Bug bounty programs940
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| 8x8 | HackerOne | Pays | 117 | 91 | 9,482 |
| AWS VDP | HackerOne | None | 555 | 61 | 3,037 |
| Opera Public Bug Bounty | Bugcrowd | Pays | 89 | – | 4,997 |
| Twilio | HackerOne | Pays | 83 | – | 4,137 |
| Infomaniak Bug Bounty program | YesWeHack | Pays | 58 | – | 1,462 |
| Atlassian | Bugcrowd | Pays | 50 | – | 77,384 |
| USAA | Bugcrowd | Pays | 49 | – | 1,604 |
| Monash University Bug Bounty | Bugcrowd | Pays | 48 | – | 10,686 |
| Mon Espace Santé (MES) | YesWeHack | Pays | 43 | – | 217 |
| Arlo Cash Rewards | Bugcrowd | Pays | 33 | – | 1,936 |
| ExpressVPN - Bug Bounty Program | YesWeHack | Pays | 31 | – | 697 |
| Just Eat Takeaway.com | Bugcrowd | Pays | 29 | – | 12,018 |
| Crypto.com | HackerOne | Pays | 24 | – | 228 |
| Origin Energy | Bugcrowd | Pays | 23 | – | 517 |
| Keeper Security Public Bounty Program | Bugcrowd | Pays | 22 | – | 184 |
| Mastercard Public Bug Bounty | Bugcrowd | Pays | 21 | – | 575 |
| Binance | Bugcrowd | Pays | 20 | – | 17,109 |
| Lime | Bugcrowd | Pays | 20 | – | 173 |
| Canva | Bugcrowd | Pays | 18 | – | 2,392 |
| SEEK | Bugcrowd | Pays | 18 | – | 7,520 |
| Indeed | Bugcrowd | Pays | 17 | – | 13,909 |
| Aiven Managed Bug Bounty | Bugcrowd | Pays | 16 | – | 69 |
| Optimizely | Bugcrowd | Pays | 15 | – | 14,957 |
| Under Armour Product Security | Bugcrowd | Pays | 14 | – | 1,593 |
| Ibotta | Bugcrowd | Pays | 13 | – | 681 |
| Moneytree KK | Bugcrowd | Pays | 13 | – | 108 |
| Bugcrowd | Pays | 13 | – | 632 | |
| Intercom | Bugcrowd | Pays | 12 | – | 500 |
| Swapcard | YesWeHack | Pays | 12 | – | 933 |
| Upwork | Bugcrowd | Pays | 12 | – | 452 |
| Etsy | Bugcrowd | Pays | 10 | – | 169,749 |
| Skyscanner | Bugcrowd | Pays | 10 | – | 230 |
| SoundCloud | Bugcrowd | Pays | 10 | – | 714 |
| Backblaze | Bugcrowd | Pays | 9 | – | 7,780 |
| CoinDCX Vulnerability Disclosure | HackerOne | None | 9 | – | 112 |
| Nubank Brasil Managed Bug Bounty Program | Bugcrowd | Pays | 9 | – | 294 |
| Bugcrowd | Bugcrowd | Pays | 8 | – | 67 |
| DataDome Bug Bounty | YesWeHack | Pays | 8 | – | 771 |
| ATG Public Bug Bounty Program | YesWeHack | Pays | 7 | – | 386 |
| Bug Bounty Program - BlaBlaCar | YesWeHack | Pays | 6 | – | 356 |
| DataDome Bot Bounty | YesWeHack | Pays | 6 | – | 29 |
| Acorns Grow, Inc. | Bugcrowd | Pays | 5 | – | 909 |
| Cloudinary | Bugcrowd | Pays | 5 | – | 3,888 |
| PlanetHoster Bug Bounty | Bugcrowd | Pays | 5 | – | 17,024 |
| Alasco GmbH - Bug Bounty Program | YesWeHack | Pays | 4 | – | 181 |
| Quizlet | Bugcrowd | Pays | 4 | – | 297 |
| YesWeHack | YesWeHack | Pays | 4 | – | 41 |
| YNAB | Bugcrowd | Pays | 3 | – | 67 |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 301 programs have them so far. Data as of 2026-11-15.