Amazon Vulnerability Research Program
HackerOne live webBug bounty program on HackerOne. Official listing: https://hackerone.com/amazonvrp. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$30K
Starts
2020-03-31
In-scope assets
28
Last updated
2026-09-04
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| web | *.amazon.ae | |
| web | *.amazon.ca | |
| web | *.amazon.cl | |
| web | *.amazon.cn | |
| web | *.amazon.co.jp | |
| web | *.amazon.co.uk | |
| web | *.amazon.co.za | |
| web | *.amazon.com | |
| web | *.amazon.com.au | |
| web | *.amazon.com.be | |
| web | *.amazon.com.br | |
| web | *.amazon.com.co | |
| web | *.amazon.com.mx | |
| web | *.amazon.com.ng | |
| web | *.amazon.com.tr | |
| web | *.amazon.de | |
| web | *.amazon.eg | |
| web | *.amazon.es | |
| web | *.amazon.fr | |
| web | *.amazon.in | |
| web | *.amazon.it | |
| web | *.amazon.nl | |
| web | *.amazon.pl | |
| web | *.amazon.sa | |
| web | *.amazon.se | |
| web | *.amazon.sg | |
| web | amazonpayinsurance.in | |
| web | primevideo.com/* |
Watching Amazon Vulnerability Research Program? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program