the unofficial HackerOne disclosure timeline.

Check out the new Program-Rule-Archive!
This page shows a list of all HackerOne programs, the minimum bounty and the number of publicly disclosed bugs.
You can filter the programs for "paid" and "not paid" ones by clicking the checkboxes.
You can click on any of the names to open a link to the related program page on HackerOne
paid not paid
ProgramMinimum BountyBugs closed
Apache Kafka (European Commission - DIGIT)not paid0
PuTTY (European Commission - DIGIT)not paid0
Notepad++ (European Commission - DIGIT)not paid0
Fordnot paid770
Hyatt Hotelsnot paid22
CFP Timenot paid9
RATELIMITEDnot paid145
Avitonot paid50
Hanno's projectsnot paid9
Smulenot paid34
Vivynot paid0
PayPalnot paid261
ESLintnot paid1
IBMnot paid618
Miniclipnot paid19
Alibabanot paid60
DuckDuckGonot paid22
MariaDBnot paid8
Shiptnot paid67
Rocket.Chatnot paid34
MediaMarktSaturnnot paid61
arkadiyt-projectsnot paid0
Tezosnot paid0
Impinjnot paid8
Passitnot paid18
Tendermintnot paid
Goldman Sachs VDPnot paid22
JamieWebnot paid
Loofahnot paid2
Nokogirinot paid2
MyCryptonot paid15
LifeOmicnot paid9
Sonynot paid404
Vendnot paid100
Coalition, Inc.not paid6
Toyotanot paid
passhashnot paid0
Intel Corporationnot paid
Crowdstrikenot paid
RBKmoneynot paid
JohnBlackbournnot paid0
Ednot paid8
AlienVault not paid76
Google Play Security Reward Programnot paid62
Infogramnot paid246
Inflectionnot paid84
Razer USnot paid147
Aspennot paid2
Bitwardennot paid19
Moneronot paid17
delight.imnot paid14
WakaTimenot paid192
Stellar.orgnot paid18
Parrot Secnot paid15
Cuvvanot paid12 e.U.not paid60
Teradicinot paid15
Weblatenot paid122
Homebrewnot paid10
WordPressnot paid
FormAssemblynot paid178
U.S. Dept Of Defensenot paid
OWOX, Inc.not paid63
shopify-scriptsnot paid339
Yelpnot paid235
Instacartnot paid194
Kaspersky Labnot paid127
PowerDNSnot paid22
GoCDnot paid37
OLXnot paid273
FantasyTotenot paid32
Dovecotnot paid8
Moneybirdnot paid104
Paragon Initiative Enterprisesnot paid17
GitLabnot paid217
Zomatonot paid
General Motorsnot paid
GlobaLeaksnot paid9
CodeIgniternot paid16
Maximumnot paid193
Revive Adservernot paid26
Imgurnot paid153
Version Cakenot paid1
Courseranot paid113
Adobenot paid1862
Airbnbnot paid490
Mobile Vikingsnot paid74
Informaticanot paid318
ExpressionEnginenot paid149
Urban Dictionarynot paid83
Ian Dunnnot paid14
Cloudflarenot paid151
Automatticnot paid
Khan Academynot paid137
concrete5not paid230
h1-5411-CTFnot paid10
Fignot paid22
Y Combinatornot paid11
Shopeenot paid0
Deconfnot paid2
Node.js third-party modulesnot paid140
Duolingonot paid11
Headspacenot paid0
Big Monoclenot paid9
Frans Visits Vegasnot paid
Alvosecnot paid
Pushwooshnot paid75
bitaccessnot paid29
APITest.IOnot paid131
Verisnot paid154
Xeronot paid144
Cakebetnot paid15
KIWI.KI GmbHnot paid26
vulners.comnot paid18
Zaptionnot paid58
LibSassnot paid27
MapLoginnot paid22
Certlynot paid27
ThisDatanot paid17
DigitalSellznot paid29
jsDelivrnot paid10
FanFootagenot paid36
Mavenlinknot paid199
Kadiranot paid35
StopTheHackernot paid54
C2FOnot paid47
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!