Bug bounty programs942
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| MOD Supply Chain VDP | HackerOne | None | 185 | 1 | – |
| Publitas | HackerOne | None | – | 2 | – |
| Invision Power Services, Inc. | HackerOne | None | – | 2 | – |
| Palantir Public | HackerOne | Pays | 2 | 2 | 9,262 |
| Coalition, Inc. | HackerOne | None | 4 | 2 | 10 |
| 1Password - Enterprise Password Manager | HackerOne | Pays | 4 | 2 | – |
| Chainlink | HackerOne | Pays | 8 | 2 | 420 |
| Yoti | HackerOne | Pays | 9 | 2 | – |
| Insulet Corporation | HackerOne | None | 19 | 2 | 22 |
| ForeScout Technologies | HackerOne | Pays | 63 | 2 | 636 |
| Daimler Truck | HackerOne | None | 272 | 2 | – |
| CoinMate.io | HackerOne | Pays | – | 3 | – |
| R3 | HackerOne | None | 1 | 3 | – |
| PUBG | HackerOne | None | 2 | 3 | 132 |
| UPS VDP | HackerOne | None | 3 | 3 | – |
| Files.com | HackerOne | Pays | 10 | 3 | 3,165 |
| Exodus | HackerOne | Pays | 28 | 3 | 202 |
| Xiaomi | HackerOne | Pays | 66 | 3 | – |
| Sorare | HackerOne | Pays | 3 | 4 | 39 |
| Fastly VDP | HackerOne | None | 6 | 4 | 46 |
| Alohi | HackerOne | None | 10 | 4 | 88 |
| Nutanix | HackerOne | None | 17 | 4 | 4,022 |
| Tools for Humanity | HackerOne | Pays | 22 | 4 | – |
| OPPO | HackerOne | Pays | 133 | 4 | 3,641 |
| Staging.every.org | HackerOne | None | 1 | 5 | 49 |
| OpenMage | HackerOne | None | 3 | 5 | 7 |
| Myndr | HackerOne | None | 3 | 5 | 102 |
| Affirm | HackerOne | Pays | 3 | 5 | – |
| Trellix | HackerOne | None | 6 | 5 | 4,968 |
| Roblox | HackerOne | Pays | 7 | 5 | 2,243 |
| Insightly | HackerOne | Pays | 9 | 5 | – |
| Essity | HackerOne | None | 481 | 5 | – |
| arkadiyt-projects | HackerOne | None | – | 6 | – |
| Coursera | HackerOne | None | 1 | 6 | 308 |
| Top Echelon Software | HackerOne | None | 3 | 6 | 113 |
| Urban Company | HackerOne | Pays | 6 | 6 | 146 |
| FormAssembly | HackerOne | None | 7 | 6 | – |
| MercadoLibre | HackerOne | Pays | 78 | 6 | 385 |
| WHO COVID-19 Mobile App | HackerOne | None | 5 | 7 | – |
| Lovable VDP | HackerOne | None | 5 | 7 | – |
| Tucows (VDP) | HackerOne | None | 11 | 7 | – |
| JetBlue | HackerOne | None | 16 | 7 | 938 |
| Equifax-vdp | HackerOne | None | 283 | 7 | 55,670 |
| Central Security Project | HackerOne | None | 3 | 8 | 36 |
| TomTom | HackerOne | None | 4 | 8 | 40,827 |
| Quora | HackerOne | Pays | 4 | 8 | 51,611 |
| Ping Identity | HackerOne | Pays | 10 | 8 | 1,669 |
| Palo Alto Software | HackerOne | None | 4 | 9 | 2,377 |
| Lyst | HackerOne | Pays | 7 | 9 | 1,598 |
| Evernote | HackerOne | Pays | 9 | 9 | 740 |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.