Skip to content
Sign in

Bug bounty program · HackerOne

Vercel

Open on HackerOneSee this on the Atlas
Yespays bounties
26assets in scope
16disclosed reports1,259subdomains

Most upvoted reports16

All 16 reports

Subdomains1,259

378 covered by the program's own scope · 0 first seen this week

Roots:zeit.sh 563vercel.com 378 · 378 in scopevercel.sh 310now.systems 7zeit-cdn.net 1
ScopeAny
Name suggestsAnything
This list as text

1,259 names

Subdomains of Vercel
NameScopeFirst seen
dcs.now.systemsNot in the scope2026-11-14
ghes-test.now.systemstestNot in the scope2026-11-14
api.internal.gru1.now.systemsapi, internalNot in the scope2026-11-14
api.iad1.now.systemsapiNot in the scope2026-11-14
api.internal.iad1.now.systemsapi, internalNot in the scope2026-11-14
api.sfo1.now.systemsapiNot in the scope2026-11-14
api.internal.sfo1.now.systemsapi, internalNot in the scope2026-11-14
25f16719cf0424eb.vercel.comIn scope2026-11-14
3dtrails.vercel.comIn scope2026-11-14
aarde.vercel.comIn scope2026-11-14
abdurdebugs117.vercel.comIn scope2026-11-14
www.abdurdebugs117.vercel.comIn scope2026-11-14
abdurdebugsmamolage.vercel.comIn scope2026-11-14
www.abdurdebugsmamolage.vercel.comIn scope2026-11-14
nodefcc.abhinav-raman.vercel.comIn scope2026-11-14
abistore.vercel.comIn scope2026-11-14
www.abistore.vercel.comIn scope2026-11-14
admin.vercel.comadminIn scope2026-11-14
wildcard.admin.vercel.comadminIn scope2026-11-14
staging.maket.ai.vercel.comstagingIn scope2026-11-14
airspot-map.vercel.comIn scope2026-11-14
aithelete.vercel.comIn scope2026-11-14
alait-mom.vercel.comIn scope2026-11-14
alias.vercel.comIn scope2026-11-14
mejiamusic.andres.vercel.comIn scope2026-11-14
id.dev2.ansarada.vercel.comdevIn scope2026-11-14
api.vercel.comapiIn scope2026-11-14
api-cle1.vercel.comapiIn scope2026-11-14
api-groove.vercel.comapiIn scope2026-11-14
api-gru1.vercel.comapiIn scope2026-11-14
api-hkg1.vercel.comapiIn scope2026-11-14
api-hnd1.vercel.comapiIn scope2026-11-14
api-iad1.vercel.comapiIn scope2026-11-14
api-kix1.vercel.comapiIn scope2026-11-14
api-pdx1.vercel.comapiIn scope2026-11-14
api-sfo1.vercel.comapiIn scope2026-11-14
api-sin1.vercel.comapiIn scope2026-11-14
app.vercel.comIn scope2026-11-14
dblog.app.vercel.comIn scope2026-11-14
go.app.vercel.comIn scope2026-11-14
jeferson.mb.app.vercel.comIn scope2026-11-14
molaraiche.movie.app.vercel.comIn scope2026-11-14
unity-corp-web.app.vercel.cominternalIn scope2026-11-14
as-notion.vercel.comIn scope2026-11-14
assets.vercel.comIn scope2026-11-14
www.atovra.vercel.comIn scope2026-11-14
auth.vercel.comauthIn scope2026-11-14
avivfaraj.vercel.comIn scope2026-11-14
www.avivfaraj.vercel.comIn scope2026-11-14
barlance.vercel.comIn scope2026-11-14
barryking.vercel.comIn scope2026-11-14
beautyx-spa.vercel.comIn scope2026-11-14
www.beautyx-spa.vercel.comIn scope2026-11-14
sbx.beincomm.vercel.comtestIn scope2026-11-14
upflow-email.billing.vercel.comIn scope2026-11-14
bini-sheena.vercel.comIn scope2026-11-14
bliss-cruise.vercel.comIn scope2026-11-14
www.blockbit.vercel.comIn scope2026-11-14
devrel.blockeyfi.vercel.comIn scope2026-11-14
blog.vercel.comIn scope2026-11-14
rss.bneo.vercel.comIn scope2026-11-14
clues.boxjelly.vercel.comIn scope2026-11-14
clues.boxjelly2.vercel.comIn scope2026-11-14
clues.boxjelly2022.vercel.comIn scope2026-11-14
btc2fiat.vercel.comIn scope2026-11-14
bulky.vercel.comIn scope2026-11-14
coach.bullh.vercel.comIn scope2026-11-14
c.vercel.comIn scope2026-11-14
caiysmy.vercel.comIn scope2026-11-14
came.vercel.comIn scope2026-11-14
capji.vercel.comIn scope2026-11-14
cdn.vercel.comIn scope2026-11-14
cdn-china.vercel.comIn scope2026-11-14
cdn1.vercel.comIn scope2026-11-14
cdn2.vercel.comIn scope2026-11-14
charlses-auth.vercel.comauthIn scope2026-11-14
checkout.vercel.comIn scope2026-11-14
china-cname.vercel.comIn scope2026-11-14
www.chiragparmar.vercel.comIn scope2026-11-14
cname.vercel.comIn scope2026-11-14
cname-china.vercel.comIn scope2026-11-14
cname-dns.vercel.comIn scope2026-11-14
audit.cname.vercel.comIn scope2026-11-14
dns.cname.vercel.comIn scope2026-11-14
cnames.vercel.comIn scope2026-11-14
leminal.co-op.vercel.comIn scope2026-11-14
next-blog-app-kensuke.com.vercel.comIn scope2026-11-14
noi.comments.vercel.comIn scope2026-11-14
community.vercel.comIn scope2026-11-14
conf-feature-flags.vercel.comIn scope2026-11-14
conference-io.vercel.comIn scope2026-11-14
clues.crboxjelly2022.vercel.comIn scope2026-11-14
clues.crboxjelly20221352351.vercel.comIn scope2026-11-14
clues.crboxjelly2022135235112351254.vercel.comIn scope2026-11-14
nextjs-tutorial.crd.vercel.comIn scope2026-11-14
preview.crv.vercel.comstagingIn scope2026-11-14
cuernosconestilo.vercel.comIn scope2026-11-14
cuspide.vercel.comIn scope2026-11-14
customerio.vercel.comIn scope2026-11-14
dancing-mosquitoes.vercel.comIn scope2026-11-14

Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in