Bug bounty programs940
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| Ford | HackerOne | None | 27 | 1 | 70,322 |
| Insulet Corporation | HackerOne | None | 19 | 2 | 22 |
| ForeScout Technologies | HackerOne | Pays | 63 | 2 | 636 |
| Xiaomi | HackerOne | Pays | 66 | 3 | – |
| OPPO | HackerOne | Pays | 133 | 4 | 3,641 |
| MercadoLibre | HackerOne | Pays | 78 | 6 | 385 |
| Logitech | HackerOne | Pays | 86 | 15 | 7,102 |
| Nintendo | HackerOne | Pays | 7 | 19 | – |
| PlayStation | HackerOne | Pays | 24 | 20 | 10,273 |
| GitHub | HackerOne | Pays | 27 | 47 | 56,442 |
| Ubiquiti Inc. | HackerOne | Pays | 53 | 98 | 65,627 |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 301 programs have them so far. Data as of 2026-11-15.