Bug bounty programs942
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| U.S. Department of State | HackerOne | None | 24 | 9 | – |
| Stellar.org | HackerOne | None | – | 10 | – |
| Dust | HackerOne | None | 2 | 10 | – |
| FetLife | HackerOne | Pays | 3 | 10 | 526 |
| SingleStore | HackerOne | None | 14 | 10 | – |
| Airbnb | HackerOne | Pays | 27 | 10 | 7,152 |
| Krisp | HackerOne | Pays | 15 | 11 | – |
| Bykea | HackerOne | Pays | 16 | 11 | – |
| Bitwarden | HackerOne | None | 21 | 11 | 77 |
| Doppler | HackerOne | Pays | 6 | 12 | – |
| Deriv.com | HackerOne | Pays | 18 | 12 | – |
| XVIDEOS | HackerOne | Pays | 5 | 13 | – |
| Enjin | HackerOne | Pays | 6 | 13 | – |
| Greenhouse.io | HackerOne | Pays | 12 | 13 | 792 |
| PayPal | HackerOne | Pays | 42 | 13 | 17,146 |
| Sony | HackerOne | None | 1 | 14 | 13,535 |
| Autodesk | HackerOne | None | 1 | 14 | – |
| lemlist | HackerOne | None | 5 | 14 | 91 |
| EXNESS | HackerOne | Pays | 14 | 14 | 307 |
| pixiv | HackerOne | Pays | 18 | 14 | 117,017 |
| Elastic | HackerOne | Pays | 34 | 14 | 19,856 |
| Logitech | HackerOne | Pays | 86 | 15 | 7,102 |
| OWOX, Inc. | HackerOne | None | – | 16 | – |
| DuckDuckGo | HackerOne | None | 4 | 16 | 765 |
| Flickr | HackerOne | Pays | 5 | 16 | 255 |
| Vercel | HackerOne | Pays | 26 | 16 | 1,259 |
| inDrive | HackerOne | Pays | 174 | 16 | 2,406 |
| General Motors | HackerOne | None | – | 18 | – |
| Judge.me | HackerOne | Pays | 6 | 18 | – |
| Nintendo | HackerOne | Pays | 7 | 19 | – |
| PlayStation | HackerOne | Pays | 24 | 20 | 10,273 |
| Grab | HackerOne | Pays | 32 | 20 | 22,831 |
| Discourse | HackerOne | Pays | 2 | 21 | – |
| CS Money | HackerOne | Pays | 5 | 23 | – |
| Superhuman (formerly Grammarly) | HackerOne | Pays | 29 | 23 | 1,024 |
| Stripe | HackerOne | Pays | 55 | 26 | 1,492 |
| Moneybird | HackerOne | Pays | 4 | 27 | 32 |
| Boozt Fashion AB | HackerOne | Pays | 7 | 28 | 82 |
| Instacart | HackerOne | Pays | 10 | 35 | 1,259 |
| Bumble | HackerOne | Pays | 50 | 36 | 1,285 |
| Udemy | HackerOne | Pays | 2 | 37 | 22,200 |
| Snapchat | HackerOne | Pays | 40 | 37 | 1,681 |
| Lark Technologies | HackerOne | Pays | 17 | 38 | 1,634 |
| PortSwigger Web Security | HackerOne | Pays | 10 | 40 | 928 |
| HackerOne | Pays | 5 | 44 | – | |
| Cloudflare Public Bug Bounty | HackerOne | Pays | 51 | 44 | 24,296 |
| GitHub | HackerOne | Pays | 27 | 47 | 56,442 |
| IBM | HackerOne | None | 3 | 48 | 104,391 |
| Chaturbate | HackerOne | Pays | 9 | 52 | 23,056 |
| Tor | HackerOne | Pays | 1 | 53 | – |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.