Bug Bounty Programs
Active bug bounty programs from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Reward ranges come straight from the platform — we never estimate them.
{% if not programs %}
Loading bounty programs...
Click Refresh sources in the top bar to fetch the latest programs from HackerOne, Bugcrowd, Intigriti, and YesWeHack.
{% else %}
{% for p in programs %}
-
{{ p.name }}
{{ p.platform }}
{% if p.pays == 'cash' %}pays cash
{% elif p.pays == 'swag' %}swag only
{% endif %}
{% if p.state and p.state != 'open' %}{{ p.state }}{% endif %}
{% if p.min_bounty or p.max_bounty %}
{%- if p.min_bounty -%}
{{ "{:,}".format(p.min_bounty) }}
{%- endif -%}
{%- if p.min_bounty and p.max_bounty %} — {% endif -%}
{%- if p.max_bounty -%}
{{ "{:,}".format(p.max_bounty) }}
{%- endif -%}
{%- if p.currency %} {{ p.currency }}{% endif -%}
{% if p.response_efficiency_pct is not none and p.response_efficiency_pct > 0 %}
{{ p.response_efficiency_pct }}% response rate
{% endif %}
{% if p.avg_days_to_resolve is not none and p.avg_days_to_resolve > 0 %}
~{{ p.avg_days_to_resolve }} days to resolve
{% endif %}
{% elif p.response_efficiency_pct is not none or p.avg_days_to_resolve is not none %}
{% if p.response_efficiency_pct is not none and p.response_efficiency_pct > 0 %}
{{ p.response_efficiency_pct }}% response rate
{% endif %}
{% if p.avg_days_to_resolve is not none and p.avg_days_to_resolve > 0 %}
~{{ p.avg_days_to_resolve }} days to resolve
{% endif %}
{% endif %}
{% if p.domains %}
{{ p.domains[:3]|join(', ') }}{% if p.domains|length > 3 %} +{{ p.domains|length - 3 }} more{% endif %}
{% endif %}
{% endfor %}
{% endif %}