Bug bounty program changes

What moved on public bug bounty programs, newest first. Cuts, removals and closures are confirmed on a second check before they show.

Updated 12 Nov 2026, 20:34 UTC

Last 7 days

Scope added: 258
Rewards raised: 4
Cuts and removals: 8
New programs: 0

Platform When Direction

100 changes on HackerOne

HackerOne

Today 3 changes

Ferrero 19:55

Scope + HackerOne

Added to scope: ferrero.integrityline.app
Divvy Homes 14:13

Back HackerOne

Open for reports again.
Cloudflare Public Bug Bounty 09:07

Scope + HackerOne

Added to scope: https://github.com/cloudflare/boringtun

Yesterday 8 changes

Hilton 17:37

Scope + HackerOne

Added to scope: *.hilton.com.cn
Unico IDtech 15:25

Scope + HackerOne

Added to scope: developer.unico.io
Unico IDtech 15:07

Scope + HackerOne

Added to scope: api.humantoken.unico.app
Unico IDtech 15:07

Scope + HackerOne

Added to scope: humantoken.unico.app
Unico IDtech 15:07

Scope + HackerOne

Added to scope: dashboard.unico.app
BitMEX 09:25

Back HackerOne

Open for reports again.
Superbet 08:07

Scope + HackerOne

Added to scope: *.maxbet.ro
pixiv 00:54

Cut HackerOne

Top reward $7,500 to $5,000.

Tuesday, 10 November 11 changes

Zebra VDP 21:27

Scope + HackerOne

Added to scope: vod.zebra.com
Shopify 21:07

Scope + HackerOne

Added to scope: shop.com
Shopify 20:57

Scope + HackerOne

Added to scope: *.shopifysvc.com
Shopify 20:57

Scope + HackerOne

Added to scope: Shop Minis
Shopify 20:57

Scope + HackerOne

Added to scope: shopifyevents.com
Shopify 20:57

Scope + HackerOne

Added to scope: shopifypartnerships.com
Shopify 20:57

Scope + HackerOne

Added to scope: help.shop.app
Shopify 20:57

Scope + HackerOne

Added to scope: shopify.photo
Shopify 20:45

Scope + HackerOne

Added to scope: Sidekick
Walt.io 08:47

Scope + HackerOne

Added to scope: io.walt.app
Dynatrace 08:04

Paused HackerOne

Paused. Not accepting reports right now.

Monday, 9 November 7 changes

John Deere 19:08

Scope + HackerOne

Added to scope: mailhost.johndeere.com
CBRE 17:10

Scope + HackerOne

Added to scope: tenant-tour.cbre.com
CBRE 17:10

Scope + HackerOne

Added to scope: market-survey.cbre.com
Mars 17:09

Scope + HackerOne

Added to scope: marschina.com
John Deere 16:18

Scope + HackerOne

Added to scope: extraparts.deere.com
Fresenius 13:24

Back HackerOne

Open for reports again.
Oasis Protocol Foundation 08:44

Back HackerOne

Open for reports again.

Friday, 6 November 14 changes

AWS VDP 20:35

Scope + HackerOne

Added to scope: https://github.com/aws/s2n-quic
MariaDB 20:23

Back HackerOne

Open for reports again.
FanDuel 19:25

Scope + HackerOne

Added to scope: FanDuel Customer Support Sites
AT&T 18:05

Scope + HackerOne

Added to scope: http://accesspro.att.com
Hyatt Hotels 16:55

Scope − HackerOne

Removed from scope: hyatt.com
Epic Games 16:35

Scope + HackerOne

Added to scope: Zenserver
Braze, Inc. 15:45

Scope + HackerOne

Added to scope: https://bug-bounty-mcp.k8s.tools-001.d-use-1.braze-dev.com/mcp
Anduril Industries 06:55

Scope + HackerOne

Added to scope: anduril.com
Bybit Fintech Ltd 03:55

Scope + HackerOne

Added to scope: https://testnet.bybit.com/en/earn/rwa/
Bybit Fintech Ltd 03:45

Scope + HackerOne

Added to scope: https://www.bybit.com/en/stocks
Henkel 03:25

Scope + HackerOne

Added to scope: *.nymbrand.{com,co.uk,uk,}
Henkel 03:25

Scope + HackerOne

Added to scope: *.nymbrands.{com,co.uk,uk,}
Henkel 03:25

Scope + HackerOne

Added to scope: *.nymhair.{com,co.uk,uk,}
OPPO 02:33

Raised HackerOne

Top reward $11,500 to $12,000.

Thursday, 5 November 8 changes

John Deere 16:16

Scope + HackerOne

Added to scope: es-develop-api.channel-expertservices-prod-vpn.us.e00.c01.johndeerecloud.com
John Deere 14:26

Scope + HackerOne

Added to scope: ai-playbook-kit.mfg-material-management-devl-vpn.us.e11.c01.johndeerecloud.com
Judge.me 11:23

Scope + HackerOne

Added to scope: emails.judge.me
hostinger 10:15

Scope + HackerOne

Added to scope: ai-builder.hostinger.com
Stripe 05:03

Cut HackerOne

Top reward $25,000 to $15,000.
Stripe 04:35

Scope + HackerOne

Added to scope: stripe.dev
Stripe 04:35

Scope + HackerOne

Added to scope: stripe.com
Stripe 04:35

Scope + HackerOne

Added to scope: files.stripe.com

Wednesday, 4 November 13 changes

Remitly 22:45

Scope + HackerOne

Added to scope: api.remitly.com
John Deere 21:56

Scope + HackerOne

Added to scope: leasedataservice.deere.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex-test.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.purvala.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex.co.nz
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplexusers.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex.de
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex.{cl,fi,nl,cz,sk,co.jp}
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex.es
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex-dev.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.opx.tc
Henkel 15:15

Scope + HackerOne

Added to scope: *.olaplex.com
Freshworks 09:23

Back HackerOne

Open for reports again.

Tuesday, 3 November 8 changes

John Deere 22:15

Scope + HackerOne

Added to scope: jdsn-grr-api.deere.com
John Deere 21:45

Scope + HackerOne

Added to scope: cogi-ai-srv.ghns-web-platform-prod-standalone4.us.e00.c01.johndeerecloud.com
Equifax-vdp 20:34

Scope + HackerOne

Added to scope: http://promo.application.equifax.com
John Deere 20:15

Scope + HackerOne

Added to scope: warrantyelb.apps-qual-vpn.us.e06.c01.johndeerecloud.com
Hilton 19:26

Scope + HackerOne

Added to scope: hhibeachandtennis.com
John Deere 19:15

Scope + HackerOne

Added to scope: dmc.johndeere.com
John Deere 15:25

Scope + HackerOne

Added to scope: johndeere.my.cority.com
Meesho 11:03

Cut HackerOne

Top reward $3,500 to $2,500.

Monday, 2 November 4 changes

MariaDB 16:22

Paused HackerOne

Paused. Not accepting reports right now.
Expedia Group Bug Bounty 16:02

Paused HackerOne

Paused. Not accepting reports right now.
Fresenius 13:42

Paused HackerOne

Paused. Not accepting reports right now.
Solidus 13:22

Back HackerOne

Open for reports again.

Monday, 26 October 1 change

Solidus 19:00

Paused HackerOne

Paused. Not accepting reports right now.

Thursday, 22 October 1 change

phpBB 08:46

Paused HackerOne

Paused. Not accepting reports right now.

Wednesday, 21 October 2 changes

Publitas 12:36

Back HackerOne

Open for reports again.
Algolia 12:16

Paused HackerOne

Paused. Not accepting reports right now.

Tuesday, 20 October 1 change

Roblox 23:06

Cut HackerOne

Top reward $20,000 to $10,000.

Monday, 19 October 1 change

GoCardless Bug Bounty Program 08:19

Back HackerOne

Open for reports again.

Thursday, 15 October 1 change

MariaDB 10:56

Back HackerOne

Open for reports again.

Monday, 12 October 1 change

Malwarebytes 06:54

Paused HackerOne

Paused. Not accepting reports right now.

Sunday, 11 October 1 change

KHealth 11:58

Cut HackerOne

Top reward $5,000 to $3,000.

Thursday, 8 October 1 change

Instacart 07:25

Raised HackerOne

Top reward $15,000 to $20,000.

Wednesday, 7 October 2 changes

Publitas 18:25

Paused HackerOne

Paused. Not accepting reports right now.
Django 18:25

Paused HackerOne

Paused. Not accepting reports right now.

Tuesday, 6 October 2 changes

Algolia 14:45

Back HackerOne

Open for reports again.
MariaDB 12:34

Paused HackerOne

Paused. Not accepting reports right now.

Monday, 5 October 2 changes

MetaMask 16:35

Paused HackerOne

Paused. Not accepting reports right now.
ExpressionEngine 10:04

Paused HackerOne

Paused. Not accepting reports right now.

Thursday, 1 October 1 change

Zabbix 06:21

Paused HackerOne

Paused. Not accepting reports right now.

Wednesday, 30 September 4 changes

Algolia 17:36

Paused HackerOne

Paused. Not accepting reports right now.
MongoDB 14:46

Raised HackerOne

Top reward $7,500 to $8,500.
GoCardless Bug Bounty Program 12:29

Paused HackerOne

Paused. Not accepting reports right now.
Vercel Open Source 12:29

Paused HackerOne

Paused. Not accepting reports right now.

Friday, 25 September 1 change

GoCardless Bug Bounty Program 07:41

Closed HackerOne

No longer listed as a public program.

Monday, 21 September 1 change

Vercel Open Source 17:24

Closed HackerOne

No longer listed as a public program.

Sunday, 20 September 1 change

Files.com 14:24

Raised HackerOne

Top reward $15,000 to $50,000.