vulns.co
/
GKData.io MCP

HackerOne · 3 min read

Hyatt Hotels

Unknown

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 374; Active program checkbox checked; Bounties minimum displayed $0. Program type unknown: no positive displayed minimum; absence or zero does not establish VDP. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 61 published rows
AssetTypeGroup / eligibility
hyatt.comURLBounty eligible: Yes
www.hyatt.comURLBounty eligible: Yes
world.hyatt.comURLBounty eligible: Yes
assets.hyatt.comURLBounty eligible: Yes
newsroom.images.hyatt.comURLBounty eligible: Yes
salesportal.hyatt.comURLBounty eligible: Yes
meetings.hyatt.comURLBounty eligible: Yes
ebsext.oft.hyatt.comURLBounty eligible: Yes
mobileapp.hyatt.comURLBounty eligible: Yes
plannerrequest.hyatt.comURLBounty eligible: Yes
public.hyatt.comURLBounty eligible: Yes
roominglist.hyatt.comURLBounty eligible: Yes
soaext.oft.hyatt.comURLBounty eligible: Yes
sso.oft.hyatt.comURLBounty eligible: Yes
upsell.hyatt.comURLBounty eligible: Yes
www.hyattconnect.comURLBounty eligible: Yes
confluence.hyattdev.comURLBounty eligible: Yes
scapegoat.hyatt.comURLBounty eligible: Yes
book.cheapcaribbean.comURLBounty eligible: Yes
res.vacations.buschgardens.comURLBounty eligible: Yes
res.vacations.sesameplace.comURLBounty eligible: Yes
vacations.travelimpressions.comURLBounty eligible: Yes
www.blueskytours.comURLBounty eligible: Yes
www.cheapcaribbean.comURLBounty eligible: Yes
www.triseptsolutions.comURLBounty eligible: Yes
blueskytours.globalbookingsolutions.comURLBounty eligible: Yes
booking.cheapcaribbean.comURLBounty eligible: Yes
booking.beachbound.comURLBounty eligible: Yes
book.beachbound.comURLBounty eligible: Yes
res.funjet.comURLBounty eligible: Yes
res.secretsresorts.comURLBounty eligible: Yes
res.vacations.discoverycove.comURLBounty eligible: Yes
res.vacations.seaworld.comURLBounty eligible: Yes
vacations.universalstudioshollywood.comURLBounty eligible: Yes
www.funjet.comURLBounty eligible: Yes
www.universalorlandovacations.comURLBounty eligible: Yes
www.wynnvacations.comURLBounty eligible: Yes
www.beachbound.comURLBounty eligible: Yes
book.applevacations.comURLBounty eligible: Yes
book.booktandl.comURLBounty eligible: Yes
login.www.vaxvacationaccess.comURLBounty eligible: Yes
new.www.vaxvacationaccess.comURLBounty eligible: Yes
res.blueskytours.globalbookingsolutions.comURLBounty eligible: Yes
res.universalorlandovacations.comURLBounty eligible: Yes
res.vacations.united.comURLBounty eligible: Yes
res.vacations.universalstudioshollywood.comURLBounty eligible: Yes
reservations.wynnvacations.comURLBounty eligible: Yes
rezagent.triseptsolutions.comURLBounty eligible: Yes
shop.wyndhamvacationownership.trisept.travelURLBounty eligible: Yes
www.triseptapi.comURLBounty eligible: Yes
www.triseptdemo.comURLBounty eligible: Yes
vacations.united.comURLBounty eligible: Yes
www.applevacations.comURLBounty eligible: Yes
res.hyattinclusivecollection.comURLBounty eligible: Yes
www.hyattinclusivecollection.comURLBounty eligible: Yes
booking.applevacations.comURLBounty eligible: Yes
com.HyattGOOGLE_PLAY_APP_IDBounty eligible: Yes
140.95.0.0/16CIDRBounty eligible: Yes
213.139.133.32/28CIDRBounty eligible: Yes
199.66.248.0/22CIDRBounty eligible: Yes
476639005APPLE_STORE_APP_IDBounty eligible: Yes
Out of scope · 0 published rows
AssetTypeGroup / eligibility
No rows captured. This does not establish that the program has no assets or restrictions.

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software