CyberSIXT Atlas
Every disclosed bug bounty report, by the weakness it used.
15,219 public reports · $4,934,915 in bounties
Each strip is a weakness as the program filed it and each line a row of reports. No line joins two classes here: a large program has reports in every class, and no two classes turn up in the same programs more than those sizes predict. 1,721 reports were disclosed without a weakness: the last hub. Reports open on HackerOne.
Open Cross-site Scripting or on the map. Zoom in to read every mark.
- reports
- 15,219
- filed under a weakness
- 13,498
- programs
- 428
- in bounties
- $4,934,915
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.