the unofficial HackerOne disclosure timeline.

Check out the new Program-Rule-Archive!
This page shows a list of all HackerOne programs, the minimum bounty and the number of publicly disclosed bugs.
You can filter the programs for "paid" and "not paid" ones by clicking the checkboxes.
You can click on any of the names to open a link to the related program page on HackerOne
paid not paid
ProgramMinimum BountyBugs closed
RMSnot paid
Jimdo GmbHnot paid
ImpressCMSnot paid
Navient Solutions LLCnot paid
Mendixnot paid
Nubanknot paid
Zivvernot paid
MainWPnot paid
Sixt GmbH & Co. Autovermietung KGnot paid
Agoricnot paid
Simple Pollnot paid
Rebellion Defensenot paid
Dropcontactnot paid
Acronisnot paid
Rocksetnot paid
FINRA Responsenot paid
Gener8not paid
Engel & Völkers Technology GmbHnot paid
SMTP2GOnot paid
UpHabitnot paid
Wells Fargonot paid
Couriernot paid
Bitwalanot paid
Invision Power Services, Inc.not paid
Insulet Corporationnot paid
NISC-VDPnot paid
Cengagenot paid
Facebooknot paid
BMW Groupnot paid
Qulture.Rocksnot paid
Staging.every.orgnot paid
Myndrnot paid
DigitalOceannot paid
Orion Labsnot paid
PicsArtnot paid
Evernotenot paid
HCL Software Inc.not paid
Endless Hostingnot paid
Kohonot paid
Marriott Vulnerability Disclosure Programnot paid
InvestNextnot paid
Nutanixnot paid
Topcodernot paid
KOPIKAS ENTERTAINMENT OÜnot paid
DRIVE.NET, Inc.not paid
8x8not paid
Palo Alto Softwarenot paid
MTN Groupnot paid
Polymail, Inc.not paid
NordVPNnot paid
PUBGnot paid
Streaknot paid
LINEnot paid
Stripo Incnot paid
Natur.com GmbHnot paid
MobiSystems Ltd.not paid
Gmeliusnot paid
lemlistnot paid
KeyBanknot paid
Prospect.ionot paid
Worklyticsnot paid
Top Echelon Softwarenot paid
AODocsnot paid
JNJ Mobilenot paid
GovTech VDPnot paid
Mailtime Technology Inc.not paid
Amitree Incnot paid
Equifaxnot paid
Kartpaynot paid
Upgradenot paid
Solidusnot paid
Trint Ltdnot paid
Notepad++not paid
DefectDojonot paid
phpBBnot paid
TomTomnot paid
Sweatco Ltdnot paid
Xilinxnot paid
Python Cryptographic Authoritynot paid
Capital Onenot paid
Starling Bank Limitednot paid
Central Security Projectnot paid
Fordnot paid
Hyatt Hotelsnot paid
CFP Timenot paid
RATELIMITEDnot paid
Avitonot paid
Smulenot paid
Vivynot paid
PayPalnot paid
ESLintnot paid
IBMnot paid
DuckDuckGonot paid
MariaDBnot paid
Shiptnot paid
Rocket.Chatnot paid
MediaMarktSaturnnot paid
arkadiyt-projectsnot paid
Passitnot paid
Tendermintnot paid
Goldman Sachsnot paid
JamieWebnot paid
Loofahnot paid
Nokogirinot paid
Sonynot paid
Coalition, Inc.not paid
Toyotanot paid
passhashnot paid
Intel Corporationnot paid
Crowdstrikenot paid
RBKmoneynot paid
JohnBlackbournnot paid
Ednot paid
Infogramnot paid
Aspennot paid
Bitwardennot paid
Moneronot paid
delight.imnot paid
WakaTimenot paid
Stellar.orgnot paid
Parrot Secnot paid
Cuvvanot paid
Teradicinot paid
Weblatenot paid
Homebrewnot paid
WordPressnot paid
FormAssemblynot paid
Alvosecnot paid
U.S. Dept Of Defensenot paid
OWOX, Inc.not paid
Yelpnot paid
Instacartnot paid
Kasperskynot paid
GoCDnot paid
bitaccessnot paid
Moneybirdnot paid
Paragon Initiative Enterprisesnot paid
GitLabnot paid
General Motorsnot paid
GlobaLeaksnot paid
CodeIgniternot paid
Maximumnot paid
Revive Adservernot paid
Imgurnot paid
Version Cakenot paid
Courseranot paid
Adobenot paid
Airbnbnot paid
Informaticanot paid
ExpressionEnginenot paid
Urban Dictionarynot paid
Ian Dunnnot paid
Cloudflare Vulnerability Disclosurenot paid
Automatticnot paid
Khan Academynot paid
concrete5not paid
RGhostnot paid
Tencentnot paid
Rampnot paid
CompanyHubnot paid
h1-ctfnot paid
Replyifynot paid
Tumblrnot paid
People Interactivenot paid
Coppernot paid
Spellnot paid
Diemnot paid
50m-ctfnot paid
FileZilla (European Commission - DIGIT)not paid
VLC (European Commission - DIGIT)not paid
Apache Kafka (European Commission - DIGIT)not paid
PuTTY (European Commission - DIGIT)not paid
Notepad++ (European Commission - DIGIT)not paid
Hanno's projectsnot paid
h1-5411-CTFnot paid
Fignot paid
Y Combinatornot paid
Deconfnot paid
Node.js third-party modulesnot paid
Big Monoclenot paid
Frans Visits Vegasnot paid
MapsMarker.com e.U.not paid
Pushwooshnot paid
shopify-scriptsnot paid
OLXnot paid
FantasyTotenot paid
APITest.IOnot paid
Verisnot paid
Xeronot paid
Cakebetnot paid
KIWI.KI GmbHnot paid
vulners.comnot paid
Zaptionnot paid
LibSassnot paid
MapLoginnot paid
Certlynot paid
Mobile Vikingsnot paid
ThisDatanot paid
DigitalSellznot paid
jsDelivrnot paid
FanFootagenot paid
Mavenlinknot paid
Kadiranot paid
StopTheHackernot paid
C2FOnot paid
Follow @disclosedh1 on twitter to receive updates when a new bug is disclosed!
Twitter
BY DENIS WERNER - @NOBBD - IMPRESSUM