Bug bounty program changes

What moved on public bug bounty programs, newest first. Cuts, removals and closures are confirmed on a second check before they show.

Updated 12 Nov 2026, 21:55 UTC

Last 7 days

Scope added: 258
Rewards raised: 4
Cuts and removals: 8
New programs: 0

Platform When Direction

350 changes

Good for hunters

Wednesday, 4 November 2 changes

Freshworks 09:23

Back HackerOne

Open for reports again.
Cvent Bug Bounty 03:16

Scope + Bugcrowd

Added to scope: https://accounts.app.cvent.com/paygo/signup

Tuesday, 3 November 13 changes

John Deere 22:15

Scope + HackerOne

Added to scope: jdsn-grr-api.deere.com
John Deere 21:45

Scope + HackerOne

Added to scope: cogi-ai-srv.ghns-web-platform-prod-standalone4.us.e00.c01.johndeerecloud.com
Equifax-vdp 20:34

Scope + HackerOne

Added to scope: http://promo.application.equifax.com
John Deere 20:15

Scope + HackerOne

Added to scope: warrantyelb.apps-qual-vpn.us.e06.c01.johndeerecloud.com
Hilton 19:26

Scope + HackerOne

Added to scope: hhibeachandtennis.com
John Deere 19:15

Scope + HackerOne

Added to scope: dmc.johndeere.com
John Deere 15:25

Scope + HackerOne

Added to scope: johndeere.my.cority.com
Origin Protocol 13:35

Scope + Immunefi

Added to scope: https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
Origin Protocol 13:35

Scope + Immunefi

Added to scope: https://etherscan.io/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
Origin Protocol 13:35

Scope + Immunefi

Added to scope: https://basescan.org/address/0x0F12256E27E658790C404C087C38ab4f34D53360
Signicat Responsible Disclosure 13:00

Scope + Intigriti

Added to scope: Signicat VideoID and SignatureID
Infomaniak Bug Bounty program 12:19

Scope + YesWeHack

Added to scope: s3.gva2.infomaniak.cloud
Infomaniak Bug Bounty program 12:19

Scope + YesWeHack

Added to scope: s3.gva1.infomaniak.cloud

Monday, 2 November 1 change

Solidus 13:22

Back HackerOne

Open for reports again.

Monday, 26 October 1 change

Venly 09:32

Back Intigriti

Open for reports again.

Wednesday, 21 October 2 changes

Coinstore 13:32

Back HackenProof

Open for reports again.
Publitas 12:36

Back HackerOne

Open for reports again.

Tuesday, 20 October 3 changes

Paxos Labs 15:20

Raised Immunefi

Top reward $100,000 to $500,000.
Paxos Labs 15:20

Back Immunefi

Listed again and open for reports.
Skoda Auto Bug Bounty Program 12:55

Back Intigriti

Open for reports again.

Monday, 19 October 2 changes

Social Deal 09:44

Raised Intigriti

Top reward €750 to €1,000.
GoCardless Bug Bounty Program 08:19

Back HackerOne

Open for reports again.

Friday, 16 October 1 change

BloFin Web & Mobile 17:31

Raised HackenProof

Top reward $4,000 to $10,000.

Thursday, 15 October 4 changes

Lombard Finance 15:51

Raised Immunefi

Top reward $250,000 to $500,000.
MariaDB 10:56

Back HackerOne

Open for reports again.
Cetus Smart Contracts 09:00

Raised HackenProof

Top reward $300,000 to $1,000,000.
Hotcoin Web & Mobile 02:47

Raised HackenProof

Top reward $1,000 to $2,000.

Wednesday, 14 October 2 changes

VaultCord 17:13

Back Bugbase

Open for reports again.
Bitunix Web 06:53

Raised HackenProof

Top reward $8,000 to $50,000.

Sunday, 11 October 1 change

Vinted Bug Bounty 11:36

Raised Bugcrowd

Top reward $4,000 to $8,000.

Thursday, 8 October 1 change

Instacart 07:25

Raised HackerOne

Top reward $15,000 to $20,000.

Tuesday, 6 October 1 change

Algolia 14:45

Back HackerOne

Open for reports again.

Monday, 5 October 2 changes

Bitso Managed Bug Bounty Engagement 16:05

Raised Bugcrowd

Top reward $7,500 to $15,000.
Konsol 07:33

Back Standoff 365

Listed again and open for reports.

Sunday, 4 October 1 change

Zynk Protocol 16:53

Back HackenProof

Open for reports again.

Friday, 2 October 1 change

Visma 13:27

Back Intigriti

Open for reports again.

Wednesday, 30 September 3 changes

MongoDB 14:46

Raised HackerOne

Top reward $7,500 to $8,500.
Veriff Bug Bounty 12:54

Back Intigriti

Open for reports again.
Kinepolis Group 12:54

Back Intigriti

Open for reports again.

Monday, 28 September 1 change

DAWN USD.infra Vault 08:58

Back Immunefi

Open for reports again.

Tuesday, 22 September 1 change

ShapeShift 07:58

Back HackenProof

Open for reports again.

Monday, 21 September 6 changes

Square 19:09

Back Bugcrowd

Open for reports again.
Afterpay Bug Bounty Program 19:09

Back Bugcrowd

Open for reports again.
lululemon 19:09

Back Bugcrowd

Open for reports again.
Cash App 19:09

Back Bugcrowd

Open for reports again.
TIDAL 19:09

Back Bugcrowd

Open for reports again.
Block Open Source 19:09

Back Bugcrowd

Open for reports again.

Sunday, 20 September 1 change

Files.com 14:24

Raised HackerOne

Top reward $15,000 to $50,000.