Bug bounty programs942

Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.

Platform

In scope

Bounty

Bug bounty programs
Program	Platform	Bounty	Assets	Reports	Subdomains
GoodRx	HackerOne	Pays	3	–	30,020
Hex	HackerOne	None	3	–	–
Hy-Vee	HackerOne	None	3	–	218
KU Leuven Vulnerability Disclosure Program (VDP)	Intigriti	None	3	–	–
Lightspeed Hospitality	Bugcrowd	Pays	3	–	–
LPL Financial VDP	HackerOne	None	3	–	–
Magic Labs Managed Bug Bounty Engagement	Bugcrowd	Pays	3	–	–
Merck & Co., Inc., Rahway, NJ, USA	HackerOne	None	3	–	–
MyFitnessPal Managed Bug Bounty	Bugcrowd	Pays	3	–	219
NetScaler Public Program	HackerOne	Pays	3	–	–
Nexuzhealth Web PACS	Intigriti	Pays	3	–	–
Nominet	HackerOne	None	3	–	8,163
NxtPort VDP	Intigriti	None	3	–	–
Octopus	Bugcrowd	Pays	3	–	213
Omnicell	HackerOne	None	3	–	–
Onward Software Solutions Inc. - Marketplace Bug Bounty Program	Bugcrowd	Pays	3	–	–
Orderly Network Public Managed Bug Bounty Engagement	Bugcrowd	Pays	3	–	–
Orderly Network: Bug Bounty Program	Bugcrowd	Pays	3	–	–
OVHcloud	YesWeHack	Pays	3	–	76,527
Proof.com VDP	Intigriti	None	3	–	–
Qualified Responsible Disclosure Program	Intigriti	None	3	–	–
Render	HackerOne	None	3	–	–
Savignano Software Solutions Marketplace Bug Bounty Program	Bugcrowd	Pays	3	–	–
SecureDrop	Bugcrowd	Pays	3	–	–
ServiceNow Disclosure	HackerOne	None	3	–	–
Smart Guess ehf. - Marketplace Bug Bounty Program	Bugcrowd	Pays	3	–	–
Sogexia	YesWeHack	Pays	3	–	–
Spacelift VDP	Intigriti	None	3	–	35
STAGIL Marketplace Bug Bounty	Bugcrowd	Pays	3	–	–
Starbucks China	HackerOne	Pays	3	–	–
Tweakers	Intigriti	Pays	3	–	1,569
Water-Link VDP	Intigriti	None	3	–	–
Worldpay	HackerOne	None	3	–	–
YNAB	Bugcrowd	Pays	3	–	67
Accxia Marketplace Bug Bounty	Bugcrowd	Pays	2	–	–
ALSCO	HackerOne	Pays	2	–	–
Arm	Intigriti	Pays	2	–	–
Baird	HackerOne	None	2	–	–
Bullish Exchange	Bugcrowd	Pays	2	–	–
Bullish.com	Bugcrowd	Pays	2	–	106
Cappsule Sarl - Marketplace Bug Bounty Program	Bugcrowd	Pays	2	–	–
Certinia (formerly FinancialForce)	Bugcrowd	Pays	2	–	–
City of Los Angeles	HackerOne	None	2	–	1,448
CodeAI	Bugcrowd	None	2	–	–
CoinDesk Data - Data API	Bugcrowd	Pays	2	–	–
CoinDesk Mobile	Bugcrowd	Pays	2	–	–
Dell Technologies' Products Bug Bounty Program	Bugcrowd	Pays	2	–	–
Discover VDP	HackerOne	None	2	–	–
Driessen Vulnerability Disclosure Program	Intigriti	None	2	–	–
Electroneum Legacy Blockchain: EOL	Bugcrowd	Pays	2	–	–

Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.