the unofficial HackerOne disclosure timeline.

Check out the new Program-Rule-Archive!
This page shows a list of all HackerOne programs, the minimum bounty and the number of publicly disclosed bugs.
You can filter the programs for "paid" and "not paid" ones by clicking the checkboxes.
You can click on any of the names to open a link to the related program page on HackerOne
paid not paid
ProgramMinimum BountyBugs closed
Coppernot paid
Amitree Incnot paid
Libranot paid
NCSC UK not paid
Equifaxnot paid
Kartpaynot paid
Upgradenot paid
Solidusnot paid
UiPathnot paid
Shieldox Security LTDnot paid
Trint Ltdnot paid
ecobeenot paid
Notepad++not paid
DefectDojonot paid
phpBBnot paid
ZEITnot paid
TomTomnot paid
Sweatco Ltdnot paid
Xilinxnot paid
Python Cryptographic Authoritynot paid
Capital Onenot paid
Backblazenot paid
Starling Bank Limitednot paid
Central Security Projectnot paid
Fordnot paid
Hyatt Hotelsnot paid
CFP Timenot paid
Avitonot paid
Hanno's projectsnot paid
Vivynot paid
PayPalnot paid
ESLintnot paid
IBMnot paid
Alibabanot paid
DuckDuckGonot paid
MariaDBnot paid
Shiptnot paid
Rocket.Chatnot paid
MediaMarktSaturnnot paid
arkadiyt-projectsnot paid
Impinjnot paid
Passitnot paid
Tendermintnot paid
Goldman Sachsnot paid
JamieWebnot paid
Loofahnot paid
Nokogirinot paid
MyCryptonot paid
Sonynot paid
Vendnot paid
Toyotanot paid
passhashnot paid
Intel Corporationnot paid
Crowdstrikenot paid
Node.js third-party modulesnot paid
RBKmoneynot paid
JohnBlackbournnot paid
Ednot paid
AlienVault not paid
Google Play Security Reward Programnot paid
Infogramnot paid
Razer USnot paid
Aspennot paid
Bitwardennot paid
Moneronot paid
delight.imnot paid
WakaTimenot paid
Stellar.orgnot paid
Parrot Secnot paid
Cuvvanot paid
Teradicinot paid
Weblatenot paid
Homebrewnot paid
WordPressnot paid
FormAssemblynot paid
U.S. Dept Of Defensenot paid
OWOX, Inc.not paid
Yelpnot paid
Instacartnot paid
Kasperskynot paid
PowerDNSnot paid
GoCDnot paid
OLXnot paid
Dovecotnot paid
bitaccessnot paid
Moneybirdnot paid
Paragon Initiative Enterprisesnot paid
GitLabnot paid
General Motorsnot paid
GlobaLeaksnot paid
CodeIgniternot paid
Maximumnot paid
Revive Adservernot paid
Imgurnot paid
Courseranot paid
Adobenot paid
Airbnbnot paid
Informaticanot paid
ExpressionEnginenot paid
Urban Dictionarynot paid
Ian Dunnnot paid
Cloudflare Vulnerability Disclosurenot paid
Automatticnot paid
Khan Academynot paid
concrete5not paid
Spellnot paid
50m-ctfnot paid
FileZilla (European Commission - DIGIT)not paid
VLC (European Commission - DIGIT)not paid
Apache Kafka (European Commission - DIGIT)not paid
PuTTY (European Commission - DIGIT)not paid
Notepad++ (European Commission - DIGIT)not paid
Smulenot paid
h1-5411-CTFnot paid
Fignot paid
Y Combinatornot paid
Coalition, Inc.not paid
Deconfnot paid
Big Monoclenot paid
Frans Visits Vegasnot paid e.U.not paid
Alvosecnot paid
Pushwooshnot paid
shopify-scriptsnot paid
FantasyTotenot paid
APITest.IOnot paid
Verisnot paid
Xeronot paid
Cakebetnot paid
KIWI.KI GmbHnot paid
vulners.comnot paid
Version Cakenot paid
Zaptionnot paid
LibSassnot paid
MapLoginnot paid
Certlynot paid
Mobile Vikingsnot paid
ThisDatanot paid
DigitalSellznot paid
jsDelivrnot paid
FanFootagenot paid
Mavenlinknot paid
Kadiranot paid
StopTheHackernot paid
C2FOnot paid
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!