Kiva Systems Amazon Robotics Since 2012 Vulnerability Disclosure

generated: '2026-07-19'
method: searched
source: https://www.amazon.com/.well-known/security.txt
scope: parent-company
scope_note: >-
  Amazon Robotics LLC is a wholly owned subsidiary of Amazon.com, Inc. It publishes no
  security.txt or disclosure policy of its own (amazonrobotics.com is an internal-only
  host). The program below is the Amazon corporate Vulnerability Research Program, which
  is the published intake path covering Amazon-owned properties and subsidiaries.
program:
  name: Amazon Vulnerability Research Program (VRP)
  platform: HackerOne
  handle: amazonvrp
  policy: https://hackerone.com/amazonvrp
  submit: https://hackerone.com/amazonvrp/reports/new
  bug_bounty: true
security_txt:
  url: https://www.amazon.com/.well-known/security.txt
  status: 200
  file: ../well-known/kiva-systems-amazon-robotics-since-2012-security.txt
  fields:
    contact: https://hackerone.com/amazonvrp/reports/new
    policy: https://hackerone.com/amazonvrp
    hiring: https://www.amazon.jobs/en/teams/infosec
related:
- name: AWS vulnerability reporting
  url: https://aws.amazon.com/security/vulnerability-reporting/
  note: separate intake for Amazon Web Services, referenced from the security.txt comments