Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
17
Disclosed reports
4
Subdomains
4,029
Vendor on CyberSIXT
Nutanix (3 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of Nutanix
ReportWeaknessDisclosedBountyVotes
OPEN REDIRECT#1369806Open Redirect2022-01-04–9
Local file disclosure through SSRF at next.nutanix.com#471520Server-Side Request Forgery2022-04-25–7
AWS S3 bucket writeable for authenticated AWS users#881004Authentication2020-05-26–6
Open Redirect at https://www.nutanix.com/tw/login via icid parameter#1131753Open Redirect2021-08-31–5

Subdomains4,029

Subdomains of Nutanix
NameScopeFirst seen
se.frame.nutanix.comIn scope2026-11-14
sg.frame.nutanix.comIn scope2026-11-14
staging.frame.nutanix.comstagingIn scope2026-11-14
api.staging.frame.nutanix.comapi, stagingIn scope2026-11-14
api-gateway-staging.staging.frame.nutanix.comapi, stagingIn scope2026-11-14
ccc.staging.frame.nutanix.comstagingIn scope2026-11-14
ccc-bridge-external-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
ccc-proxy-internal-staging.staging.frame.nutanix.cominternal, stagingIn scope2026-11-14
ccc-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
cch-external-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
cch-internal-staging.staging.frame.nutanix.cominternal, stagingIn scope2026-11-14
cch-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
cpanel-auth-staging.staging.frame.nutanix.comadmin, auth, stagingIn scope2026-11-14
cpanel-backend-staging.staging.frame.nutanix.comadmin, stagingIn scope2026-11-14
cpanel-frontend-staging.staging.frame.nutanix.comadmin, stagingIn scope2026-11-14
cpanel-messaging-staging.staging.frame.nutanix.comadmin, stagingIn scope2026-11-14
downloads.staging.frame.nutanix.comstagingIn scope2026-11-14
frame-installer-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
frame-repository-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
frame-rsyslog-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
gateway-django-web-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
gateway-external-api-staging.staging.frame.nutanix.comapi, stagingIn scope2026-11-14
gateway-internal-api-staging.staging.frame.nutanix.comapi, internal, stagingIn scope2026-11-14
grafana-staging.staging.frame.nutanix.commonitoring, stagingIn scope2026-11-14
img.staging.frame.nutanix.comstagingIn scope2026-11-14
img-django-web-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
img-external-api-staging.staging.frame.nutanix.comapi, stagingIn scope2026-11-14
img-internal-api-staging.staging.frame.nutanix.comapi, internal, stagingIn scope2026-11-14
login.staging.frame.nutanix.comauth, stagingIn scope2026-11-14
messaging.staging.frame.nutanix.comstagingIn scope2026-11-14
meter-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
monitoring-staging.staging.frame.nutanix.commonitoring, stagingIn scope2026-11-14
rabbitmq-staging.staging.frame.nutanix.comdata, stagingIn scope2026-11-14
support-tool-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
terminal-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
zookeeper-staging.staging.frame.nutanix.comstagingIn scope2026-11-14
support-tool-prod.frame.nutanix.comIn scope2026-11-14
terminal-prod.frame.nutanix.comIn scope2026-11-14
zookeeper-prod.frame.nutanix.comIn scope2026-11-14
frontline.nutanix.comIn scope2026-11-14
frontline-blue.nutanix.comIn scope2026-11-14
frontline-green.nutanix.comIn scope2026-11-14
frontline-uat.nutanix.comtestIn scope2026-11-14
frontline-uat-blue.nutanix.comtestIn scope2026-11-14
frontline-uat-green.nutanix.comtestIn scope2026-11-14
www.frontline-uat.nutanix.comtestIn scope2026-11-14
www.frontline.nutanix.comIn scope2026-11-14
ftp.nutanix.comdataIn scope2026-11-14
go.nutanix.comIn scope2026-11-14
developers.golang.nutanix.comIn scope2026-11-14
gp.nutanix.comIn scope2026-11-14
daas.grafana.nutanix.commonitoringIn scope2026-11-14
daas-blue.grafana.nutanix.commonitoringIn scope2026-11-14
daas-green.grafana.nutanix.commonitoringIn scope2026-11-14
groups.nutanix.comIn scope2026-11-14
gsaconnmgr.nutanix.comIn scope2026-11-14
guest-portal.nutanix.comIn scope2026-11-14
hackathon.nutanix.comIn scope2026-11-14
www.hackathon.nutanix.comIn scope2026-11-14
handsonlabs.nutanix.comIn scope2026-11-14
handsonworkshops.nutanix.comIn scope2026-11-14
hclgp.nutanix.comIn scope2026-11-14
hello.nutanix.comIn scope2026-11-14
helper.nutanix.comIn scope2026-11-14
helper-dev.nutanix.comdevIn scope2026-11-14
helper-stage.nutanix.comstagingIn scope2026-11-14
hol.nutanix.comIn scope2026-11-14
hostedpoc.nutanix.comIn scope2026-11-14
how.nutanix.comIn scope2026-11-14
ai.hpoc.nutanix.comIn scope2026-11-14
ai-dev.hpoc.nutanix.comdevIn scope2026-11-14
ai-stage.hpoc.nutanix.comstagingIn scope2026-11-14
blr-gp.hpoc.nutanix.comIn scope2026-11-14
blr-ras.hpoc.nutanix.comIn scope2026-11-14
dm3-gp.hpoc.nutanix.comIn scope2026-11-14
dm3-ras.hpoc.nutanix.comIn scope2026-11-14
gp.hpoc.nutanix.comIn scope2026-11-14
nai.hpoc.nutanix.comIn scope2026-11-14
nai-dev.hpoc.nutanix.comdevIn scope2026-11-14
nai-stage.hpoc.nutanix.comstagingIn scope2026-11-14
nc.hpoc.nutanix.comIn scope2026-11-14
ncm.data.nc.hpoc.nutanix.comIn scope2026-11-14
iam.nc.hpoc.nutanix.comauthIn scope2026-11-14
ncm.services.nc.hpoc.nutanix.comIn scope2026-11-14
nutanix-central.hpoc.nutanix.comIn scope2026-11-14
ncm.data.nutanix-central.hpoc.nutanix.comIn scope2026-11-14
iam.nutanix-central.hpoc.nutanix.comauthIn scope2026-11-14
ncm.services.nutanix-central.hpoc.nutanix.comIn scope2026-11-14
phx-gp.hpoc.nutanix.comIn scope2026-11-14
phx-ras.hpoc.nutanix.comIn scope2026-11-14
ras.hpoc.nutanix.comIn scope2026-11-14
rno-gp.hpoc.nutanix.comIn scope2026-11-14
rno-ras.hpoc.nutanix.comIn scope2026-11-14
vcenter.hpoc.nutanix.comIn scope2026-11-14
hybridcloud.nutanix.comIn scope2026-11-14
research-stjude.icimartners.nutanix.comIn scope2026-11-14
idp.nutanix.comauthIn scope2026-11-14
idp-dev.nutanix.comauth, devIn scope2026-11-14
idp-lab.nutanix.comauthIn scope2026-11-14
www.idp-lab.nutanix.comauthIn scope2026-11-14

4,023 names are covered by the program's own scope; 7 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.