vulns.co
/
GKData.io MCP

HackerOne · 4 min read

Marriott Bug Bounty Program

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 343; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 81 published rows
AssetTypeGroup / eligibility
*gateway-apc.marriott.comWILDCARDBounty eligible: Yes
*.dcfgateway.marriott.comWILDCARDBounty eligible: Yes
*.mgs.marriott.comWILDCARDBounty eligible: Yes
*.gateway.marriott.comWILDCARDBounty eligible: Yes
*.apigatewayc.marriott.comWILDCARDBounty eligible: Yes
*.apigwc.marriott.comWILDCARDBounty eligible: Yes
*.artifactory.marriott.comWILDCARDBounty eligible: Yes
*.sba.marriott.comWILDCARDBounty eligible: Yes
homes-and-villas.marriott.comURLBounty eligible: Yes
careers.marriott.comURLBounty eligible: Yes
sso.marriott.comURLBounty eligible: Yes
mgs.marriott.comURLBounty eligible: Yes
jobs.marriott.comURLBounty eligible: Yes
passwordchallenge.marriott.comURLBounty eligible: Yes
gateway*.marriott.comURLBounty eligible: Yes
dcfgateway*.marriott.comURLBounty eligible: Yes
marriottfranchisetransactions.marriott.comURLBounty eligible: Yes
lawmanager.marriott.comURLBounty eligible: Yes
all-inclusive.marriott.comURLBounty eligible: Yes
reservations.all-inclusive.marriott.comURLBounty eligible: Yes
marrtool.comURLBounty eligible: Yes
cpp.marriott.comURLBounty eligible: Yes
editionhotels.comURLBounty eligible: Yes
https://gatewaydsapdev2.marriott.com/URLBounty eligible: Yes
https://dcfgatewaytst1.marriott.com/URLBounty eligible: Yes
https://gatewaydsaptst1.marriott.com/URLBounty eligible: Yes
https://gatewaydsapprd.marriott.com/v2/URLBounty eligible: Yes
www.marriott.comURLBounty eligible: Yes
moments.marriottbonvoy.comURLBounty eligible: Yes
help.marriott.comURLBounty eligible: Yes
psp.marriott.comURLBounty eligible: Yes
esupplier.marriott.comURLBounty eligible: Yes
https://gatewaydsapprd.marriott.com/v1/URLBounty eligible: Yes
activities.marriott.comURLBounty eligible: Yes
https://gatewaydsaptst2.marriott.com/URLBounty eligible: Yes
www.ritzcarlton.com/URLBounty eligible: Yes
*uat.marriott.comURLBounty eligible: Yes
traveler.marriott.comURLBounty eligible: Yes
travelagents.marriott.com/URLBounty eligible: Yes
mipartnerprivileges.marriott.comURLBounty eligible: Yes
efast.marriott.comURLBounty eligible: Yes
eidhelp.marriott.comURLBounty eligible: Yes
apcgateway.marriott.comURLBounty eligible: Yes
auth-apc.marriott.comURLBounty eligible: Yes
bpa2.marriott.comURLBounty eligible: Yes
device.marriott.comURLBounty eligible: Yes
ifast.marriott.comURLBounty eligible: Yes
wechat.api.marriott.comURLBounty eligible: Yes
hotel-deals.marriott.comURLBounty eligible: Yes
http://www.shopmarriott.comURLBounty eligible: Yes
smetrics.marriott.comURLBounty eligible: Yes
bsp.marriott.comURLBounty eligible: Yes
cache.marriott.comURLBounty eligible: Yes
channel-portal.homes-and-villas.marriott.comURLBounty eligible: Yes
ci-propertyconversionportal.marriott.comURLBounty eligible: Yes
contentportal.marriott.comURLBounty eligible: Yes
contentportalauth.marriott.comURLBounty eligible: Yes
join.marriott.comURLBounty eligible: Yes
joinrewards.marriott.comURLBounty eligible: Yes
oasisprod.marriott.comURLBounty eligible: Yes
ocijlbex1prd.marriott.comURLBounty eligible: Yes
owa.marriott.comURLBounty eligible: Yes
app-insiders.marriott.comURLBounty eligible: Yes
mds.marriott.comURLBounty eligible: Yes
meetmarriottbonvoy.marriott.comURLBounty eligible: Yes
prod-mipaasiaasservices.marriott.comURLBounty eligible: Yes
www.travel-brilliantly.marriott.comURLBounty eligible: Yes
uber.marriott.comURLBounty eligible: Yes
university.marriott.comURLBounty eligible: Yes
bilt.marriott.comURLBounty eligible: Yes
gifts.marriott.comURLBounty eligible: Yes
joinmarriottbonvoy.comURLBounty eligible: Yes
hotel-development.marriott.comURLBounty eligible: Yes
hotshoppeservices.comURLBounty eligible: Yes
vacation.marriott.comURLBounty eligible: Yes
moments.marriott.comURLBounty eligible: Yes
www.giving.marriott.comURLBounty eligible: Yes
www.members.marriott.comURLBounty eligible: Yes
splunk-phantom-nlb.marriott.comURLBounty eligible: Yes
455004730APPLE_STORE_APP_IDBounty eligible: Yes
giftcards.marriott.comURLBounty eligible: No
Out of scope · 31 published rows
AssetTypeGroup / eligibility
globaldesign.marriott.com/*WILDCARDBounty eligible: No
vacations.marriott.comURLBounty eligible: No
towneplacesuites.marriott.comURLBounty eligible: No
www.travelagents.marriott.comURLBounty eligible: No
*moxymix*.marriott.comURLBounty eligible: No
mi.bookmarriott.comURLBounty eligible: No
*.ritzcarltonyachtcollection.comURLBounty eligible: No
*.phunware.comURLBounty eligible: No
marriottlearnourbrands.comURLBounty eligible: No
hotelexcellence.marriott.comURLBounty eligible: No
meetings-excellence.marriott.comURLBounty eligible: No
springhillsuites.marriott.comURLBounty eligible: No
marriott.techURLBounty eligible: No
www.msg-gateway.marriott.comURLBounty eligible: No
ssm-marriottms.saviyntcloud.comURLBounty eligible: No
apps.ritzcarlton.comURLBounty eligible: No
element-hotels.marriott.comURLBounty eligible: No
milux.marriott.comURLBounty eligible: No
luxurybrands.marriott.comURLBounty eligible: No
www.github.comURLBounty eligible: No
llmgw.codefest2026.marriott.comURLBounty eligible: No
fe.emergingtech-btsales.marriott.comURLBounty eligible: No
latinoamerica.marriott.comURLBounty eligible: No
clmagtest.marriott.comURLBounty eligible: No
gis.marriott.comURLBounty eligible: No
eswebdev.marriott.comURLBounty eligible: No
ofhub.marriott.comURLBounty eligible: No
gdstest.marriott.comURLBounty eligible: No
*.ritzcarlton.comOTHERBounty eligible: No
Phoenix PlatformOTHERBounty eligible: No
Not-Listed AssetsOTHERBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software