Bug bounty programs942
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| Nextcloud | HackerOne | Pays | 94 | 613 | 1,642 |
| Slack | HackerOne | Pays | 19 | 133 | 137,429 |
| Acronis | HackerOne | Pays | 21 | 128 | 2,284 |
| Rockstar Games | HackerOne | Pays | 9 | 106 | 496 |
| Ubiquiti Inc. | HackerOne | Pays | 53 | 98 | 65,487 |
| 8x8 | HackerOne | Pays | 117 | 91 | 9,482 |
| Informatica | HackerOne | None | 5 | 68 | 1,177 |
| Basecamp | HackerOne | Pays | 17 | 57 | – |
| GitHub | HackerOne | Pays | 27 | 47 | 56,442 |
| PortSwigger Web Security | HackerOne | Pays | 10 | 40 | 928 |
| Lark Technologies | HackerOne | Pays | 17 | 38 | 1,634 |
| Snapchat | HackerOne | Pays | 40 | 37 | 1,681 |
| Superhuman (formerly Grammarly) | HackerOne | Pays | 29 | 23 | 1,024 |
| Logitech | HackerOne | Pays | 86 | 15 | 7,102 |
| Doppler | HackerOne | Pays | 6 | 12 | – |
| Krisp | HackerOne | Pays | 15 | 11 | – |
| SingleStore | HackerOne | None | 14 | 10 | – |
| Evernote | HackerOne | Pays | 9 | 9 | 740 |
| Central Security Project | HackerOne | None | 3 | 8 | 36 |
| Roblox | HackerOne | Pays | 7 | 5 | 2,243 |
| Exodus | HackerOne | Pays | 28 | 3 | 202 |
| Files.com | HackerOne | Pays | 10 | 3 | 3,165 |
| Epic Games VDP | HackerOne | None | 91 | – | 34,453 |
| Epic Games | HackerOne | Pays | 86 | – | 285,492 |
| Infomaniak Bug Bounty program | YesWeHack | Pays | 58 | – | 1,462 |
| HCL Software Inc. | HackerOne | None | 48 | – | – |
| Spotify | HackerOne | Pays | 45 | – | – |
| Semtech | HackerOne | None | 43 | – | – |
| ExpressVPN - Bug Bounty Program | YesWeHack | Pays | 31 | – | 694 |
| MongoDB | HackerOne | Pays | 30 | – | 7,927 |
| PagerDuty | HackerOne | None | 18 | – | 1,564 |
| Tenable | HackerOne | None | 15 | – | – |
| 3CX | HackerOne | Pays | 14 | – | – |
| Notion Labs, Inc. | HackerOne | Pays | 13 | – | – |
| CyberGhost - Bug Bounty Program | YesWeHack | Pays | 12 | – | – |
| Kiteworks Public Bug Bounty Program | YesWeHack | Pays | 12 | – | – |
| Private Internet Access - Bug Bounty Program | YesWeHack | Pays | 12 | – | – |
| Doctolib | YesWeHack | Pays | 9 | – | 693 |
| TeamViewer - Bounty Program | YesWeHack | Pays | 9 | – | – |
| Cognition | HackerOne | None | 8 | – | – |
| Redis VDP | HackerOne | None | 8 | – | 4,147 |
| Front | HackerOne | Pays | 6 | – | – |
| HYPR | HackerOne | Pays | 6 | – | 223 |
| IMOU Public Bug Bounty Program | YesWeHack | Pays | 6 | – | – |
| The Browser Company of NYC | HackerOne | Pays | 6 | – | – |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.