Bug bounty programs942
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| Nextcloud | HackerOne | Pays | 94 | 613 | 1,642 |
| X / xAI | HackerOne | Pays | 23 | 248 | 10,596 |
| Automattic | HackerOne | Pays | 30 | 166 | 277 |
| Slack | HackerOne | Pays | 19 | 133 | 137,429 |
| Eternal | HackerOne | Pays | 34 | 128 | 60 |
| Acronis | HackerOne | Pays | 21 | 128 | 2,284 |
| Starbucks | HackerOne | Pays | 10 | 128 | 5,439 |
| TikTok | HackerOne | Pays | 35 | 117 | 821 |
| Ubiquiti Inc. | HackerOne | Pays | 53 | 98 | 65,487 |
| 8x8 | HackerOne | Pays | 117 | 91 | 9,482 |
| Valve | HackerOne | Pays | 21 | 82 | 790 |
| Coinbase | HackerOne | Pays | 16 | 80 | 1,045 |
| Yelp | HackerOne | Pays | 8 | 74 | – |
| Vimeo | HackerOne | Pays | 30 | 71 | 10,008 |
| AWS VDP | HackerOne | None | 555 | 61 | 3,036 |
| Basecamp | HackerOne | Pays | 17 | 57 | – |
| HackerOne | Pays | 5 | 44 | – | |
| Lark Technologies | HackerOne | Pays | 17 | 38 | 1,634 |
| Snapchat | HackerOne | Pays | 40 | 37 | 1,681 |
| Bumble | HackerOne | Pays | 50 | 36 | 1,285 |
| Instacart | HackerOne | Pays | 10 | 35 | 1,259 |
| Boozt Fashion AB | HackerOne | Pays | 7 | 28 | 82 |
| Moneybird | HackerOne | Pays | 4 | 27 | 32 |
| Stripe | HackerOne | Pays | 55 | 26 | 1,492 |
| Superhuman (formerly Grammarly) | HackerOne | Pays | 29 | 23 | 1,024 |
| Grab | HackerOne | Pays | 32 | 20 | 22,831 |
| PlayStation | HackerOne | Pays | 24 | 20 | 10,273 |
| Flickr | HackerOne | Pays | 5 | 16 | 255 |
| DuckDuckGo | HackerOne | None | 4 | 16 | 765 |
| Logitech | HackerOne | Pays | 86 | 15 | 7,102 |
| EXNESS | HackerOne | Pays | 14 | 14 | 307 |
| PayPal | HackerOne | Pays | 42 | 13 | 17,146 |
| Enjin | HackerOne | Pays | 6 | 13 | – |
| Bitwarden | HackerOne | None | 21 | 11 | 77 |
| Bykea | HackerOne | Pays | 16 | 11 | – |
| Airbnb | HackerOne | Pays | 27 | 10 | 7,152 |
| Evernote | HackerOne | Pays | 9 | 9 | 740 |
| Lyst | HackerOne | Pays | 7 | 9 | 1,598 |
| Quora | HackerOne | Pays | 4 | 8 | 51,611 |
| WHO COVID-19 Mobile App | HackerOne | None | 5 | 7 | – |
| MercadoLibre | HackerOne | Pays | 78 | 6 | 385 |
| FormAssembly | HackerOne | None | 7 | 6 | – |
| Urban Company | HackerOne | Pays | 6 | 6 | 146 |
| Essity | HackerOne | None | 481 | 5 | – |
| Affirm | HackerOne | Pays | 3 | 5 | – |
| OPPO | HackerOne | Pays | 133 | 4 | 3,641 |
| Tools for Humanity | HackerOne | Pays | 22 | 4 | – |
| Alohi | HackerOne | None | 10 | 4 | 88 |
| Xiaomi | HackerOne | Pays | 66 | 3 | – |
| Exodus | HackerOne | Pays | 28 | 3 | 202 |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.