the unofficial HackerOne disclosure timeline.

Check out the new Program-Rule-Archive!
This page shows a list of all HackerOne programs, the minimum bounty and the number of publicly disclosed bugs.
You can filter the programs for "paid" and "not paid" ones by clicking the checkboxes.
You can click on any of the names to open a link to the related program page on HackerOne
paid not paid
ProgramMinimum BountyBugs closed
Trint Ltdnot paid9
ecobeenot paid10
Notepad++not paid29
DefectDojonot paid0
phpBBnot paid8
ZEITnot paid27
TomTomnot paid13
Sweatco Ltdnot paid0
Xilinxnot paid7
Python Cryptographic Authoritynot paid3
Capital Onenot paid17
Backblazenot paid75
Starling Bank Limitednot paid6
Central Security Projectnot paid0
FileZilla (European Commission - DIGIT)not paid0
Apache Kafka (European Commission - DIGIT)not paid
PuTTY (European Commission - DIGIT)not paid27
Fordnot paid1001
Hyatt Hotelsnot paid136
CFP Timenot paid11
RATELIMITEDnot paid168
Avitonot paid59
Hanno's projectsnot paid12
Vivynot paid0
PayPalnot paid437
ESLintnot paid1
IBMnot paid1052
Alibabanot paid127
DuckDuckGonot paid29
MariaDBnot paid12
Shiptnot paid83
Rocket.Chatnot paid39
MediaMarktSaturnnot paid73
arkadiyt-projectsnot paid0
Tezosnot paid3
Impinjnot paid9
Passitnot paid21
Tendermintnot paid
Goldman Sachs VDPnot paid23
JamieWebnot paid
Loofahnot paid2
Nokogirinot paid2
MyCryptonot paid16
Sonynot paid586
Vendnot paid102
Toyotanot paid
passhashnot paid0
Intel Corporationnot paid
Crowdstrikenot paid
Node.js third-party modulesnot paid162
RBKmoneynot paid
JohnBlackbournnot paid0
Ednot paid10
AlienVault not paid76
Google Play Security Reward Programnot paid108
Infogramnot paid249
Razer USnot paid155
Aspennot paid2
Bitwardennot paid19
Moneronot paid24
delight.imnot paid14
WakaTimenot paid192
Stellar.orgnot paid20
Parrot Secnot paid
Cuvvanot paid12 e.U.not paid60
Teradicinot paid16
Weblatenot paid123
Homebrewnot paid13
WordPressnot paid
FormAssemblynot paid181
U.S. Dept Of Defensenot paid
OWOX, Inc.not paid64
shopify-scriptsnot paid348
Yelpnot paid245
Instacartnot paid195
Kaspersky Labnot paid150
PowerDNSnot paid26
GoCDnot paid39
OLXnot paid304
Dovecotnot paid9
Moneybirdnot paid104
Paragon Initiative Enterprisesnot paid17
GitLabnot paid323
Zomatonot paid
General Motorsnot paid
GlobaLeaksnot paid9
CodeIgniternot paid16
Maximumnot paid195
Revive Adservernot paid28
Imgurnot paid155
Courseranot paid115
Adobenot paid1936
Airbnbnot paid509
Informaticanot paid329
ExpressionEnginenot paid149
Urban Dictionarynot paid86
Ian Dunnnot paid15
Cloudflarenot paid148
Automatticnot paid
Khan Academynot paid144
concrete5not paid230
50m-ctfnot paid13
VLC (European Commission - DIGIT)not paid12
Notepad++ (European Commission - DIGIT)not paid0
Smulenot paid45
h1-5411-CTFnot paid10
Fignot paid22
Y Combinatornot paid11
Coalition, Inc.not paid7
Deconfnot paid2
Big Monoclenot paid9
Frans Visits Vegasnot paid
Alvosecnot paid
Pushwooshnot paid75
FantasyTotenot paid32
bitaccessnot paid29
APITest.IOnot paid131
Verisnot paid154
Xeronot paid144
Cakebetnot paid15
KIWI.KI GmbHnot paid26
vulners.comnot paid18
Version Cakenot paid1
Zaptionnot paid58
LibSassnot paid27
MapLoginnot paid22
Certlynot paid27
Mobile Vikingsnot paid74
ThisDatanot paid17
DigitalSellznot paid29
jsDelivrnot paid10
FanFootagenot paid36
Mavenlinknot paid199
Kadiranot paid35
StopTheHackernot paid54
C2FOnot paid47
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!