Skip to content

Intel · bug bounty

Bug bounty programs

Public bug bounty and disclosure programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: whether they pay, what is in scope, their disclosed reports and the subdomains under their domains.

942 of 942 programs · 134 with subdomains so far

Bug bounty programs
ProgramPlatformBountyAssetsReportsSubdomains
U.S. Dept Of DefenseHackerOneHackerOneNo0884–
curlHackerOneHackerOneNo1682–
NextcloudHackerOne · pays · 1,642 subdomainsHackerOneYes946131,642
HackerOneHackerOne · pays · 127 subdomainsHackerOneYes26607127
ShopifyHackerOne · pays · 27,669 subdomainsHackerOneYes2446727,669
GitLabHackerOne · pays · 785 subdomainsHackerOneYes19257785
X / xAIHackerOne · pays · 10,596 subdomainsHackerOneYes2324810,596
UberHackerOne · pays · 11,395 subdomainsHackerOneYes423911,395
AutomatticHackerOne · pays · 277 subdomainsHackerOneYes30166277
WeblateHackerOne · 36 subdomainsHackerOneNo615736
Node.jsHackerOne · paysHackerOneYes1154–
SlackHackerOne · pays · 137,429 subdomainsHackerOneYes19133137,429
MTN GroupHackerOne · 214,283 subdomainsHackerOneNo498128214,283
EternalHackerOne · pays · 60 subdomainsHackerOneYes3412860
AcronisHackerOne · pays · 2,284 subdomainsHackerOneYes211282,284
StarbucksHackerOne · pays · 5,439 subdomainsHackerOneYes101285,439
TikTokHackerOne · pays · 821 subdomainsHackerOneYes35117821
Rockstar GamesHackerOne · pays · 496 subdomainsHackerOneYes9106496
Ubiquiti Inc.HackerOne · pays · 65,487 subdomainsHackerOneYes539865,487
WordPressHackerOne · paysHackerOneYes2396–
8x8HackerOne · pays · 9,482 subdomainsHackerOneYes117919,482
Concrete CMSHackerOneHackerOneNo187–
ValveHackerOne · pays · 790 subdomainsHackerOneYes2182790
MoneroHackerOneHackerOneNo082–
CoinbaseHackerOne · pays · 1,045 subdomainsHackerOneYes16801,045
KubernetesHackerOne · pays · 662 subdomainsHackerOneYes8277662
YelpHackerOne · paysHackerOneYes874–
RubyHackerOne · paysHackerOneYes173–
Ruby on RailsHackerOneHackerOneNo173–
PhabricatorHackerOne · paysHackerOneYes073–
RedditHackerOne · pays · 23,159 subdomainsHackerOneYes277223,159
Stripo IncHackerOne · 108 subdomainsHackerOneNo272108
VimeoHackerOne · pays · 10,008 subdomainsHackerOneYes307110,008
Khan AcademyHackerOne · 382 subdomainsHackerOneNo071382
MarsHackerOne · 3,528 subdomainsHackerOneNo113683,528
InformaticaHackerOne · 1,177 subdomainsHackerOneNo5681,177
WakaTimeHackerOneHackerOneNo163–
AWS VDPHackerOne · 3,036 subdomainsHackerOneNo555613,036
MariaDBHackerOne · 67 subdomainsHackerOneNo56167
Revive AdserverHackerOneHackerOneNo161–
BasecampHackerOne · paysHackerOneYes1757–
SemrushHackerOne · pays · 5,693 subdomainsHackerOneYes14565,693
TorHackerOne · paysHackerOneYes153–
ChaturbateHackerOne · pays · 23,056 subdomainsHackerOneYes95223,056
IBMHackerOne · 104,391 subdomainsHackerOneNo348104,391
GitHubHackerOne · pays · 56,442 subdomainsHackerOneYes274756,442
Cloudflare Public Bug BountyHackerOne · pays · 24,296 subdomainsHackerOneYes514424,296
LinkedInHackerOne · paysHackerOneYes544–
PortSwigger Web SecurityHackerOne · pays · 928 subdomainsHackerOneYes1040928
Lark TechnologiesHackerOne · pays · 1,634 subdomainsHackerOneYes17381,634

Programs and scope from each platform's public listing; subdomains from ProjectDiscovery's public Chaos dataset, still filling. Data as of 2026-11-14.

Updated AboutDevelopersSign in