- Scope
- 7
- First response
- –
- Top severity
- Critical
Bugbase bug bounty programs
Web and apps IN Updated
Bugbase is a web and app bug bounty platform (IN) with 26 public programs; 4 (15%) pay cash, with a median top reward of $3,000 and a highest of $10k.
- Public programs
- 26
- Pay cash (15%)
- 4
- Median top reward
- $3,000
- Highest reward
- $10k
- No cash (VDP)
- 22
- New, 30 / 90 days
- 0 / 1
Is Bugbase a good place to start?
What matters most when you are new: rewards for small bugs, open access and quick answers.
- 3 programs list a cash reward for Low-severity bugs.
- Every program can be read without an account.
- 1 launched in the last 90 days.
What hunters should know
The usual complaints about bug bounty platforms, and what the data says here.
-
Low-severity bugs
3 programs list a cash reward for Low. 1 start at Medium or higher.
Based on 4 programs Pays for Low -
Fees and deposits
No program here lists a fee or deposit per report.
Based on 26 programs -
How you are paid
4 pay in fiat money and 0 in crypto.
Based on 4 programs -
Unclear scope
1 list no in-scope targets publicly: read the policy before testing.
Based on 26 programs
Highest-paying programs
See all- Scope
- 8
- First response
- –
- Top severity
- Critical
- Scope
- 6
- First response
- –
- Top severity
- Critical
- Scope
- 1
- First response
- –
- Top severity
- Critical
- Scope
- 9
- First response
- –
- Top severity
- –
- Scope
- 1
- First response
- –
- Top severity
- –
Rewards by severity
Maximum reward per severity, from USD reward tables.
| Severity | Programs | Median | Top |
|---|---|---|---|
| Critical | 4 | $3,000 | $10k |
| High | 4 | $1,250 | $4,000 |
| Medium | 4 | $500 | $500 |
| Low | 3 | $200 | $250 |
All 26 programs on Bugbase
Search and filter without leaving the page. Filters stay in the link, so you can share a view.
26 programs · Highest reward
-
- Scope
- 7
- First response
- –
- Top severity
- Critical
-
- Scope
- 8
- First response
- –
- Top severity
- Critical
-
- Scope
- 6
- First response
- –
- Top severity
- Critical
-
- Scope
- 1
- First response
- –
- Top severity
- Critical
-
- Scope
- 9
- First response
- –
- Top severity
- –
-
- Scope
- 1
- First response
- –
- Top severity
- –
-
- Scope
- 2
- First response
- –
- Top severity
- –
-
- Scope
- 2
- First response
- –
- Top severity
- –
-
- Scope
- 5
- First response
- –
- Top severity
- –
-
- Scope
- 2
- First response
- –
- Top severity
- –
-
- Scope
- 1
- First response
- –
- Top severity
- –
-
- Scope
- 1
- First response
- –
- Top severity
- –
-
- Scope
- –
- First response
- –
- Top severity
- –
-
- Scope
- 10
- First response
- –
- Top severity
- –
-
- Scope
- 3
- First response
- –
- Top severity
- –
-
- Scope
- 1
- First response
- –
- Top severity
- –
-
- Scope
- 1
- First response
- –
- Top severity
- –
-
- Scope
- 2
- First response
- –
- Top severity
- –
-
- Scope
- 4
- First response
- –
- Top severity
- –
-
- Scope
- 10
- First response
- –
- Top severity
- –
-
- Scope
- 1
- First response
- –
- Top severity
- –
-
- Scope
- 2
- First response
- –
- Top severity
- –
-
- Scope
- 3
- First response
- –
- Top severity
- –
-
- Scope
- 1
- First response
- –
- Top severity
- –
Paused
-
- Scope
- 1
- First response
- –
- Top severity
- –
Paused
-
- Scope
- 2
- First response
- –
- Top severity
- –
Paused