What it is
Bug bounty programs are spread over more than 30 platforms and thousands of company websites, each with its own layout. This site reads the public pages, keeps the facts in one format and keeps every earlier version, so you can compare programs and see when a reward or scope moved.
It covers programs anyone can read, and programs any free account on a platform can see. Invite-only and private programs are never stored.
Who it is for
- Hunters starting out: find programs that accept beginners' bugs, pay for low severity or publish their code. Start here explains the terms.
- Experienced hunters: watch new scope and raised rewards as they happen, filter by asset type, and pull the data from the API or RSS.
- Program owners: see how your terms compare, and ask for a correction when something is out of date.
Independence
bugbounty.fyi is an independent project. No platform runs it, pays for placement or decides how programs are ranked. Platform and company names belong to their owners and are used only to say whose program a page describes. If a listing is ever sponsored, it will say "Sponsored" next to it.
Contact
A contact address is being set up. Until then, corrections can't be sent from this site.
Security issues in this site itself: see /.well-known/security.txt.