the unofficial HackerOne disclosure timeline.

Check out the new Program-Rule-Archive!
This page shows a list of all HackerOne programs, the minimum bounty and the number of publicly disclosed bugs.
You can filter the programs for "paid" and "not paid" ones by clicking the checkboxes.
You can click on any of the names to open a link to the related program page on HackerOne
paid not paid
ProgramMinimum BountyBugs closed
Starling Bank Limitednot paid0
Central Security Projectnot paid0
50m-ctfnot paid0
FileZilla (European Commission - DIGIT)not paid0
VLC (European Commission - DIGIT)not paid3
Apache Kafka (European Commission - DIGIT)not paid0
PuTTY (European Commission - DIGIT)not paid15
Fordnot paid950
Hyatt Hotelsnot paid100
CFP Timenot paid11
RATELIMITEDnot paid164
Avitonot paid57
Hanno's projectsnot paid11
Vivynot paid0
PayPalnot paid369
ESLintnot paid1
IBMnot paid828
Alibabanot paid96
DuckDuckGonot paid28
MariaDBnot paid11
Shiptnot paid74
Rocket.Chatnot paid35
MediaMarktSaturnnot paid65
arkadiyt-projectsnot paid0
Tezosnot paid3
Impinjnot paid8
Passitnot paid19
Tendermintnot paid
Goldman Sachs VDPnot paid22
JamieWebnot paid
Loofahnot paid2
Nokogirinot paid2
MyCryptonot paid16
Sonynot paid488
Vendnot paid101
Toyotanot paid
passhashnot paid0
Intel Corporationnot paid
Crowdstrikenot paid
Node.js third-party modulesnot paid154
RBKmoneynot paid
JohnBlackbournnot paid0
Ednot paid8
AlienVault not paid76
Google Play Security Reward Programnot paid91
Infogramnot paid248
Inflectionnot paid84
Razer USnot paid147
Aspennot paid2
Bitwardennot paid19
Moneronot paid21
delight.imnot paid14
WakaTimenot paid192
Stellar.orgnot paid18
Parrot Secnot paid
Cuvvanot paid12 e.U.not paid60
Teradicinot paid15
Weblatenot paid123
Homebrewnot paid11
WordPressnot paid
FormAssemblynot paid179
U.S. Dept Of Defensenot paid
OWOX, Inc.not paid64
shopify-scriptsnot paid342
Yelpnot paid240
Instacartnot paid195
Kaspersky Labnot paid133
PowerDNSnot paid22
GoCDnot paid39
OLXnot paid291
Dovecotnot paid9
Moneybirdnot paid104
Paragon Initiative Enterprisesnot paid17
GitLabnot paid277
Zomatonot paid
General Motorsnot paid
GlobaLeaksnot paid9
CodeIgniternot paid16
Maximumnot paid195
Revive Adservernot paid27
Imgurnot paid155
Courseranot paid115
Adobenot paid1914
Airbnbnot paid499
Informaticanot paid320
ExpressionEnginenot paid149
Urban Dictionarynot paid86
Ian Dunnnot paid15
Cloudflarenot paid151
Automatticnot paid
Khan Academynot paid139
concrete5not paid230
InnoGamesnot paid4
Notepad++ (European Commission - DIGIT)not paid25
Smulenot paid35
h1-5411-CTFnot paid10
Fignot paid22
Y Combinatornot paid11
Shopeenot paid0
Coalition, Inc.not paid6
Deconfnot paid2
Big Monoclenot paid9
Frans Visits Vegasnot paid
Alvosecnot paid
Pushwooshnot paid75
FantasyTotenot paid32
bitaccessnot paid29
APITest.IOnot paid131
Verisnot paid154
Xeronot paid144
Cakebetnot paid15
KIWI.KI GmbHnot paid26
vulners.comnot paid18
Version Cakenot paid1
Zaptionnot paid58
LibSassnot paid27
MapLoginnot paid22
Certlynot paid27
Mobile Vikingsnot paid74
ThisDatanot paid17
DigitalSellznot paid29
jsDelivrnot paid10
FanFootagenot paid36
Mavenlinknot paid199
Kadiranot paid35
StopTheHackernot paid54
C2FOnot paid47
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!