the unofficial HackerOne disclosure timeline.

Check out the new Program-Rule-Archive!
This page shows a list of all HackerOne programs, the minimum bounty and the number of publicly disclosed bugs.
You can filter the programs for "paid" and "not paid" ones by clicking the checkboxes.
You can click on any of the names to open a link to the related program page on HackerOne
paid not paid
ProgramMinimum BountyBugs closed
Kartpaynot paid27
Upgradenot paid2
Solidusnot paid4
UiPathnot paid2
Shieldox Security LTDnot paid8
Trint Ltdnot paid27
ecobeenot paid13
Notepad++not paid29
DefectDojonot paid1
phpBBnot paid8
ZEITnot paid32
TomTomnot paid34
Sweatco Ltdnot paid2
Xilinxnot paid7
Python Cryptographic Authoritynot paid3
Capital Onenot paid23
Backblazenot paid88
Starling Bank Limitednot paid14
Central Security Projectnot paid0
FileZilla (European Commission - DIGIT)not paid1
Fordnot paid1099
Hyatt Hotelsnot paid147
CFP Timenot paid11
RATELIMITEDnot paid169
Avitonot paid59
Hanno's projectsnot paid12
Vivynot paid0
PayPalnot paid481
ESLintnot paid2
IBMnot paid1111
Alibabanot paid173
DuckDuckGonot paid31
MariaDBnot paid13
Shiptnot paid86
Rocket.Chatnot paid46
MediaMarktSaturnnot paid78
arkadiyt-projectsnot paid0
Impinjnot paid11
Passitnot paid21
Tendermintnot paid
Goldman Sachsnot paid23
JamieWebnot paid
Loofahnot paid2
Nokogirinot paid2
MyCryptonot paid18
Sonynot paid678
Vendnot paid104
Toyotanot paid
passhashnot paid0
Intel Corporationnot paid
Crowdstrikenot paid
Node.js third-party modulesnot paid169
RBKmoneynot paid
JohnBlackbournnot paid0
Ednot paid10
AlienVault not paid76
Google Play Security Reward Programnot paid115
Infogramnot paid253
Razer USnot paid163
Aspennot paid2
Bitwardennot paid20
Moneronot paid28
delight.imnot paid14
WakaTimenot paid193
Stellar.orgnot paid21
Parrot Secnot paid
Cuvvanot paid15
Teradicinot paid16
Weblatenot paid125
Homebrewnot paid14
WordPressnot paid
FormAssemblynot paid181
U.S. Dept Of Defensenot paid
OWOX, Inc.not paid64
Yelpnot paid248
Instacartnot paid196
Kasperskynot paid152
PowerDNSnot paid26
GoCDnot paid39
OLXnot paid308
Dovecotnot paid9
Moneybirdnot paid104
Paragon Initiative Enterprisesnot paid17
GitLabnot paid355
General Motorsnot paid
GlobaLeaksnot paid9
CodeIgniternot paid16
Maximumnot paid200
Revive Adservernot paid28
Imgurnot paid156
Courseranot paid116
Adobenot paid1956
Airbnbnot paid519
Informaticanot paid330
ExpressionEnginenot paid150
Urban Dictionarynot paid87
Ian Dunnnot paid15
Cloudflare Vulnerability Disclosurenot paid149
Automatticnot paid
Khan Academynot paid144
concrete5not paid230
50m-ctfnot paid13
VLC (European Commission - DIGIT)not paid41
Apache Kafka (European Commission - DIGIT)not paid
PuTTY (European Commission - DIGIT)not paid27
Notepad++ (European Commission - DIGIT)not paid0
Smulenot paid48
h1-5411-CTFnot paid10
Fignot paid22
Y Combinatornot paid11
Coalition, Inc.not paid7
Deconfnot paid2
Big Monoclenot paid9
Frans Visits Vegasnot paid e.U.not paid60
Alvosecnot paid
Pushwooshnot paid75
shopify-scriptsnot paid353
FantasyTotenot paid32
bitaccessnot paid29
APITest.IOnot paid131
Verisnot paid154
Xeronot paid144
Cakebetnot paid15
KIWI.KI GmbHnot paid26
vulners.comnot paid18
Version Cakenot paid1
Zaptionnot paid58
LibSassnot paid27
MapLoginnot paid22
Certlynot paid27
Mobile Vikingsnot paid74
ThisDatanot paid17
DigitalSellznot paid29
jsDelivrnot paid10
FanFootagenot paid36
Mavenlinknot paid199
Kadiranot paid35
StopTheHackernot paid54
C2FOnot paid47
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!