Amazon Vulnerability Research Program - Devices

HackerOne·34 in-scope · 3 out·updated 28d ago·RSS
Discord →open program
bountymanagedopen
first response
—
no reports yet
scope
3 out
asset mix
url
14 url · 9 other · 6 ios
last change
46d ago
from snapshot diff
In scope

034
urls14
Recent changes

+1 scope
46d ago
- + Vega OS
Community reports

0 reports
No reports yet — be the first to share your triage timing for Amazon Vulnerability Research Program - Devices.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
Similar programs

by shared scope
Your notes

History

2 events
in-scope over 10dpeak 34
first indexedscope addedscope removedreward change
2026-08-16
+ added 1 scope · Vega OS
46d ago
▸ raw source payload
{
  "id": 0,
  "url": "https://hackerone.com/amazonvrp-devices",
  "name": "Amazon Vulnerability Research Program - Devices",
  "handle": "amazonvrp-devices",
  "targets": {
    "in_scope": [
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://apps.apple.com/us/app/id1324809509",
        "max_severity": "critical",
        "asset_identifier": "1324809509",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://apps.apple.com/us/app/luna-controller/id1528364633",
        "max_severity": "critical",
        "asset_identifier": "1528364633",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://apps.apple.com/us/app/id302584613",
        "max_severity": "critical",
        "asset_identifier": "302584613",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://apps.apple.com/us/app/amazon-photos/id621574163",
        "max_severity": "critical",
        "asset_identifier": "621574163",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://apps.apple.com/us/app/id944011620",
        "max_severity": "critical",
        "asset_identifier": "944011620",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://apps.apple.com/us/app/id947984433",
        "max_severity": "critical",
        "asset_identifier": "947984433",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "HARDWARE",
        "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.",
        "max_severity": "critical",
        "asset_identifier": "Echo Family Devices",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "HARDWARE",
        "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.",
        "max_severity": "critical",
        "asset_identifier": "FireTV",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "HARDWARE",
        "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.",
        "max_severity": "critical",
        "asset_identifier": "Kindle E-Reader",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "HARDWARE",
        "instruction": "Luna Controller\n\nDevices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.",
        "max_severity": "critical",
        "asset_identifier": "Luna",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "Other",
        "eligible_for_bounty": false,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "HARDWARE",
        "instruction": "Fire HD 8 (Gen 10)\nFire 7\" (Gen 9)\nFire HD 10 (Gen 9)",
        "max_severity": "critical",
        "asset_identifier": "Tablets",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "Vega OS",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "a4k.amazon.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "alexa.amazon.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "alexaanswers.amazon.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "amazon.com/hz/mycd/*",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "api.amazonalexa.com/*",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "blueprints.amazon.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "https://play.google.com/store/apps/details?id=com.amazon.clouddrive.photos",
        "max_severity": "critical",
        "asset_identifier": "com.amazon.clouddrive.photos",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "com.amazon.dee.alexaonwearos",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "https://play.google.com/store/apps/details?id=com.amazon.dee.app",
        "max_severity": "critical",
        "asset_identifier": "com.amazon.dee.app",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "https://play.google.com/store/apps/details?id=com.amazon.kindle",
        "max_severity": "critical",
        "asset_identifier": "com.amazon.kindle",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "https://play.google.com/store/apps/details?id=com.amazon.storm.lightning.client.aosp",
        "max_severity": "critical",
        "asset_identifier": "com.amazon.storm.lightning.client.aosp",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "https://play.google.com/store/apps/details?id=com.amazon.tahoe.freetime",
        "max_severity": "critical",
        "asset_identifier": "com.amazon.tahoe.freetime",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "https://play.google.com/store/apps/details?id=com.amazon.tails",
        "max_severity": "critical",
        "asset_identifier": "com.amazon.tails",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "creator.amazon.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "developer.amazon.com/alexa/*",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "developer.amazon.com/apps-and-games/*",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "https://luna.amazon.com/*",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "https://www.amazon.com/luna/*",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "read.amazon.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "skills-store.amazon.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "www.amazon.com/photos/*",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ],
    "out_of_scope": [
      {
        "asset_type": "OTHER",
        "instruction": "",
        "max_severity": "none",
        "asset_identifier": "\"Contact Us\" Functionality",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": "Placeholder for the top Rewards modal",
        "max_severity": "none",
        "asset_identifier": "Devices",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": "Placeholder for the top Rewards modal",
        "max_severity": "none",
        "asset_identifier": "Services and Apps",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ]
  },
  "website": "http://amazon.com",
  "offers_swag": false,
  "managed_program": true,
  "offers_bounties": true,
  "submission_state": "open",
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 365,
  "response_efficiency_percentage": 55,
  "average_time_to_report_resolved": 1085,
  "average_time_to_first_program_response": 53
}
+alexaanswers.amazon.com· critical