Bug bounty programs942
Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.
| Program | Platform | Bounty | Assets | Reports | Subdomains |
|---|---|---|---|---|---|
| Afterpay Bug Bounty Program | Bugcrowd | Pays | 16 | – | – |
| Aiven Managed Bug Bounty | Bugcrowd | Pays | 16 | – | 69 |
| Anywhere Real Estate | HackerOne | None | 16 | – | 10,235 |
| ClassDojo | Bugcrowd | Pays | 16 | – | – |
| codefortynine | Bugcrowd | Pays | 16 | – | – |
| DevSamurai | Bugcrowd | Pays | 16 | – | – |
| Exact Vulnerability Disclosure Program | Intigriti | None | 16 | – | – |
| Freshworks | HackerOne | Pays | 16 | – | 143,400 |
| Mattermost Public Bug Bounty Engagement | Bugcrowd | Pays | 16 | – | – |
| Regions Financial | HackerOne | None | 16 | – | – |
| StonikByte | Bugcrowd | Pays | 16 | – | – |
| Trip.com | HackerOne | Pays | 16 | – | – |
| Vinted Bug Bounty | Bugcrowd | Pays | 16 | – | – |
| Akeles Marketplace Bug Bounty | Bugcrowd | Pays | 15 | – | – |
| EPAM Systems Managed Bug Bounty Program | Bugcrowd | Pays | 15 | – | 8,351 |
| Glassdoor Managed Bug Bounty Engagement | Bugcrowd | Pays | 15 | – | – |
| HubSpot | HackerOne | Pays | 15 | – | 142,890 |
| MobilityStream Bug Bounty | Bugcrowd | Pays | 15 | – | – |
| Optimizely | Bugcrowd | Pays | 15 | – | 14,954 |
| Rec Room Video Games | Bugcrowd | Pays | 15 | – | – |
| Tenable | HackerOne | None | 15 | – | – |
| Toast VDP | Intigriti | None | 15 | – | – |
| WP Engine VDP | Intigriti | None | 15 | – | – |
| 1win | HackerOne | Pays | 14 | – | – |
| 3CX | HackerOne | Pays | 14 | – | – |
| Anthropic | HackerOne | Pays | 14 | – | – |
| Avalara | HackerOne | None | 14 | – | 3,936 |
| Bybit Fintech Ltd | HackerOne | Pays | 14 | – | – |
| Costco | HackerOne | None | 14 | – | 2,511 |
| Credit Karma | HackerOne | Pays | 14 | – | 1,196 |
| Hyland Software | HackerOne | None | 14 | – | – |
| LastPass | Bugcrowd | Pays | 14 | – | 1,081 |
| Paystack Vulnerability Disclosure | HackerOne | None | 14 | – | – |
| Stiltsoft | Bugcrowd | Pays | 14 | – | – |
| Truist Financial | HackerOne | None | 14 | – | – |
| Under Armour Product Security | Bugcrowd | Pays | 14 | – | 1,593 |
| Wells Fargo Bounty | HackerOne | Pays | 14 | – | 15,817 |
| XP Inc Vulnerability Disclosure | HackerOne | None | 14 | – | – |
| Aeromexico VDP | HackerOne | None | 13 | – | – |
| Cvent Bug Bounty | Bugcrowd | Pays | 13 | – | – |
| Ezviz - Bug Bounty Program | YesWeHack | Pays | 13 | – | 201 |
| Ibotta | Bugcrowd | Pays | 13 | – | 681 |
| KHealth | HackerOne | Pays | 13 | – | – |
| lululemon | Bugcrowd | Pays | 13 | – | 1,116 |
| Majid Al Futtaim Lifestyle | Bugcrowd | Pays | 13 | – | – |
| Moneytree KK | Bugcrowd | Pays | 13 | – | 108 |
| New Relic Public Bug Bounty Program | Bugcrowd | Pays | 13 | – | 847 |
| Notion Labs, Inc. | HackerOne | Pays | 13 | – | – |
| Oasis Protocol Foundation | HackerOne | Pays | 13 | – | – |
| OpenAI | Bugcrowd | Pays | 13 | – | – |
Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.