Bug bounty programs942
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| Optus Managed Bug Bounty | Bugcrowd | Pays | 168 | – | – |
| T-Mobile | Bugcrowd | Pays | 76 | – | – |
| REA Group | realestate.com.au, realcommercial.com.au, property.com.au | Bugcrowd | Pays | 30 | – | – |
| HPE Networking Product Public Program | Bugcrowd | Pays | 20 | – | – |
| Sophos | Bugcrowd | Pays | 18 | – | 32,677 |
| Vinted Bug Bounty | Bugcrowd | Pays | 16 | – | – |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.