Bug bounty programs940
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| Oasis Protocol Foundation | HackerOne | Pays | 13 | – | – |
| Plaid | HackerOne | Pays | 12 | – | 307 |
| Privy (Bounty) | HackerOne | Pays | 12 | – | – |
| Matomo | HackerOne | Pays | 11 | – | 2,014 |
| DailyPay VDP | HackerOne | None | 10 | – | – |
| OKG | HackerOne | Pays | 10 | – | 237 |
| Chia Network | HackerOne | Pays | 9 | – | – |
| Redis VDP | HackerOne | None | 8 | – | 4,147 |
| Supabase | HackerOne | None | 8 | – | – |
| Airtable | HackerOne | Pays | 7 | – | 611 |
| Arc | HackerOne | Pays | 6 | – | – |
| Solidus | HackerOne | None | 2 | – | – |
| DefectDojo | HackerOne | None | 1 | – | – |
| Omarchy | HackerOne | Pays | 1 | – | – |
| TRON DAO | HackerOne | Pays | 1 | – | – |
| Version Cake | HackerOne | None | 1 | – | – |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 301 programs have them so far. Data as of 2026-11-15.