Bug bounty programs942

Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.

Platform

In scope

Bounty

Bug bounty programs
Program	Platform	Bounty	Assets	Reports	Subdomains
Certinia (formerly FinancialForce)	Bugcrowd	Pays	2	–	–
Cappsule Sarl - Marketplace Bug Bounty Program	Bugcrowd	Pays	2	–	–
Bullish.com	Bugcrowd	Pays	2	–	106
Bullish Exchange	Bugcrowd	Pays	2	–	–
Baird	HackerOne	None	2	–	–
Arm	Intigriti	Pays	2	–	–
ALSCO	HackerOne	Pays	2	–	–
Accxia Marketplace Bug Bounty	Bugcrowd	Pays	2	–	–
YNAB	Bugcrowd	Pays	3	–	67
Worldpay	HackerOne	None	3	–	–
Water-Link VDP	Intigriti	None	3	–	–
Tweakers	Intigriti	Pays	3	–	1,569
Starbucks China	HackerOne	Pays	3	–	–
STAGIL Marketplace Bug Bounty	Bugcrowd	Pays	3	–	–
Spacelift VDP	Intigriti	None	3	–	35
Sogexia	YesWeHack	Pays	3	–	–
Smart Guess ehf. - Marketplace Bug Bounty Program	Bugcrowd	Pays	3	–	–
ServiceNow Disclosure	HackerOne	None	3	–	–
SecureDrop	Bugcrowd	Pays	3	–	–
Savignano Software Solutions Marketplace Bug Bounty Program	Bugcrowd	Pays	3	–	–
Render	HackerOne	None	3	–	–
Qualified Responsible Disclosure Program	Intigriti	None	3	–	–
Proof.com VDP	Intigriti	None	3	–	–
OVHcloud	YesWeHack	Pays	3	–	76,527
Orderly Network: Bug Bounty Program	Bugcrowd	Pays	3	–	–
Orderly Network Public Managed Bug Bounty Engagement	Bugcrowd	Pays	3	–	–
Onward Software Solutions Inc. - Marketplace Bug Bounty Program	Bugcrowd	Pays	3	–	–
Omnicell	HackerOne	None	3	–	–
Octopus	Bugcrowd	Pays	3	–	213
NxtPort VDP	Intigriti	None	3	–	–
Nominet	HackerOne	None	3	–	8,163
Nexuzhealth Web PACS	Intigriti	Pays	3	–	–
NetScaler Public Program	HackerOne	Pays	3	–	–
MyFitnessPal Managed Bug Bounty	Bugcrowd	Pays	3	–	219
Merck & Co., Inc., Rahway, NJ, USA	HackerOne	None	3	–	–
Magic Labs Managed Bug Bounty Engagement	Bugcrowd	Pays	3	–	–
LPL Financial VDP	HackerOne	None	3	–	–
Lightspeed Hospitality	Bugcrowd	Pays	3	–	–
KU Leuven Vulnerability Disclosure Program (VDP)	Intigriti	None	3	–	–
Hy-Vee	HackerOne	None	3	–	218
Hex	HackerOne	None	3	–	–
GoodRx	HackerOne	Pays	3	–	30,020
Gmelius	HackerOne	None	3	–	44
Fluvius	Intigriti	Pays	3	–	–
Fireblocks Web Managed Bug Bounty Engagement	Bugcrowd	Pays	3	–	–
eMoney Advisor	HackerOne	None	3	–	–
Electroneum Smart Chain (ETN-SC) — EVM-Compatible Blockchain	Bugcrowd	Pays	3	–	–
Easy Agile	Bugcrowd	Pays	3	–	–
DPG Media	Intigriti	Pays	3	–	232
DoorDash	HackerOne	Pays	3	–	–

Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.