the unofficial HackerOne disclosure timeline.

Check out the new Program-Rule-Archive!
This page shows a list of all HackerOne programs, the minimum bounty and the number of publicly disclosed bugs.
You can filter the programs for "paid" and "not paid" ones by clicking the checkboxes.
You can click on any of the names to open a link to the related program page on HackerOne
paid not paid
ProgramMinimum BountyBugs closed
Recreation.govnot paid
Dustnot paid
Hertz VDPnot paid
Penn Entertainmentnot paid
Ferreronot paid
Hexnot paid
Worldpaynot paid
Lichessnot paid
Experiannot paid
NerdWallet (VDP)not paid
Kraken Technot paid
VF Corporation - VDPnot paid
Corebridge Financialnot paid
Hemi VDPnot paid
Fiservnot paid
Zurich Insurancenot paid
Autodesknot paid
BILL VDPnot paid
is*hostingnot paid
Mintelnot paid
TomTomnot paid
Itaú Unibanconot paid
Liverpool Victorianot paid
Finnair Vulnerability Disclosurenot paid
PepsiCo VDPnot paid
LPL Financial VDPnot paid
MacTaggart Scottnot paid
AWS VDPnot paid
ION Groupnot paid
Supabasenot paid
Ivanti (VDP)not paid
Anthropic (VDP)not paid
Pelotonnot paid
PagerDutynot paid
Prudential Financialnot paid
Oportunnot paid
Moovnot paid
6sense VDPnot paid
ProductBoard, Inc.not paid
Rendernot paid
DIB-VDPnot paid
Esteé Laudernot paid
Aeromexico VDPnot paid
TransUnion LLCnot paid
Ionity GmbHnot paid
Aonnot paid
Lowe's Companies VDPnot paid
REI VDPnot paid
Inter & Co. VDPnot paid
Vendastanot paid
International Airlines Groupnot paid
Publitasnot paid
OakNorth Banknot paid
WellHivenot paid
Egress Software Technologiesnot paid
Navient Solutions LLCnot paid
CBREnot paid
Blue Apron (Wonder Group) VDPnot paid
Particle Health VDPnot paid
Brightspeednot paid
Alshayanot paid
Kahootznot paid
ABN AMRO Bank VDPnot paid
Fertitta Entertainmentnot paid
AboitizPowernot paid
Greenflynot paid
Aven (Response)not paid
ServiceNow Disclosurenot paid
Eurofinsnot paid
Freseniusnot paid
Fifth Third Bank VDPnot paid
Truist Financialnot paid
Clarivatenot paid
Shutterfly VDPnot paid
LATAM Airlinesnot paid
Merck & Co., Inc., Rahway, NJ, USAnot paid
Prolinx VDPnot paid
Paystack Vulnerability Disclosurenot paid
APNICnot paid
City of Los Angelesnot paid
Fastly VDPnot paid
ABB Information Systems Ltdnot paid
Canada Goose Inc.not paid
TD Bank Groupnot paid
KKR-VDPnot paid
Delivery Heronot paid
U.S. Department of Statenot paid
ONE ZERO VDPnot paid
Cognizantnot paid
Expedia Group VDPnot paid
Divvy Homesnot paid
Avalaranot paid
Intuitnot paid
ResMednot paid
Abercrombie & Fitch Management Co.not paid
StrongDMnot paid
Monarch Moneynot paid
Allegionnot paid
Marsnot paid
Flexport VDPnot paid
Tesconot paid
Trellixnot paid
N45HTnot paid
GoDaddy VDPnot paid
Windstreamnot paid
Fidelitynot paid
UserTestingnot paid
OANDAnot paid
Beiersdorfnot paid
Planet Labsnot paid
Ronot paid
Pfizernot paid
Caterpillarnot paid
Keurig Dr Peppernot paid
Callsignnot paid
The Walt Disney Companynot paid
Gymsharknot paid
UPS VDPnot paid
Alohinot paid
Anywhere Real Estatenot paid
Tenablenot paid
Hy-Veenot paid
Redis not paid
Costconot paid
Mondelēz Internationalnot paid
Veeamnot paid
JetBluenot paid
Tennessee Valley Authoritynot paid
Wickrnot paid
SEGAnot paid
Snowplownot paid
Octopus Energy Groupnot paid
M&T Bank Vulnerability Disclosurenot paid
Nominetnot paid
John Deerenot paid
USPS - United States Postal Servicenot paid
AIGnot paid
BlackRocknot paid
Cedars-Sinainot paid
Thomson Reutersnot paid
R3not paid
Zebra VDPnot paid
Fastifynot paid
Global Paymentsnot paid
On not paid
Ohio Secretary of Statenot paid
Thnksnot paid
OpenMagenot paid
WHO COVID-19 Mobile Appnot paid
U.S. General Services Administrationnot paid
Mendixnot paid
Simple Pollnot paid
Rebellion Defensenot paid
FINRA Responsenot paid
Insulet Corporationnot paid
NISC-VDPnot paid
Staging.every.orgnot paid
Myndrnot paid
Picsartnot paid
HCL Software Inc.not paid
Nutanixnot paid
Lab45not paid
Palo Alto Softwarenot paid
MTN Groupnot paid
PUBGnot paid
Streaknot paid
Stripo Incnot paid
Gmeliusnot paid
lemlistnot paid
KeyBanknot paid
Worklyticsnot paid
Top Echelon Softwarenot paid
JNJ Mobilenot paid
Equifax-vdpnot paid
Solidusnot paid
DefectDojonot paid
phpBBnot paid
Python Cryptographic Authoritynot paid
Capital Onenot paid
Starling Bank Limitednot paid
Central Security Projectnot paid
Fordnot paid
Hyatt Hotelsnot paid
RATELIMITEDnot paid
Smulenot paid
PayPalnot paid
IBMnot paid
DuckDuckGonot paid
MariaDBnot paid
arkadiyt-projectsnot paid
Goldman Sachsnot paid
Loofahnot paid
Nokogirinot paid
Sonynot paid
Coalition, Inc.not paid
Toyotanot paid
passhashnot paid
Bitwardennot paid
Moneronot paid
WakaTimenot paid
Stellar.orgnot paid
Parrot Secnot paid
Weblatenot paid
FormAssemblynot paid
U.S. Dept Of Defensenot paid
OWOX, Inc.not paid
GoCDnot paid
General Motorsnot paid
Revive Adservernot paid
Version Cakenot paid
Courseranot paid
Adobenot paid
Airbnbnot paid
Informaticanot paid
ExpressionEnginenot paid
Ian Dunnnot paid
Cloudflare Public Bug Bountynot paid
Automatticnot paid
Khan Academynot paid
Concrete CMSnot paid
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!
Twitter
BY DENIS WERNER - @NOBBD - IMPRESSUM