Bug Bounties

Amazon Vulnerability Research Program - Devices

Powered by: 

Allows bounty splitting: 

Average time to first program response: 4

Average time to bounty awarded null: 267

Average time to report resolved: 831

Handle amazonvrp-devices

Managed program: true

Name: Amazon Vulnerability Research Program - Devices

Offers bounties: true

Offers swag: false

Response efficiency percentage: 96

Submission state: open

Url: https://hackerone.com/amazonvrp-devices

Website: http://amazon.com

In scope:

  • Asset identifier: 1291586307
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/amazon-key/id1291586307
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 1324809509
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/id1324809509
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 1496435377
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/id1496435377
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 1528364633
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/luna-controller/id1528364633
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 302584613
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/id302584613
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 621574163
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/amazon-photos/id621574163
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 944011620
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/id944011620
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 947984433
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://apps.apple.com/us/app/id947984433
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Echo Family Devices
  • Asset type: HARDWARE
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Echo (Gen 4), Echo Dot (Gen 4) Echo Dot with Clock (Gen 4) Echo Show 10 Echo Flex Echo Buds Echo Frames Echo Auto
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: FireTV
  • Asset type: HARDWARE
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Fire TV Stick (Gen 3) Amazon Fire TV Cube (Gen 2) Fire TV Stick Lite Fire TV Blaster
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Halo
  • Asset type: HARDWARE
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Halo View Halo
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Kindle E-Reader
  • Asset type: HARDWARE
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Kindle Oasis (Gen 10) Kindle (Gen 10)
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Luna
  • Asset type: HARDWARE
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Luna Controller
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Other
  • Asset type: OTHER
  • Availability requirement: high
  • Confidentiality requirement: high
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: high
  • Max severity: critical



  • Asset identifier: Tablets
  • Asset type: HARDWARE
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Fire HD 8 (Gen 10) Fire 7" (Gen 9) Fire HD 10 (Gen 9)
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: a4k.amazon.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: alexa.amazon.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: alexaanswers.amazon.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: amazon.com/hz/mycd/*
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: api.amazonalexa.com/*
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: blueprints.amazon.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.amazon.clouddrive.photos
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.amazon.clouddrive.photos
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.amazon.cosmos
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.amazon.cosmos
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.amazon.dee.app
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.amazon.dee.app
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.amazon.healthtech.malibu
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.amazon.healthtech.malibu
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.amazon.kindle
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.amazon.kindle
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.amazon.storm.lightning.client.aosp
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.amazon.storm.lightning.client.aosp
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.amazon.tahoe.freetime
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.amazon.tahoe.freetime
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.amazon.tails
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: https://play.google.com/store/apps/details?id=com.amazon.tails
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: creator.amazon.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: developer.amazon.com/alexa/*
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: developer.amazon.com/apps-and-games/*
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: https://luna.amazon.com/*
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: https://www.amazon.com/luna/*
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: read.amazon.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: skills-store.amazon.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: www.amazon.com/photos/*
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical