Marriott Bug Bounty Program
Marriott Bug Bounty Program on HackerOne · HackerOne Active
Scope
At a glance
- Bounties: Yes
- Swag: Yes
- Managed by the platform: Yes
- Average first response: 0 days
- Average time to resolution: 54.4 days
In scope
*.apigatewayc.marriott.com*.apigwc.marriott.com*.artifactory.marriott.com*.dcfgateway.marriott.com*.gateway.marriott.com*.mgs.marriott.com*.sba.marriott.com*gateway-apc.marriott.com*uat.marriott.com455004730activities.marriott.comall-inclusive.marriott.comapcgateway.marriott.comapp-insiders.marriott.comauth-apc.marriott.combilt.marriott.combpa2.marriott.combsp.marriott.comcache.marriott.comcareers.marriott.comchannel-portal.homes-and-villas.marriott.comci-propertyconversionportal.marriott.comcontentportal.marriott.comcontentportalauth.marriott.comcpp.marriott.comdcfgateway*.marriott.comdevice.marriott.comeditionhotels.comefast.marriott.comeidhelp.marriott.comesupplier.marriott.comgateway*.marriott.comgiftcards.marriott.comgifts.marriott.comhelp.marriott.comhomes-and-villas.marriott.comhotel-deals.marriott.comhotel-development.marriott.comhttp://www.shopmarriott.comhttps://dcfgatewaytst1.marriott.com/
38 more assets on the official page.
Out of scope
*.phunware.com*.ritzcarlton.com*.ritzcarltonyachtcollection.com*moxymix*.marriott.comNot-Listed AssetsPhoenix Platformapps.ritzcarlton.comclmagtest.marriott.comelement-hotels.marriott.comeswebdev.marriott.comfe.emergingtech-btsales.marriott.comgdstest.marriott.comgis.marriott.comglobaldesign.marriott.com/*hotelexcellence.marriott.comlatinoamerica.marriott.comllmgw.codefest2026.marriott.comluxurybrands.marriott.commarriott.techmarriottlearnourbrands.commeetings-excellence.marriott.commi.bookmarriott.commilux.marriott.comofhub.marriott.comspringhillsuites.marriott.comssm-marriottms.saviyntcloud.comtowneplacesuites.marriott.comvacations.marriott.comwww.github.comwww.msg-gateway.marriott.comwww.travelagents.marriott.com
Imported from the public directory. Always confirm scope on the official program page before testing.