Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
Reports Programs Subdomains Bug bounty programs Program Platform Bounty Assets Reports Subdomains UO University of Basel VDP Intigriti None 2 – – KL KU Leuven Vulnerability Disclosure Program (VDP) Intigriti None 3 – – AV ADAC Vulnerability Disclosure Program Intigriti None 4 – – VB Vlerick Business School Intigriti None 5 – – BG Bühler Group VDP Intigriti None 9 – – RN RIPE NCC Intigriti Pays 10 – – VB Vinted Bug Bounty Bugcrowd Pays 16 – – SO Sophos Bugcrowd Pays 18 – 32,677 AP APNIC HackerOne None 18 – – KE KeyBank HackerOne None 19 – 3,218 DI DigitalOcean Intigriti Pays 19 – 61,391 HN HPE Networking Product Public Program Bugcrowd Pays 20 – – HI Hilton HackerOne Pays 24 – 3,956 RG REA Group | realestate.com.au, realcommercial.com.au, property.com.au Bugcrowd Pays 30 – – QR QinetiQ Response HackerOne None 30 – – FV Finnair Vulnerability Disclosure HackerOne None 41 – – AS Axel Springer National Media & Tech Intigriti Pays 41 – – PO Port of Antwerp-Bruges Intigriti Pays 49 – 149 SG SIX Group HackerOne Pays 57 – – FT Fifth Third Bank VDP HackerOne None 73 – – TM T-Mobile Bugcrowd Pays 76 – – CR Citymesh Responsible Vulnerability Disclosure Program Intigriti None 82 – – TL TransUnion LLC HackerOne None 154 – – OM Optus Managed Bug Bounty Bugcrowd Pays 168 – – PV PepsiCo VDP HackerOne None 227 – – AO Aon HackerOne None 257 – – DV DIB-VDP HackerOne None 1,094 – 808 CB CBRE HackerOne None 8,688 – 5,955 BL BlackRock HackerOne None 4 1 – HH Hyatt Hotels HackerOne Pays 59 1 3,607 MS MOD Supply Chain VDP HackerOne None 185 1 – FT ForeScout Technologies HackerOne Pays 63 2 636 CO Coinbase HackerOne Pays 16 80 1,045 MG MTN Group HackerOne None 498 128 214,285
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 301 programs have them so far. Data as of 2026-11-15.