vulns.co
/
GKData.io MCP

HackerOne · 4 min read

Amazon Vulnerability Research Program

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 338; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 121 published rows
AssetTypeGroup / eligibility
*.amazon.clWILDCARDBounty eligible: Yes
*.amazon.co.zaWILDCARDBounty eligible: Yes
*.amazon.com.auWILDCARDBounty eligible: Yes
*.amazon.com.brWILDCARDBounty eligible: Yes
*.amazon.com.coWILDCARDBounty eligible: Yes
*.amazon.com.mxWILDCARDBounty eligible: Yes
*.amazon.com.ngWILDCARDBounty eligible: Yes
*.amazon.com.trWILDCARDBounty eligible: Yes
*.amazon.plWILDCARDBounty eligible: Yes
*.amazon.com.beWILDCARDBounty eligible: Yes
*.amazon.aeWILDCARDBounty eligible: Yes
*.amazon.caWILDCARDBounty eligible: Yes
*.amazon.cnWILDCARDBounty eligible: Yes
*.amazon.co.jpWILDCARDBounty eligible: Yes
*.amazon.co.ukWILDCARDBounty eligible: Yes
*.amazon.deWILDCARDBounty eligible: Yes
*.amazon.egWILDCARDBounty eligible: Yes
*.amazon.esWILDCARDBounty eligible: Yes
*.amazon.frWILDCARDBounty eligible: Yes
*.amazon.inWILDCARDBounty eligible: Yes
*.amazon.itWILDCARDBounty eligible: Yes
*.amazon.nlWILDCARDBounty eligible: Yes
*.amazon.saWILDCARDBounty eligible: Yes
*.amazon.seWILDCARDBounty eligible: Yes
*.amazon.sgWILDCARDBounty eligible: Yes
*.amazon.comWILDCARDBounty eligible: Yes
primevideo.com/*WILDCARDBounty eligible: Yes
www.amazon.*URLBounty eligible: Yes
amazonpayinsurance.inURLBounty eligible: Yes
https://www.amazonpay.in/*OTHERBounty eligible: Yes
Vega OSOTHERBounty eligible: Yes
DevicesOTHERBounty eligible: Yes
Services/Mobile/GenAIOTHERBounty eligible: Yes
Echo Family DevicesHARDWAREBounty eligible: Yes
FireTVHARDWAREBounty eligible: Yes
Kindle E-ReaderHARDWAREBounty eligible: Yes
LunaHARDWAREBounty eligible: Yes
TabletsHARDWAREBounty eligible: Yes
com.amazon.mShop.android.shoppingGOOGLE_PLAY_APP_IDBounty eligible: Yes
amazon.speech.simGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.mShop.android.business.shoppingGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.mp3GOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.flex.rabbitGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.imdbtv.livingroomGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.amazonvideo.livingroomGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.mp3.automotiveOSGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.dee.alexaonwearosGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.localqueenGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.helix.prodGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.tahoe.grownupsGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.sft.rangoli.seller.appGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.imdb.tv.mobile.appGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.minitv.android.appGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.ziggy.androidGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.music.tvGOOGLE_PLAY_APP_IDBounty eligible: Yes
in.amazon.mShop.android.business.shoppingGOOGLE_PLAY_APP_IDBounty eligible: Yes
in.amazon.mShop.android.shoppingGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.relayGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.avod.thirdpartyclientGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.sellerflexmobileGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.shopperpanel.android.mobile.appGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.vendormobile.androidGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.technician.androidGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.primenow.seller.androidGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.vendormobile.india.androidGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.sellermobile.androidGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.astroGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.warhol.androidGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.amazonone.androidappGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.kisan.appGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.aba.applicationGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.enterprise.access.androidGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.firetv.recast.blaster.aospGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.ihm.candycaneGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.swa.mobileappGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.clouddrive.photosGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.dee.appGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.kindleGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.storm.lightning.client.aospGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.tahoe.freetimeGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.amazon.tailsGOOGLE_PLAY_APP_IDBounty eligible: Yes
297606951APPLE_STORE_APP_IDBounty eligible: Yes
1552455423APPLE_STORE_APP_IDBounty eligible: Yes
1498197033APPLE_STORE_APP_IDBounty eligible: Yes
1265170914APPLE_STORE_APP_IDBounty eligible: Yes
510855668APPLE_STORE_APP_IDBounty eligible: Yes
6452192521APPLE_STORE_APP_IDBounty eligible: Yes
545519333APPLE_STORE_APP_IDBounty eligible: Yes
1475021574APPLE_STORE_APP_IDBounty eligible: Yes
1454725763APPLE_STORE_APP_IDBounty eligible: Yes
1276296103APPLE_STORE_APP_IDBounty eligible: Yes
6471528064APPLE_STORE_APP_IDBounty eligible: Yes
1532153219APPLE_STORE_APP_IDBounty eligible: Yes
1579372261APPLE_STORE_APP_IDBounty eligible: Yes
1478350915APPLE_STORE_APP_IDBounty eligible: Yes
794141485APPLE_STORE_APP_IDBounty eligible: Yes
1494755014APPLE_STORE_APP_IDBounty eligible: Yes
342576766APPLE_STORE_APP_IDBounty eligible: Yes
358861688APPLE_STORE_APP_IDBounty eligible: Yes
348712880APPLE_STORE_APP_IDBounty eligible: Yes
374254473APPLE_STORE_APP_IDBounty eligible: Yes
335187483APPLE_STORE_APP_IDBounty eligible: Yes
1592204907APPLE_STORE_APP_IDBounty eligible: Yes
6444868926APPLE_STORE_APP_IDBounty eligible: Yes
988788863APPLE_STORE_APP_IDBounty eligible: Yes
1057338687APPLE_STORE_APP_IDBounty eligible: Yes
1659883691APPLE_STORE_APP_IDBounty eligible: Yes
1151746202APPLE_STORE_APP_IDBounty eligible: Yes
6479334468APPLE_STORE_APP_IDBounty eligible: Yes
6560104638APPLE_STORE_APP_IDBounty eligible: Yes
1324809509APPLE_STORE_APP_IDBounty eligible: Yes
1528364633APPLE_STORE_APP_IDBounty eligible: Yes
302584613APPLE_STORE_APP_IDBounty eligible: Yes
621574163APPLE_STORE_APP_IDBounty eligible: Yes
944011620APPLE_STORE_APP_IDBounty eligible: Yes
947984433APPLE_STORE_APP_IDBounty eligible: Yes
GenAI Apps under *.amazon.*AI_MODELBounty eligible: Yes
Other Amazon Retail Sites (Please only actively test explicitly stated scope)OTHERBounty eligible: No
Other Amazon Retail Mobile Apps (Please only actively test explicitly stated scope)OTHERBounty eligible: No
Amazon Subsidiaries (Please only actively test explicitly stated scope)OTHERBounty eligible: No
Other Amazon Retail Assets (Please only actively test explicitly stated scope)OTHERBounty eligible: No
Out of scope · 10 published rows
AssetTypeGroup / eligibility
amazongames.comURLBounty eligible: No
Amazon Web Services (AWS)OTHERBounty eligible: No
"Contact Us" FunctionalityOTHERBounty eligible: No
AWS and AWS customer assets are strictly out of scopeOTHERBounty eligible: No
*.*a2z*.*OTHERBounty eligible: No
*.devOTHERBounty eligible: No
*.aws.*OTHERBounty eligible: No
Anything considered a non-prod assetOTHERBounty eligible: No
Anything which redirects to AWSOTHERBounty eligible: No
learning.logistics.amazon.comOTHERBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software