Bug bounty programs942

Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.

Platform

In scope

Bounty

Bug bounty programs
Program	Platform	Bounty	Assets	Reports	Subdomains
MATLAB Online - Ongoing Bug Bounty Engagement	Bugcrowd	Pays	1	–	–
MAGNIFIC VDP	Intigriti	None	1	–	–
Liverpool Victoria	HackerOne	None	1	–	–
Kiteworks	Bugcrowd	Pays	1	–	–
J-Tricks - Marketplace Bug Bounty Program	Bugcrowd	Pays	1	–	–
Inprowiser Bug Bounty	Bugcrowd	Pays	1	–	–
ING Responsible Disclosure	Intigriti	None	1	–	–
HRS Group VDP	Intigriti	None	1	–	–
Housing Application (huisvestingsapp) Bug Bounty Program	Intigriti	Pays	1	–	–
House of HR Vulnerability Disclosure Program	Intigriti	None	1	–	–
Hotmart (VDP)	HackerOne	None	1	–	–
Hexagon-VDP	HackerOne	None	1	–	–
Gogo VDP	HackerOne	None	1	–	–
Fireblocks MPC Managed Bug Bounty Engagement	Bugcrowd	Pays	1	–	–
FindOut InfoVis AB - Marketplace Bug Bounty Program	Bugcrowd	Pays	1	–	–
FanDuel Response	HackerOne	None	1	–	171
Excentia Bug Bounty	Bugcrowd	Pays	1	–	–
Empower Personal Wealth	Bugcrowd	Pays	1	–	39
e-tracker	Intigriti	None	1	–	–
Dutch Beginners ZZP Marketplace Managed Bug Bounty Engagement	Bugcrowd	Pays	1	–	–
Dropbox Vulnerability Disclosure Program	Intigriti	None	1	–	–
DocuSign	HackerOne	None	1	–	–
Deview Studios Marketplace Managed Bug Bounty Engagement	Bugcrowd	Pays	1	–	–
DefectDojo	HackerOne	None	1	–	–
Cross Border Fines	Intigriti	None	1	–	–
Consensus by CoinDesk	Bugcrowd	Pays	1	–	–
CoinDesk.com	Bugcrowd	Pays	1	–	–
codecentric AG - Marketplace Bug Bounty Program	Bugcrowd	Pays	1	–	–
Clear Street Disclosure Program	HackerOne	None	1	–	–
Citi Group	HackerOne	None	1	–	–
celix Solutions GmbH Marketplace Bug Bounty Program	Bugcrowd	Pays	1	–	–
Bumba	HackerOne	Pays	1	–	–
BMC	Intigriti	None	1	–	–
Blend Labs	HackerOne	Pays	1	–	3,066
Bitdefender Box v2	Bugcrowd	Pays	1	–	–
Best Buy	HackerOne	None	1	–	–
AXIS OS	Bugcrowd	Pays	1	–	–
Axel Springer SE Vulnerability Disclosure Program	Intigriti	None	1	–	–
AT&T	HackerOne	Pays	1	–	227,366
APTIS	Bugcrowd	Pays	1	–	–
Anaconda Vulnerability Disclosure Program	Intigriti	None	1	–	–
Almarise Marketplace Managed Bug Bounty Engagement	Bugcrowd	Pays	1	–	–
Aikido Security: Bug Bounty Program	Intigriti	Pays	1	–	–
agile doyens	Bugcrowd	Pays	1	–	–
Aelbox Marketplace Bug Bounty	Bugcrowd	Pays	1	–	–
Zola Managed Bug Bounty	Bugcrowd	Pays	2	–	–
Wärtsilä Vulnerability Disclosure Program	Intigriti	None	2	–	–
Verisk VDP	HackerOne	None	2	–	–
University of Basel VDP	Intigriti	None	2	–	–
Universitätsspital Zürich VDP	Intigriti	None	2	–	–

Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.