the unofficial HackerOne disclosure timeline.

Check out the new Program-Rule-Archive!
This page shows a list of all HackerOne programs, the minimum bounty and the number of publicly disclosed bugs.
You can filter the programs for "paid" and "not paid" ones by clicking the checkboxes.
You can click on any of the names to open a link to the related program page on HackerOne
paid not paid
ProgramMinimum BountyBugs closed
OYO Roomsnot paid
Shutterfly VDPnot paid
SIX Groupnot paid
LATAM Airlinesnot paid
Merck & Co., Inc., Rahway, NJ, USAnot paid
Prolinx VDPnot paid
Paystack Vulnerability Disclosurenot paid
APNICnot paid
City of Los Angelesnot paid
Fastly VDPnot paid
ABB Information Systems Ltdnot paid
Canada Goose Inc.not paid
SVB Financialnot paid
TD Banknot paid
Stanford Universitynot paid
KKR-VDPnot paid
Delivery Heronot paid
U.S. Department of Statenot paid
ONE ZERO VDPnot paid
Cognizantnot paid
Expedia Groupnot paid
Varonisnot paid
Divvy Homesnot paid
Avalaranot paid
Intuitnot paid
ResMednot paid
Abercrombie & Fitch Management Co.not paid
StrongDMnot paid
Rivian Automotivenot paid
Monarch Moneynot paid
Allegionnot paid
Poloniexnot paid
Fossilnot paid
Mount Sinai Healthnot paid
Marsnot paid
Flexport VDPnot paid
Tesconot paid
Raivonot paid
token.comnot paid
N45HTnot paid
GoDaddy VDPnot paid
Windstreamnot paid
Fidelitynot paid
UserTestingnot paid
PlanetArtnot paid
OANDAnot paid
RecargaPaynot paid
Beiersdorfnot paid
Razorpaynot paid
Wealthsimplenot paid
Planet Labsnot paid
Ronot paid
Pfizernot paid
Automation Anywherenot paid
Caterpillarnot paid
Keurig Dr Peppernot paid
Callsignnot paid
The Walt Disney Companynot paid
EXNESSnot paid
Circlenot paid
SecurityScorecardnot paid
Gymsharknot paid
UPS VDPnot paid
Alohinot paid
Anywhere Real Estatenot paid
Tenablenot paid
Hy-Veenot paid
Redis not paid
Costconot paid
Mondelēz Internationalnot paid
Veeamnot paid
JetBluenot paid
OpenSeanot paid
InMobinot paid
Tennessee Valley Authoritynot paid
Wickrnot paid
SEGAnot paid
Auviknot paid
Snowplownot paid
Octopus Energy Groupnot paid
M&T Bank Vulnerability Disclosurenot paid
JFrognot paid
Laceworknot paid
Nominetnot paid
Proctorionot paid
John Deerenot paid
USPS - United States Postal Servicenot paid
Home Bargainsnot paid
AIGnot paid
BlackRocknot paid
Cedars-Sinainot paid
Thomson Reutersnot paid
Aktianot paid
R3not paid
Zegonot paid
Zebra VDPnot paid
LumiraDxnot paid
Drugs.comnot paid
Fastifynot paid
Global Paymentsnot paid
On not paid
Ohio Secretary of Statenot paid
Checkout not paid
Glovonot paid
Hud Appnot paid
OpenMagenot paid
Cirrus Insightnot paid
eMoney Advisornot paid
Federal Reservenot paid
WHO COVID-19 Mobile Appnot paid
U.S. General Services Administrationnot paid
Jimdo GmbHnot paid
Mendixnot paid
Nubanknot paid
TikToknot paid
Zivvernot paid
MainWPnot paid
Simple Pollnot paid
Rebellion Defensenot paid
Dropcontactnot paid
A.S. Watson Group not paid
FINRA Responsenot paid
Gener8not paid
Wells Fargonot paid
Couriernot paid
Invision Power Services, Inc.not paid
Insulet Corporationnot paid
NISC-VDPnot paid
Facebooknot paid
BMW Groupnot paid
Staging.every.orgnot paid
Myndrnot paid
DigitalOceannot paid
Orion Labsnot paid
Picsartnot paid
HCL Software Inc.not paid
Nutanixnot paid
Topcodernot paid
8x8not paid
Palo Alto Softwarenot paid
MTN Groupnot paid
Nord Securitynot paid
PUBGnot paid
Stripo Incnot paid
MobiSystems Ltd.not paid
Gmeliusnot paid
lemlistnot paid
KeyBanknot paid
Overloopnot paid
Worklyticsnot paid
Top Echelon Softwarenot paid
JNJ Mobilenot paid
GovTech VDPnot paid
Amitree Incnot paid
Equifax-vdpnot paid
Solidusnot paid
DefectDojonot paid
phpBBnot paid
Python Cryptographic Authoritynot paid
Capital Onenot paid
Starling Bank Limitednot paid
Central Security Projectnot paid
Fordnot paid
Hyatt Hotelsnot paid
RATELIMITEDnot paid
Smulenot paid
PayPalnot paid
IBMnot paid
DuckDuckGonot paid
MariaDBnot paid
Shiptnot paid
Rocket.Chatnot paid
arkadiyt-projectsnot paid
Cosmosnot paid
Goldman Sachsnot paid
JamieWebnot paid
Loofahnot paid
Nokogirinot paid
Sonynot paid
Coalition, Inc.not paid
Toyotanot paid
passhashnot paid
Crowdstrikenot paid
JohnBlackbournnot paid
Ednot paid
Aspennot paid
Bitwardennot paid
Moneronot paid
delight.imnot paid
WakaTimenot paid
Stellar.orgnot paid
Parrot Secnot paid
Weblatenot paid
WordPressnot paid
FormAssemblynot paid
U.S. Dept Of Defensenot paid
OWOX, Inc.not paid
Yelpnot paid
GoCDnot paid
Moneybirdnot paid
GitLabnot paid
General Motorsnot paid
Deriv.comnot paid
Radancynot paid
Revive Adservernot paid
Version Cakenot paid
Courseranot paid
Adobenot paid
Airbnbnot paid
Informaticanot paid
ExpressionEnginenot paid
Ian Dunnnot paid
Cloudflare Public Bug Bountynot paid
Automatticnot paid
Khan Academynot paid
Concrete CMSnot paid
Fertitta Entertainmentnot paid
McKessonnot paid
Trellixnot paid
EPAMnot paid
Node.js third-party modulesnot paid
Twitter Algorithmic Biasnot paid
LogSnitchnot paid
Azbuka Vkusanot paid
UPchievenot paid
MCUbootnot paid
Thnksnot paid
Chorusnot paid
Earnynot paid
ImpressCMSnot paid
Agoricnot paid
Ozonnot paid
UpHabitnot paid
Nurinot paid
RGhostnot paid
Tencentnot paid
CompanyHubnot paid
Endless Groupnot paid
InvestNextnot paid
DRIVE.NET, Inc.not paid
Streaknot paid
Replyifynot paid
AODocsnot paid
Tumblrnot paid
People Interactivenot paid
Mailtime Technology Inc.not paid
Coppernot paid
Spellnot paid
Kartpaynot paid
Notepad++not paid
Sweatco Ltdnot paid
50m-ctfnot paid
FileZilla (European Commission - DIGIT)not paid
VLC (European Commission - DIGIT)not paid
Apache Kafka (European Commission - DIGIT)not paid
PuTTY (European Commission - DIGIT)not paid
Notepad++ (European Commission - DIGIT)not paid
CFP Timenot paid
Hanno's projectsnot paid
h1-5411-CTFnot paid
ESLintnot paid
Fignot paid
Y Combinatornot paid
Deconfnot paid
RBKmoneynot paid
Infogramnot paid
Big Monoclenot paid
Frans Visits Vegasnot paid
MapsMarker.com e.U.not paid
Teradicinot paid
Homebrewnot paid
Alvosecnot paid
Pushwooshnot paid
shopify-scriptsnot paid
Kasperskynot paid
OLXnot paid
FantasyTotenot paid
Bimenot paid
bitaccessnot paid
APITest.IOnot paid
Verisnot paid
Cakebetnot paid
KIWI.KI GmbHnot paid
Paragon Initiative Enterprisesnot paid
CodeIgniternot paid
Imgurnot paid
ok.runot paid
Zaptionnot paid
LibSassnot paid
MapLoginnot paid
VK.comnot paid
Certlynot paid
Mobile Vikingsnot paid
ThisDatanot paid
DigitalSellznot paid
jsDelivrnot paid
FanFootagenot paid
Mavenlinknot paid
Urban Dictionarynot paid
Kadiranot paid
StopTheHackernot paid
Mail.runot paid
C2FOnot paid
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!
Twitter
BY DENIS WERNER - @NOBBD - IMPRESSUM