Skip to content

Bug bounty programs942

Public programs on HackerOne, Bugcrowd, Intigriti and YesWeHack: scope, disclosed reports and subdomains.

Platform
In scope
Has reports160
Bounty
Has subdomains299942 programs
Bug bounty programs
ProgramPlatformBountyAssetsReportsSubdomains
PhonePeHackerOneNone13––
PinterestBugcrowdPays13–632
SBB - Swiss Federal RailwaysIntigritiPays13–6,784
TrelloBugcrowdPays13–14,543
Veriff Bug BountyIntigritiPays13––
ViaHackerOnePays13––
WickrHackerOnePays13–54
Bose (VDP)HackerOneNone12––
Box BBHackerOnePays12––
Capital.comIntigritiPays12––
Cisco NetworkingBugcrowdPays12––
CyberGhost - Bug Bounty ProgramYesWeHackPays12––
Entain Public Managed Bug Bounty Engagement 2024BugcrowdPays12––
Faraday, Inc.HackerOnePays12––
GetYourGuide VDPHackerOneNone12––
IntercomBugcrowdPays12–500
iRobotBugcrowdPays12––
Kiteworks Public Bug Bounty ProgramYesWeHackPays12––
MeeshoHackerOnePays12––
MGM China Holdings Limited Managed Bug Bounty ProgramBugcrowdPays12––
Paddle.com Public Bug Bounty ProgramYesWeHackPays12––
PlaidHackerOnePays12–307
Private Internet Access - Bug Bounty ProgramYesWeHackPays12––
Privy (Bounty)HackerOnePays12––
Starling Bank VDPHackerOneNone12–48
SwapcardYesWeHackPays12–933
UpworkBugcrowdPays12–452
WoltHackerOnePays12––
55 DegreesBugcrowdPays11––
Bitpanda Ongoing Bug BountyBugcrowdPays11––
Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026BugcrowdPays11––
Grafana Labs - Vulnerability Disclosure Program (VDP)IntigritiNone11––
Hack The BoxHackerOneNone11––
InspectorioHackerOnePays11––
KOHOHackerOnePays11–162
Lansweeper Bug Bounty ProgramIntigritiPays11––
M&T Bank Vulnerability DisclosureHackerOneNone11––
MatomoHackerOnePays11–2,014
Move Work ForwardBugcrowdPays11––
NISC-VDPHackerOneNone11––
NVIDIA Public Bug BountyIntigritiPays11––
OakNorth BankHackerOneNone11––
OpenSea Managed Bug Bounty ProgramBugcrowdPays11–78
Penn EntertainmentHackerOneNone11––
TeslaBugcrowdPays11–11,675
TrendyolHackerOnePays11–333
TrueLayer VDPIntigritiNone11––
VendastaHackerOneNone11––
Verisign Bug BountyBugcrowdPays11––
ViatorBugcrowdPays11–663

Programs and scope from each platform's public listing. Subdomains from ProjectDiscovery's Chaos dataset, still filling: 299 programs have them so far. Data as of 2026-11-14.

Updated AboutDevelopersSign in