-ep-electric-cloud-manager-prod-1.eng.nutanix.comadmin | In scope | 2026-11-14 |
| oxygen-fusion-review.eng.nutanix.com | In scope | 2026-11-14 |
| www.oxygen-fusion-review.eng.nutanix.com | In scope | 2026-11-14 |
| p10y.eng.nutanix.com | In scope | 2026-11-14 |
| phx-objects-prod-1.p10y.eng.nutanix.com | In scope | 2026-11-14 |
| panacea.eng.nutanix.com | In scope | 2026-11-14 |
| panacea-dev.eng.nutanix.comdev | In scope | 2026-11-14 |
| panacea-metrics.eng.nutanix.commonitoring | In scope | 2026-11-14 |
| phren.eng.nutanix.com | In scope | 2026-11-14 |
| phren-staging.eng.nutanix.comstaging | In scope | 2026-11-14 |
| www.phren-staging.eng.nutanix.comstaging | In scope | 2026-11-14 |
| www.phren.eng.nutanix.com | In scope | 2026-11-14 |
| phx-shorturls.eng.nutanix.com | In scope | 2026-11-14 |
| pi.eng.nutanix.com | In scope | 2026-11-14 |
| rdm.eng.nutanix.com | In scope | 2026-11-14 |
| secretservices.eng.nutanix.com | In scope | 2026-11-14 |
| tokenmanager.eng.nutanix.com | In scope | 2026-11-14 |
| uicluster.eng.nutanix.com | In scope | 2026-11-14 |
| www.uicluster.eng.nutanix.com | In scope | 2026-11-14 |
| vcf9-operations-vm.eng.nutanix.com | In scope | 2026-11-14 |
| x.eng.nutanix.com | In scope | 2026-11-14 |
| xgear.eng.nutanix.com | In scope | 2026-11-14 |
| www.xgear.eng.nutanix.com | In scope | 2026-11-14 |
| engage.nutanix.com | In scope | 2026-11-14 |
| engenablement.nutanix.com | In scope | 2026-11-14 |
| epoch.nutanix.com | In scope | 2026-11-14 |
| api-spinnaker.epoch.nutanix.comapi, ci | In scope | 2026-11-14 |
| demo-epoch.epoch.nutanix.comtest | In scope | 2026-11-14 |
| dev-main.epoch.nutanix.comdev | In scope | 2026-11-14 |
| docs.epoch.nutanix.com | In scope | 2026-11-14 |
| lm.epoch.nutanix.com | In scope | 2026-11-14 |
| login.epoch.nutanix.comauth | In scope | 2026-11-14 |
| spinnaker.epoch.nutanix.comci | In scope | 2026-11-14 |
| euc.nutanix.com | In scope | 2026-11-14 |
| www.euc.nutanix.com | In scope | 2026-11-14 |
| event.nutanix.com | In scope | 2026-11-14 |
| events.nutanix.com | Listed out of scope | 2026-11-14 |
| eventsurveys.nutanix.com | In scope | 2026-11-14 |
| excellence.nutanix.com | In scope | 2026-11-14 |
| expansion-explorer.nutanix.com | In scope | 2026-11-14 |
| experience.nutanix.com | In scope | 2026-11-14 |
| expo.nutanix.com | In scope | 2026-11-14 |
| fa.nutanix.com | In scope | 2026-11-14 |
| fa-dev.nutanix.comdev | In scope | 2026-11-14 |
| fa-qa.nutanix.comtest | In scope | 2026-11-14 |
| fa-scale.nutanix.com | In scope | 2026-11-14 |
| fa-stage.nutanix.comstaging | In scope | 2026-11-14 |
| feature-licensing.nutanix.com | In scope | 2026-11-14 |
| feature-licensing-api.nutanix.comapi | In scope | 2026-11-14 |
| feature-portal.nutanix.com | In scope | 2026-11-14 |
| feedback-api.nutanix.comapi | In scope | 2026-11-14 |
| feedback-api-blue.nutanix.comapi | In scope | 2026-11-14 |
| feedback-api-green.nutanix.comapi | In scope | 2026-11-14 |
| ferry.nutanix.com | In scope | 2026-11-14 |
| flow.nutanix.com | In scope | 2026-11-14 |
| axis-bank.flow.nutanix.com | In scope | 2026-11-14 |
| sc-dev.flow.nutanix.comdev | In scope | 2026-11-14 |
| fp-callback.nutanix.com | In scope | 2026-11-14 |
4,023 names are covered by the program's own scope; 7 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.