Amazon Vulnerability Research Program Bug Bounty Program on Hackerone

{ "allows_bounty_splitting": true, "average_time_to_bounty_awarded": 376, "average_time_to_first_program_response": 38, "average_time_to_report_resolved": 3126, "handle": "amazonvrp", "id": 0, "managed_program": false, "name": "Amazon Vulnerability Research Program", "offers_bounties": true, "offers_swag": true, "response_efficiency_percentage": 75, "submission_state": "open", "url": "https://hackerone.com/amazonvrp", "website": "https://www.amazon.com", "targets": { "in_scope": [ { "asset_identifier": "*.amazon.ae", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.ca", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.cl", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.cn", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.co.jp", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.co.uk", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.co.za", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.com.au", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.com.be", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.com.br", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.com.co", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.com.mx", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.com.ng", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.com.tr", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.de", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.eg", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.es", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.fr", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.in", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.it", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.nl", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.pl", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.sa", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.se", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.amazon.sg", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1057338687", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "PN Seller\thttps://apps.apple.com/us/app/pn-seller/id1057338687\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1151746202", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://apps.apple.com/us/app/transparency/id1151746202", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1265170914", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Live Creator\thttps://apps.apple.com/us/app/amazon-live-creator/id1265170914\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1276296103", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Relay\nhttps://apps.apple.com/us/app/itunes-store/1276296103\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1324809509", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1454725763", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Flex\nhttps://apps.apple.com/us/app/itunes-store/1454725763\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1475021574", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Music for Artists\nhttps://apps.apple.com/us/app/amazon-music-for-artists/id1475021574", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1478350915", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopping (IN)\nhttps://apps.apple.com/in/app/amazon-india-shop-pay-minitv/id1478350915", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1494755014", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopper Panel\thttps://apps.apple.com/us/app/amazon-shopper-panel/id1494755014\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1498197033", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Business\thttps://apps.apple.com/us/app/amazon-business-b2b-shopping/id1498197033\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1528364633", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1532153219", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Freevee\nhttps://apps.apple.com/us/app/amazon-freevee-movies-live-tv/id1532153219", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1552455423", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Astro\nhttps://apps.apple.com/us/app/amazon-astro/id1552455423\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1579372261", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "\nAmazon Business (IN)\nhttps://apps.apple.com/in/app/amazon-business-india-b2b/id1579372261", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1592204907", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Sidewalk Bridge Pro\thttps://apps.apple.com/us/app/amazon-sidewalk-bridge-pro/id1592204907\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "1659883691", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Vendor Central (IN)\thttps://apps.apple.com/in/app/vendor-central-india/id1659883691\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "297606951", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://apps.apple.com/us/app/amazon-shopping/id297606951", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "302584613", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "335187483", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopping (UK)\thttps://apps.apple.com/gb/app/amazon/id335187483\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "342576766", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopping (CN)\thttps://apps.apple.com/cn/app/%E4%BA%9A%E9%A9%AC%E9%80%8A%E8%B4%AD%E7%89%A9/id342576766\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "348712880", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopping (DE)\thttps://apps.apple.com/de/app/amazon/id348712880\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "358861688", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopping (FR)\thttps://apps.apple.com/fr/app/amazon-fr/id358861688\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "374254473", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopping (JP)\thttps://apps.apple.com/jp/app/amazon-%E3%82%B7%E3%83%A7%E3%83%83%E3%83%94%E3%83%B3%E3%82%B0%E3%82%A2%E3%83%97%E3%83%AA/id374254473\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "510855668", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Music\thttps://apps.apple.com/us/app/amazon-music-songs-podcasts/id510855668\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "545519333", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Prime Video\thttps://apps.apple.com/us/app/amazon-prime-video/id545519333\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "621574163", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "6444868926", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Vendor\thttps://apps.apple.com/us/app/amazon-vendor/id6444868926\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "6452192521", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon One\thttps://apps.apple.com/us/app/amazon-one/id6452192521\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "6471528064", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Kids + Parents Dashbaord\nhttps://apps.apple.com/us/app/amazon-kids-parent-dashboard/id6471528064", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "6479334468", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shipping\t-->\thttps://apps.apple.com/us/app/amazon-shipping/id6479334468", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "6560104638", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Fire TV Recast|Blaster\t--> https://apps.apple.com/us/app/amazon-fire-tv-recast-blaster/id6560104638\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "794141485", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Seller\nhttps://apps.apple.com/us/app/itunes-store/794141485", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "944011620", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "947984433", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "988788863", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Selling Services on Amazon\thttps://apps.apple.com/us/app/selling-services-on-amazon/id988788863\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Amazon Subsidiaries (Please only actively test explicitly stated scope)", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Devices", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Placeholder for the Rewards modal. Please view Devices scope items to detail active scope.", "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "Echo Family Devices", "asset_type": "HARDWARE", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "FireTV", "asset_type": "HARDWARE", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "GenAI Apps under *.amazon.*", "asset_type": "AI_MODEL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "This is a catchall for any GenAI applications found under \\*.amazon.\\*. Rufus is an example of this.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Kindle E-Reader", "asset_type": "HARDWARE", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Luna", "asset_type": "HARDWARE", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Other Amazon Retail Assets (Please only actively test explicitly stated scope)", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Other Amazon Retail Mobile Apps (Please only actively test explicitly stated scope)", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Other Amazon Retail Sites (Please only actively test explicitly stated scope)", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Services/Mobile/GenAI", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Placeholder for the Rewards modal. Please view the scope page to active scope.", "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "Tablets", "asset_type": "HARDWARE", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "Vega OS", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Devices must be purchased on Amazon or an authorized retailer, and must be running the latest available software.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "amazon.speech.sim", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Alexa - Show Mode for L\nhttps://play.google.com/store/apps/details?id=amazon.speech.sim\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "amazonpayinsurance.in", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.aba.application", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://play.google.com/store/apps/details?id=com.amazon.aba.application", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.amazonone.androidapp", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon One\nhttps://play.google.com/store/apps/details?id=com.amazon.amazonone.androidapp", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.amazonvideo.livingroom", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Prime Video (TV) - Android TV https://play.google.com/store/apps/details?id=com.amazon.amazonvideo.livingroom\n\n**Android TV**: follow the documentation [here](https://developer.android.com/training/tv/get-started/create#run-on-a-virtual-device) to create an Android TV virtual device. The “Android 14.0 (Google TV)” image includes the Play Store and can be used to install and run the in-scope apps.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.astro", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Astro\nhttps://play.google.com/store/apps/details?id=com.amazon.astro", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.avod.thirdpartyclient", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Prime Video\nhttps://play.google.com/store/apps/details?id=com.amazon.avod.thirdpartyclient", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.clouddrive.photos", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.dee.alexaonwearos", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.dee.app", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.enterprise.access.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "AEA - Amazon Employees\t-->\thttps://play.google.com/store/apps/details?id=com.amazon.enterprise.access.android", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.firetv.recast.blaster.aosp", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Fire TV Recast|Blaster\t-->\thttps://play.google.com/store/apps/details?id=com.amazon.firetv.recast.blaster.aosp", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.flex.rabbit", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Flex\nhttps://play.google.com/store/apps/details?id=com.amazon.flex.rabbit", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.helix.prod", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Hub Counter\nhttps://play.google.com/store/apps/details?id=com.amazon.helix.prod", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.ihm.candycane", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Store Ops by Amazon\t-->\thttps://play.google.com/store/apps/details?id=com.amazon.ihm.candycane", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.imdb.tv.mobile.app", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Freevee\nhttps://play.google.com/store/apps/details?id=com.amazon.imdb.tv.mobile.app", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.kindle", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.kisan.app", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Kisan\nhttps://play.google.com/store/apps/details?id=com.amazon.kisan.app", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.mShop.android.business.shopping", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Business\nhttps://play.google.com/store/apps/details?id=com.amazon.mShop.android.business.shopping\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.mShop.android.shopping", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "https://play.google.com/store/apps/details?id=com.amazon.mShop.android.shopping", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "com.amazon.minitv.android.app", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon miniTV\nhttps://play.google.com/store/apps/details?id=com.amazon.minitv.android.app", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.mp3", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Music\nhttps://play.google.com/store/apps/details?id=com.amazon.mp3\n\nAmazon Music (Watch) is also in scope\n\n**wearOS**: follow the documentation [here](https://developer.android.com/training/wearables/get-started/creating#run-emulator) to create a wearOS virtual device. The “Android 14.0 (Wear OS 5)” image includes the Play Store and can be used to install and run the in-scope apps. The documentation [here](https://developer.android.com/training/wearables/get-started/connect-phone) explains how to pair a physical/virtual phone to the virtual wearOS device to complete setup.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.mp3.automotiveOS", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Music - Automotive\nhttps://play.google.com/store/apps/details?id=com.amazon.mp3.automotiveOS\n\n**Android Automotive (AAOS)**: follow the documentation [here](https://developer.android.com/training/cars/testing/emulator) to create an AAOS virtual device. The “Android 14.0 (Automotive)” image includes the Play Store and can be used to install and run the in-scope apps.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.music.tv", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Music TV\nhttps://play.google.com/store/apps/details?id=com.amazon.music.tv\n\n**Android TV**: follow the documentation [here](https://developer.android.com/training/tv/get-started/create#run-on-a-virtual-device) to create an Android TV virtual device. The “Android 14.0 (Google TV)” image includes the Play Store and can be used to install and run the in-scope apps.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.primenow.seller.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "PN Seller\thttps://play.google.com/store/apps/details?id=com.amazon.primenow.seller.android\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.relay", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Relay\nhttps://play.google.com/store/apps/details?id=com.amazon.relay", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.sellerflexmobile", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Seller Flex App\thttps://play.google.com/store/apps/details?id=com.amazon.sellerflexmobile\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.sellermobile.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Seller\nhttps://play.google.com/store/apps/details?id=com.amazon.sellermobile.android", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.sft.rangoli.seller.app", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "SmartBiz by Amazon Web Builder\nhttps://play.google.com/store/apps/details?id=com.amazon.sft.rangoli.seller.app", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.shopperpanel.android.mobile.app", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopper Panel\thttps://play.google.com/store/apps/details?id=com.amazon.shopperpanel.android.mobile.app\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.storm.lightning.client.aosp", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.swa.mobileapp", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shipping --> https://play.google.com/store/apps/details?id=com.amazon.swa.mobileapp", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.tahoe.freetime", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.tahoe.grownups", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Kids + Parent Dashboard\nhttps://play.google.com/store/apps/details?id=com.amazon.tahoe.grownups", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.tails", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.technician.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Selling Services on Amazon\thttps://play.google.com/store/apps/details?id=com.amazon.technician.android\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.vendormobile.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Vendor\thttps://play.google.com/store/apps/details?id=com.amazon.vendormobile.android\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.vendormobile.india.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Vendor Central (IN)\thttps://play.google.com/store/apps/details?id=com.amazon.vendormobile.india.android\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.warhol.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Live Creator\nhttps://play.google.com/store/apps/details?id=com.amazon.warhol.android", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.amazon.ziggy.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Music for Artists\nhttps://play.google.com/store/apps/details?id=com.amazon.ziggy.android", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.imdbtv.livingroom", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Freevee (TV) https://play.google.com/store/apps/details?id=com.imdbtv.livingroom\n\n**Android TV**: follow the documentation [here](https://developer.android.com/training/tv/get-started/create#run-on-a-virtual-device) to create an Android TV virtual device. The “Android 14.0 (Google TV)” image includes the Play Store and can be used to install and run the in-scope apps.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.localqueen", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "GlowRoad: Resell & Earn Online\nhttps://play.google.com/store/apps/details?id=com.localqueen", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "https://www.amazonpay.in/*", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "in.amazon.mShop.android.business.shopping", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Business (IN)\nhttps://play.google.com/store/apps/details?id=in.amazon.mShop.android.business.shopping", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "in.amazon.mShop.android.shopping", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Amazon Shopping (IN)\nhttps://play.google.com/store/apps/details?id=in.amazon.mShop.android.shopping&hl=en_US", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "primevideo.com/*", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.amazon.*", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "All international retail marketplaces\n* Brazil: www.amazon.com.br\n* Canada: www.amazon.ca\n* Mexico: www.amazon.com.mx\n* United States: www.amazon.com\n* China: www.amazon.cn\n* India: www.amazon.in\n* Japan: www.amazon.co.jp\n* Singapore: www.amazon.sg\n* Turkey: www.amazon.com.tr\n* United Arab Emirates: www.amazon.ae\n* France: www.amazon.fr\n* Germany: www.amazon.de\n* Italy: www.amazon.it\n* Netherlands: www.amazon.nl\n* Spain: www.amazon.es\n* Sweden: www.amazon.se\n* United Kingdom: www.amazon.co.uk\n* Australia: www.amazon.com.au", "integrity_requirement": null, "max_severity": "critical" } ], "out_of_scope": [ { "asset_identifier": "\"Contact Us\" Functionality", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": "", "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "*.*a2z*.*", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": null, "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "*.aws.*", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": null, "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "*.dev", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": null, "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "AWS and AWS customer assets are strictly out of scope", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": null, "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "Amazon Web Services (AWS)", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": "Currently, anything related to AWS should be considered out of scope and should be reported directly to AWS: https://aws.amazon.com/security/vulnerability-reporting/", "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "Anything considered a non-prod asset", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": null, "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "Anything which redirects to AWS", "asset_type": "OTHER", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": null, "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "amazongames.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": "", "integrity_requirement": null, "max_severity": "none" }, { "asset_identifier": "learning.logistics.amazon.com", "asset_type": "OTHER", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": false, "eligible_for_submission": false, "instruction": "", "integrity_requirement": "high", "max_severity": "none" } ] } }

Amazon Vulnerability Research Program

In scope

Recent changes

Community reports

Your notes

Out of scope