Program | Minimum Bounty | Bugs closed |
3CX | $50 | |
Finnair Vulnerability Disclosure | not paid | |
PepsiCo VDP | not paid | |
LPL Financial VDP | not paid | |
MacTaggart Scott | not paid | |
AWS VDP | not paid | |
ION Group | not paid | |
KHealth | $100 | |
Capital One Bug Bounty | $50 | |
Supabase | not paid | |
Playtika | $50 | |
Xverse | $50 | |
Ivanti (VDP) | not paid | |
Anthropic (VDP) | not paid | |
Vodafone Oman | $50 | |
Peloton | not paid | |
PagerDuty | not paid | |
NBA Public Bug Bounty | $50 | |
Prudential Financial | not paid | |
Oportun | not paid | |
Moov | not paid | |
Tim Hortons VDP | not paid | |
6sense VDP | not paid | |
Insightly | $100 | |
ProductBoard, Inc. | not paid | |
Render | not paid | |
TimelyCare | not paid | |
DIB-VDP | not paid | |
Circle BBP | $50 | |
Nimiq | $50 | |
Varonis | $50 | |
Netflix | $50 | |
Early Warning | $50 | |
Klarna | $50 | |
KOHO | $50 | |
Aeromexico VDP | not paid | |
TransUnion LLC | not paid | |
Ionity GmbH | not paid | |
Aon | not paid | |
Lowe's Companies VDP | not paid | |
Banco BMG VDP | not paid | |
REI VDP | not paid | |
Dyson | $100 | |
Truecaller | $100 | |
Remitly | $50 | |
Chia Network | $50 | |
Alchemy Insights, Inc. | $50 | |
Inter & Co. VDP | not paid | |
Tools for Humanity | $50 | |
Vendasta | not paid | |
International Airlines Group | not paid | |
Arkose Labs | $50 | |
PornBox | $50 | |
Publitas | not paid | |
Fireblocks | $50 | |
Dynatrace | $100 | |
OakNorth Bank | not paid | |
Dynamic Labs | $50 | |
WellHive | not paid | |
hostinger | $100 | |
eufy Security | $50 | |
Egress Software Technologies | not paid | |
23andMe Bug Bounty | $50 | |
MercadoLibre | $100 | |
Temu | $50 | |
Booking.com | $100 | |
Bybit Fintech Ltd | $50 | |
Navient Solutions LLC | not paid | |
Frontegg | $50 | |
CBRE | not paid | |
Front | $100 | |
Boozt Fashion AB | $50 | |
Trip.com | $50 | |
Mergify | $50 | |
Compass | $50 | |
Blue Apron (Wonder Group) VDP | not paid | |
HYPR | $50 | |
Modern Treasury | $50 | |
NiceHash | $50 | |
Particle Health VDP | not paid | |
Brightspeed | not paid | |
GoCardless Bug Bounty Program | $50 | |
REI BBP | $50 | |
Coinhako | $50 | |
Inditex | $150 | |
Leather Wallet | $50 | |
Alshaya | not paid | |
WisdomTree, Inc. | $50 | |
Kahootz | not paid | |
ABN AMRO Bank VDP | not paid | |
Fertitta Entertainment | not paid | |
AboitizPower | not paid | |
Fireblocks MPC | $50 | |
NBA | not paid | |
Greenfly | not paid | |
Aven (Response) | not paid | |
ServiceNow Disclosure | not paid | |
Eurofins | not paid | |
Fresenius | not paid | |
Redox | $50 | |
Visa | $50 | |
Daimler Truck | not paid | |
Fifth Third Bank VDP | not paid | |
Truist Financial | not paid | |
Clarivate | not paid | |
Freshworks | $100 | |
Kolesa Group | $50 | |
Ring | $50 | |
Tide | $50 | |
Mozilla | $50 | |
Shutterfly VDP | not paid | |
SIX Group | $50 | |
LATAM Airlines | not paid | |
Newegg | $50 | |
Merck & Co., Inc., Rahway, NJ, USA | not paid | |
Prolinx VDP | not paid | |
eero | $50 | |
FloQast | $50 | |
Hilton | $50 | |
Paystack Vulnerability Disclosure | not paid | |
APNIC | not paid | |
OKG | $50 | |
City of Los Angeles | not paid | |
Fastly VDP | not paid | |
inDrive | $50 | |
Grindr | $50 | |
Zabbix | $50 | |
Skinport | $50 | |
Miro | $250 | |
ABB Information Systems Ltd | not paid | |
Malwarebytes | $50 | |
Canada Goose Inc. | not paid | |
TD Bank Group | not paid | |
S-Pankki | $150 | |
TRON DAO | $50 | |
Kiwi.com | $100 | |
Hedera Hashgraph | $50 | |
Stanford University | not paid | |
KKR-VDP | not paid | |
8x8 Bounty | $100 | |
Superbet | $50 | |
MoonPay | $50 | |
Delivery Hero | not paid | |
Doppler | $50 | |
U.S. Department of State | not paid | |
ONE ZERO VDP | not paid | |
Yuga Labs | $50 | |
Cognizant | not paid | |
Expedia Group Bug Bounty | $100 | |
Expedia Group | not paid | |
Magic Eden | $50 | |
ZeroBounce | $50 | |
Divvy Homes | not paid | |
Avalara | not paid | |
Intuit | not paid | |
ResMed | not paid | |
Deribit | $50 | |
Abercrombie & Fitch Management Co. | not paid | |
StrongDM | not paid | |
Monarch Money | not paid | |
Allegion | not paid | |
Amazon Vulnerability Research Program - Devices | $50 | |
Blend Labs | $50 | |
MongoDB | $50 | |
ALSCO | $50 | |
Fossil | not paid | |
Mars | not paid | |
Flexport VDP | not paid | |
Cornershop | $100 | |
Trendyol | $50 | |
Tesco | not paid | |
Trellix | not paid | |
SideFX | $50 | |
N45HT | not paid | |
GoDaddy VDP | not paid | |
Windstream | not paid | |
Fidelity | not paid | |
UserTesting | not paid | |
MetaMask | $50 | |
OANDA | not paid | |
Beiersdorf | not paid | |
Razorpay | $250 | |
LinkedIn | $100 | |
Wealthsimple | $100 | |
Planet Labs | not paid | |
Ro | not paid | |
Pfizer | not paid | |
Keurig Dr Pepper | not paid | |
KAYAK | $150 | |
Callsign | not paid | |
Sorare | $50 | |
SHEIN | $100 | |
The Walt Disney Company | not paid | |
Palantir Public | $50 | |
EXNESS | $50 | |
SMTP2GO BBP | $100 | |
Circle | not paid | |
SecurityScorecard | not paid | |
Gymshark | not paid | |
eToro BBP | $7000 | |
Instacart | $50 | |
UPS VDP | not paid | |
Alohi | not paid | |
Anywhere Real Estate | not paid | |
Databricks | $100 | |
Tenable | not paid | |
Hy-Vee | not paid | |
Payoneer | $50 | |
Redis | not paid | |
Costco | not paid | |
Mondelēz International | not paid | |
Veeam | not paid | |
JetBlue | not paid | |
Tennessee Valley Authority | not paid | |
Krisp | $50 | |
Wickr | not paid | |
Agoric | $250 | |
SEGA | not paid | |
Clubhouse | $50 | |
Snowplow | not paid | |
Octopus Energy Group | not paid | |
Judge.me | $50 | |
M&T Bank Vulnerability Disclosure | not paid | |
Evernote | $150 | |
Epic Games | $200 | |
Tinder | $250 | |
Recorded Future | $50 | |
GSA Bounty | $50 | |
Internet Bug Bounty | $50 | |
Consensys | $50 | |
Lacework | not paid | |
Nominet | not paid | |
Elastic | $100 | |
John Deere | not paid | |
Stripe | $100 | |
USPS - United States Postal Service | not paid | |
Home Bargains | $25 | |
AIG | not paid | |
BlackRock | not paid | |
Urban Company | $200 | |
Cedars-Sinai | not paid | |
Thomson Reuters | not paid | |
R3 | not paid | |
Zebra VDP | not paid | |
LumiraDx | not paid | |
Reddit | $100 | |
CoinSpot | $250 | |
Fastify | not paid | |
Via | $50 | |
On | not paid | |
Scopely | $150 | |
Mattermost | $50 | |
Ohio Secretary of State | not paid | |
Chime | $50 | |
Thnks | not paid | |
LaunchDarkly | $50 | |
OpenMage | not paid | |
Cirrus Insight | not paid | |
eMoney Advisor | not paid | |
FetLife | $100 | |
WHO COVID-19 Mobile App | not paid | |
SKALE Network | $100 | |
U.S. General Services Administration | not paid | |
Bitso | $150 | |
Lark Technologies | $100 | |
Mendix | not paid | |
Exodus | $100 | |
Yoti | $100 | |
Netlify | $100 | |
Basecamp | $100 | |
Cloud Software Group | $50 | |
TikTok | $50 | |
Logitech | $200 | |
Enjin | $60 | |
Figma | $50 | |
CS Money | $50 | |
MainWP | $5 | |
Faraday, Inc. | $50 | |
Simple Poll | not paid | |
Rebellion Defense | not paid | |
Acronis | $100 | |
Affirm | $100 | |
A.S. Watson Group | $50 | |
Clario | $100 | |
FINRA Response | not paid | |
Wells Fargo | not paid | |
PlayStation | $50 | |
Courier | not paid | |
Polygon Technology | $50 | |
Invision Power Services, Inc. | not paid | |
Xiaomi | $50 | |
Flutter UK&I | $250 | |
Insulet Corporation | not paid | |
NISC-VDP | not paid | |
Amazon Vulnerability Research Program | $100 | |
Meta | $1 | |
Magic | $150 | |
Staging.every.org | not paid | |
Myndr | not paid | |
Glassdoor | $50 | |
Picsart | not paid | |
Kindred Group | $150 | |
HCL Software Inc. | not paid | |
Marriott Bug Bounty Program | $100 | |
GoodRx | $100 | |
Roblox | $100 | |
Localize | $50 | |
InvestNext | not paid | |
Nutanix | not paid | |
Lab45 | not paid | |
Kubernetes | $50 | |
Ping Identity | $125 | |
Palo Alto Software | not paid | |
MTN Group | not paid | |
DataStax | $100 | |
Nord Security | $100 | |
PUBG | not paid | |
LY Corporation | $100 | |
Stripo Inc | not paid | |
Pillar Project Worldwide Limited | $50 | |
Oasis Protocol Foundation | $50 | |
FileZilla | $250 | |
Gmelius | not paid | |
KeyBank | not paid | |
Overloop | not paid | |
Worklytics | not paid | |
Top Echelon Software | not paid | |
Coda | $50 | |
JNJ Mobile | not paid | |
pixiv | $200 | |
ForeScout Technologies | $100 | |
AT&T | $100 | |
Equifax-vdp | not paid | |
Solidus | not paid | |
DefectDojo | not paid | |
Chainlink | $50 | |
phpBB | not paid | |
Priceline | $100 | |
curl | $500 | |
Python Cryptographic Authority | not paid | |
Capital One | not paid | |
Starling Bank Limited | not paid | |
Credit Karma | $100 | |
Central Security Project | not paid | |
Omise | $100 | |
Ford | not paid | |
Hyatt Hotels | not paid | |
Grammarly | $100 | |
RATELIMITED | not paid | |
FanDuel | $100 | |
Smule | not paid | |
Flickr | $200 | |
Matomo | $10000 | |
PayPal | not paid | |
Chaturbate | $100 | |
IBM | not paid | |
BitMEX | $300 | |
DuckDuckGo | not paid | |
MariaDB | not paid | |
Airtable | $50 | |
Shipt | $100 | |
arkadiyt-projects | not paid | |
Cosmos | $1000 | |
Goldman Sachs | not paid | |
Valve | $100 | |
Crypto.com | $100 | |
Rootstock Labs | $400 | |
Hyperledger | $200 | |
Node.js | $500 | |
Loofah | not paid | |
Nokogiri | not paid | |
Plaid | $100 | |
Sony | not paid | |
Coalition, Inc. | not paid | |
Toyota | not paid | |
passhash | not paid | |
Crowdstrike | $100 | |
JohnBlackbourn | not paid | |
Ed | not paid | |
LocalTapiola | $50 | |
Semrush | $100 | |
Aspen | not paid | |
Bitwarden | not paid | |
Hiro | $25 | |
Monero | not paid | |
Tor | $100 | |
Grab | $50 | |
WakaTime | not paid | |
Stellar.org | not paid | |
Parrot Sec | not paid | |
Bumble | $130 | |
Spotify | $250 | |
Dashlane | $100 | |
Weblate | not paid | |
WordPress | $10 | |
Rockstar Games | $150 | |
Files.com | $100 | |
Lyst | $100 | |
FormAssembly | not paid | |
Discourse | $256 | |
Quora | $100 | |
Nintendo | $100 | |
PortSwigger Web Security | $100 | |
Starbucks | $100 | |
U.S. Dept Of Defense | not paid | |
OWOX, Inc. | not paid | |
Blockchain | $50 | |
Brave Software | $50 | |
RubyGems | $500 | |
Yelp | $50 | |
GoCD | not paid | |
Ruby | $500 | |
Nextcloud | $100 | |
Moneybird | $50 | |
GitHub | $617 | |
Uber | $500 | |
Mapbox | $200 | |
GitLab | $100 | |
Zomato | $50 | |
General Motors | not paid | |
Algolia | $100 | |
Deriv.com | $100 | |
Revive Adserver | not paid | |
Version Cake | not paid | |
Coursera | not paid | |
Zendesk | $100 | |
Udemy | $50 | |
Shopify | $500 | |
Snapchat | $250 | |
Ubiquiti Inc. | $150 | |
Adobe | not paid | |
Airbnb | not paid | |
Vimeo | $100 | |
Informatica | not paid | |
Greenhouse.io | $100 | |
X (Formerly Twitter) | $100 | |
Cloudflare Public Bug Bounty | not paid | |
Automattic | not paid | |
IRCCloud | $50 | |
Khan Academy | not paid | |
Coinbase | $200 | |
Concrete CMS | not paid | |
Slack | $250 | |
Yahoo! | $50 | |
Phabricator | $300 | |
Ruby on Rails | $500 | |
Django | $250 | |
HackerOne | $500 | |