Bug bounty programs942

Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.

Platform

In scope

Bounty

Bug bounty programs
Program	Platform	Bounty	Assets	Reports	Subdomains
Ring	HackerOne	Pays	30	–	–
Salto Vulnerability Disclosure	Intigriti	None	30	–	–
Just Eat Takeaway.com	Bugcrowd	Pays	29	–	12,018
Uniti	HackerOne	None	29	–	–
Alibaba VDP	HackerOne	None	28	–	934,449
Resolution	Bugcrowd	Pays	28	–	–
Superdrug	Intigriti	Pays	28	–	–
Toyota	HackerOne	None	28	–	39
Capital One	HackerOne	None	27	–	6,848
Inter & Co. VDP	HackerOne	None	27	–	–
Majid Al Futtaim Customer Solutions	Bugcrowd	Pays	27	–	–
PRISM	HackerOne	None	27	–	–
Tripadvisor	Bugcrowd	Pays	27	–	–
Auth0 by Okta	Bugcrowd	Pays	26	–	–
Cognizant	HackerOne	None	26	–	–
Dropbox Bug Bounty	Intigriti	Pays	26	–	6,937
Latitude Financial Services Bug Bounty	Bugcrowd	Pays	26	–	–
Superbet	HackerOne	Pays	26	–	219
VFS Global Bug Bounty Program	YesWeHack	Pays	26	–	437
Xfinity Home & xFi	Bugcrowd	Pays	26	–	–
City of Vienna Managed Bug Bounty	Bugcrowd	Pays	25	–	–
Harman International Lifestyle Products & Services	YesWeHack	Pays	25	–	–
Live Nation	HackerOne	Pays	25	–	–
Majid Al Futtaim Properties	Bugcrowd	Pays	25	–	–
Robinhood Markets Bounty	HackerOne	Pays	25	–	1,679
SAP Invitational Bug Bounty Program	Bugcrowd	Pays	25	–	–
AI \| Apps+ Marketplace Bug Bounty Program	Bugcrowd	Pays	24	–	–
Crypto.com	HackerOne	Pays	24	–	228
Hilton	HackerOne	Pays	24	–	3,956
Internet Brands Public	Bugcrowd	Pays	24	–	–
Ripio	HackerOne	Pays	24	–	–
Scopely	HackerOne	Pays	24	–	3,664
SimpliSafe Managed Bug Bounty Engagement	Bugcrowd	Pays	24	–	–
Telenor Sweden Public Bug Bounty Program	YesWeHack	Pays	24	–	–
Tesco	HackerOne	None	24	–	–
weweave GmbH Marketplace Bug Bounty	Bugcrowd	Pays	24	–	–
Mendix	HackerOne	None	23	–	1,056
Mintel	HackerOne	None	23	–	–
Origin Energy	Bugcrowd	Pays	23	–	517
Under Armour Corporate	Bugcrowd	Pays	23	–	–
Circle	HackerOne	Pays	22	–	305
K15t	Bugcrowd	Pays	22	–	–
Keeper Security Public Bounty Program	Bugcrowd	Pays	22	–	184
Lightspark Public Bug Bounty	Intigriti	Pays	22	–	–
Pine Labs Bug Bounty Program	YesWeHack	Pays	22	–	–
Tomorrowland	Intigriti	Pays	22	–	–
Treasury Board of Canada Secretariat/Secrétariat du Conseil du Trésor du Canada	HackerOne	None	22	–	–
ABN AMRO Bank VDP	HackerOne	None	21	–	–
Binance	Bugcrowd	Pays	21	–	17,109
Corebridge Financial	HackerOne	None	21	–	–

Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.