Is Bugcrowd a good place to start bug bounty hunting?

264 programs list a cash reward for Low-severity bugs, every program can be read without an account and 6 are known to answer within 3 days.

Bugcrowd bug bounty programs

Web and apps US Updated 1 hour ago

Bugcrowd is a web and app bug bounty platform (US) with 305 public programs; 300 (98%) pay cash, with a median top reward of $3,500 and a highest of $3M.

Visit bugcrowd.com Browse all 305 programs

Public programs: 305
Pay cash (98%): 300
Median top reward: $3,500
Highest reward: $3M
No cash (VDP): 5
First response: 4 d
Reward changes, 90 d: +2 / −1

Is Bugcrowd a good place to start?

What matters most when you are new: rewards for small bugs, open access and quick answers.

264 programs list a cash reward for Low-severity bugs.
Every program can be read without an account.
6 are known to answer within 3 days.

Pays for Low Fast responders

What hunters should know

The usual complaints about bug bounty platforms, and what the data says here.

Triage speed

Median first response is 4 days.

Based on 12 programs Answer within 3 days
Reward changes

2 reward raises and 1 cuts in the last 90 days.

Based on 305 programs
Low-severity bugs

264 programs list a cash reward for Low. 35 start at Medium or higher. 1 publish one top amount instead of a table, so Low isn't stated.

Based on 300 programs Pays for Low
Identity checks (KYC)

8 require KYC before paying, 0 say they don't; the rest don't say.

Based on 8 programs No KYC
Fees and deposits

No program here lists a fee or deposit per report.

Based on 305 programs
How you are paid

298 pay in fiat money and 2 in crypto.

Based on 300 programs Fiat only
Safe harbor

240 state full safe harbor and 52 partial.

Based on 292 programs Full safe harbor
Unclear scope

7 list no in-scope targets publicly: read the policy before testing.

Based on 305 programs

Highest-paying programs

See all

OpenSea Managed Bug Bounty Program

opensea.io

$3M
from $125

Scope

11

First response

–

Top severity

Critical

Safe harbor
Fireblocks MPC Managed Bug Bounty Engagement

$150k
from $200

Scope

1

First response

–

Top severity

Critical

Safe harbor
T-Mobile

t-mobile.com

$133.7k
from $12k

Scope

73

First response

–

Top severity

Critical

Safe harbor
Binance

binance.com

$100k
from $200

Scope

21

First response

–

Top severity

Critical
OpenAI

openai.com

$100k
from $250

Scope

13

First response

–

Top severity

Critical
SpaceX/Starlink

spacex.com

$100k

Scope

1

First response

–

Top severity

Critical

Safe harbor

Rewards by severity

Maximum reward per severity, from USD reward tables.

Severity	Programs	Median	Top
Critical	299	$3,500	$3M
High	288	$1,725	$100k
Medium	283	$600	$25k
Low	264	$200	$10k

What you can test

2,971 in-scope targets across all programs.

Web 1,546
Other 501
API 267
Network 207
Wildcard 138
iOS 128
Android 126
Hardware 50

Newest programs

Bugcrowd Bug Bounty Launched 24 Jun 2026
$20
MATLAB Online - Ongoing Bug Bounty Engagement Launched 6 May 2026
$7,000
Hypixel Studios Managed Bug Bounty Engagement Launched 24 Feb 2026
$25k
Snapbytes Marketplace Managed Bug Bounty Engagement Launched 13 Jan 2026
$1,500
TheFork Managed Bug Bounty Engagement Launched 9 Dec 2025
$3,500
VR Public Managed Bug Bounty Engagement Launched 21 Oct 2025
$5,000

Recent changes

View all

Moneytree KK 17h ago

Scope − Bugcrowd

Removed from scope: https://fitbit-lottery.getmoneytree.com/
Optus Managed Bug Bounty 17h ago

Scope + Bugcrowd

Added to scope: brand.optus.com.au
Moneytree KK 18h ago

Scope + Bugcrowd

Added to scope: https://fitbit-lottery-staging.getmoneytree.com/
Easy Agile 1d ago

Scope + Bugcrowd

Added to scope: https://marketplace.atlassian.com/apps/1219491/easy-agile-programs-pi-planning-program-board-dependencies?hosting=cloud&tab=overview
Bitpanda Ongoing Bug Bounty 2d ago

Scope + Bugcrowd

Added to scope: https://login.bitpanda.com
City of Vienna Managed Bug Bounty 3d ago

Scope + Bugcrowd

Added to scope: https://data.wien.gv.at/daten/*
Resolution 1w ago

Scope + Bugcrowd

Added to scope: https://marketplace.atlassian.com/apps/1228240/hubspot-jira-crm-issue-link-integration-collaboration?hosting=cloud&tab=overview
Cvent Bug Bounty 1w ago

Scope + Bugcrowd

Added to scope: https://accounts.app.cvent.com/paygo/signup

All 305 programs on Bugcrowd

Search and filter without leaving the page. Filters stay in the link, so you can share a view.

Sort

Filters

240 programs match · Highest reward

Programs, highest reward first
Program	Top severity	Scope	First response	Top reward
OpenSea Managed Bug Bounty Program opensea.io	Critical	11	–	$3,000,000 from $125
Fireblocks MPC Managed Bug Bounty Engagement	Critical	1	–	$150,000 from $200
T-Mobile t-mobile.com	Critical	73	–	$133,700 from $12k
SpaceX/Starlink spacex.com	Critical	1	–	$100,000
Sophos sophos.com	Critical	14	–	$80,000 from $100
Okta okta.com	Critical	20	–	$75,000 from $100
Auth0 by Okta auth0.com	Critical	26	–	$50,000 from $100
AXIS OS axis.com	Critical	1	–	$50,000 from $500
Zendesk Managed Bug Bounty Engagement	Critical	6	–	$50,000 from $100
Aiven Managed Bug Bounty aiven.io	Critical	16	–	$25,000 from $50
Bullish Exchange bullish.com	Critical	2	–	$25,000 from $200
Hypixel Studios Managed Bug Bounty Engagement hytale.com	Critical	10	–	$25,000 from $300
Pinterest pinterest.com	Critical	13	–	$25,000 from $200
Chime Managed Bug Bounty Engagement chime.com	Critical	19	–	$20,000 from $50
FIS fisglobal.com	Critical	2	5 d	$20,000 from $200
SAP Invitational Bug Bounty Program	Critical	25	–	$20,000 from $250
Cash App cash.app	Critical	4	–	$18,000 from $100
Square squareup.com	Critical	7	–	$18,000 from $250
Backblaze backblaze.com	Critical	9	–	$15,000 from $500
Bitdefender bitdefender.com	Critical	5	–	$15,000 from $100
Bitpanda Ongoing Bug Bounty bitpanda.com New scope	Critical	11	–	$15,000 from $100
Bitso Managed Bug Bounty Engagement bitso.com	Critical	8	–	$15,000 from $100
eToro Managed Bug Bounty Engagement etoro.com	Critical	8	–	$15,000 from $100
Atlassian atlassian.com	Critical	48	–	$12,000 from $100
Bullish.com bullish.com	Critical	2	–	$12,000 from $200
Electroneum Legacy Blockchain: EOL electroneum.com	Critical	2	–	$12,000 from $200
Electroneum Smart Chain (ETN-SC) — EVM-Compatible Blockchain electroneum.com	Critical	3	–	$12,000 from $200
Fireblocks Web Managed Bug Bounty Engagement fireblocks.io	Critical	3	–	$12,000 from $20
Trello trello.com	Critical	13	–	$12,000 from $250
Blockchain.com Managed Bug Bounty Engagement blockchain.com	Critical	5	–	$10,000 from $100
Bugcrowd bugcrowd.net	Critical	8	–	$10,000 from $100
Entain Game Logic Flaws Bug Bounty Program	Critical	6	–	$10,000 from $300
Immutable Bug Bounty immutable.com	Critical	7	–	$10,000 from $25
Indeed indeed.com	Critical	17	–	$10,000 from $50
Monash University Bug Bounty monash.edu	Critical	47	–	$10,000 from $50
Opera Public Bug Bounty opera.com	Critical	89	–	$10,000 from $50
Orderly Network: Bug Bounty Program	Critical	2	–	$10,000 from $200
SEEK seek.com	Critical	18	–	$10,000 from $50
Xfinity Home & xFi	Critical	18	–	$10,000 from $300
Skyscanner skyscanner.net	Critical	8	–	$8,000 from $100
Vinted Bug Bounty vinted.com	Critical	11	–	$8,000 from $75
CoinDesk.com coindesk.com	Critical	1	–	$7,500 from $250
CoinDesk Data - Data API coindesk.com	Critical	2	–	$7,500 from $250
CoinDesk Mobile coindesk.com	Critical	2	–	$7,500 from $250
Consensus by CoinDesk coindesk.com	Critical	1	–	$7,500 from $250
Fivetran fivetran.com New scope	Critical	4	–	$7,500 from $100
Latitude Financial Services Bug Bounty latitudefinancial.com	Critical	26	–	$7,500 from $150
LaunchDarkly Managed Bug Bounty Engagement launchdarkly.com	Critical	6	–	$7,500 from $150
Lightspeed Hospitality lightspeedhq.com	Critical	3	–	$7,500 from $250
Lightspeed Retail lightspeedhq.com	Critical	6	–	$7,500 from $250

OpenSea Managed Bug Bounty Program

opensea.io

$3M
from $125

Scope

11

First response

–

Top severity

Critical

Safe harbor
Fireblocks MPC Managed Bug Bounty Engagement

$150k
from $200

Scope

1

First response

–

Top severity

Critical

Safe harbor
T-Mobile

t-mobile.com

$133.7k
from $12k

Scope

73

First response

–

Top severity

Critical

Safe harbor
SpaceX/Starlink

spacex.com

$100k

Scope

1

First response

–

Top severity

Critical

Safe harbor
Sophos

sophos.com

$80k
from $100

Scope

14

First response

–

Top severity

Critical

Safe harbor
Okta

okta.com

$75k
from $100

Scope

20

First response

–

Top severity

Critical

Safe harbor
Auth0 by Okta

auth0.com

$50k
from $100

Scope

26

First response

–

Top severity

Critical

Safe harbor
AXIS OS

axis.com

$50k
from $500

Scope

1

First response

–

Top severity

Critical

Safe harbor
Zendesk Managed Bug Bounty Engagement

$50k
from $100

Scope

6

First response

–

Top severity

Critical

Safe harbor
Aiven Managed Bug Bounty

aiven.io

$25k
from $50

Scope

16

First response

–

Top severity

Critical

Safe harbor
Bullish Exchange

bullish.com

$25k
from $200

Scope

2

First response

–

Top severity

Critical

Safe harbor
Hypixel Studios Managed Bug Bounty Engagement

hytale.com

$25k
from $300

Scope

10

First response

–

Top severity

Critical

Safe harbor
Pinterest

pinterest.com

$25k
from $200

Scope

13

First response

–

Top severity

Critical

Safe harbor
Chime Managed Bug Bounty Engagement

chime.com

$20k
from $50

Scope

19

First response

–

Top severity

Critical

Safe harbor
FIS

fisglobal.com

$20k
from $200

Scope

2

First response

5 d

Top severity

Critical

Safe harbor
SAP Invitational Bug Bounty Program

$20k
from $250

Scope

25

First response

–

Top severity

Critical

Safe harbor
Cash App

cash.app

$18k
from $100

Scope

4

First response

–

Top severity

Critical

Safe harbor
Square

squareup.com

$18k
from $250

Scope

7

First response

–

Top severity

Critical

Safe harbor
Backblaze

backblaze.com

$15k
from $500

Scope

9

First response

–

Top severity

Critical

Safe harbor
Bitdefender

bitdefender.com

$15k
from $100

Scope

5

First response

–

Top severity

Critical

Safe harbor
Bitpanda Ongoing Bug Bounty

bitpanda.com

$15k
from $100

Scope

11

First response

–

Top severity

Critical

New scope Safe harbor
Bitso Managed Bug Bounty Engagement

bitso.com

$15k
from $100

Scope

8

First response

–

Top severity

Critical

Safe harbor
eToro Managed Bug Bounty Engagement

etoro.com

$15k
from $100

Scope

8

First response

–

Top severity

Critical

Safe harbor
Atlassian

atlassian.com

$12k
from $100

Scope

48

First response

–

Top severity

Critical

Safe harbor
Bullish.com

bullish.com

$12k
from $200

Scope

2

First response

–

Top severity

Critical

Safe harbor
Electroneum Legacy Blockchain: EOL

electroneum.com

$12k
from $200

Scope

2

First response

–

Top severity

Critical

Safe harbor
Electroneum Smart Chain (ETN-SC) — EVM-Compatible Blockchain

electroneum.com

$12k
from $200

Scope

3

First response

–

Top severity

Critical

Safe harbor
Fireblocks Web Managed Bug Bounty Engagement

fireblocks.io

$12k
from $20

Scope

3

First response

–

Top severity

Critical

Safe harbor
Trello

trello.com

$12k
from $250

Scope

13

First response

–

Top severity

Critical

Safe harbor
Blockchain.com Managed Bug Bounty Engagement

blockchain.com

$10k
from $100

Scope

5

First response

–

Top severity

Critical

Safe harbor
Bugcrowd

bugcrowd.net

$10k
from $100

Scope

8

First response

–

Top severity

Critical

Safe harbor
Entain Game Logic Flaws Bug Bounty Program

$10k
from $300

Scope

6

First response

–

Top severity

Critical

Safe harbor
Immutable Bug Bounty

immutable.com

$10k
from $25

Scope

7

First response

–

Top severity

Critical

Safe harbor
Indeed

indeed.com

$10k
from $50

Scope

17

First response

–

Top severity

Critical

Safe harbor
Monash University Bug Bounty

monash.edu

$10k
from $50

Scope

47

First response

–

Top severity

Critical

Safe harbor
Opera Public Bug Bounty

opera.com

$10k
from $50

Scope

89

First response

–

Top severity

Critical

Safe harbor
Orderly Network: Bug Bounty Program

$10k
from $200

Scope

2

First response

–

Top severity

Critical

Safe harbor
SEEK

seek.com

$10k
from $50

Scope

18

First response

–

Top severity

Critical

Safe harbor
Xfinity Home & xFi

$10k
from $300

Scope

18

First response

–

Top severity

Critical

Safe harbor
Skyscanner

skyscanner.net

$8,000
from $100

Scope

8

First response

–

Top severity

Critical

Safe harbor
Vinted Bug Bounty

vinted.com

$8,000
from $75

Scope

11

First response

–

Top severity

Critical

Safe harbor
CoinDesk.com

coindesk.com

$7,500
from $250

Scope

1

First response

–

Top severity

Critical

Safe harbor
CoinDesk Data - Data API

coindesk.com

$7,500
from $250

Scope

2

First response

–

Top severity

Critical

Safe harbor
CoinDesk Mobile

coindesk.com

$7,500
from $250

Scope

2

First response

–

Top severity

Critical

Safe harbor
Consensus by CoinDesk

coindesk.com

$7,500
from $250

Scope

1

First response

–

Top severity

Critical

Safe harbor
Fivetran

fivetran.com

$7,500
from $100

Scope

4

First response

–

Top severity

Critical

New scope Safe harbor
Latitude Financial Services Bug Bounty

latitudefinancial.com

$7,500
from $150

Scope

26

First response

–

Top severity

Critical

Safe harbor
LaunchDarkly Managed Bug Bounty Engagement

launchdarkly.com

$7,500
from $150

Scope

6

First response

–

Top severity

Critical

Safe harbor
Lightspeed Hospitality

lightspeedhq.com

$7,500
from $250

Scope

3

First response

–

Top severity

Critical

Safe harbor
Lightspeed Retail

lightspeedhq.com

$7,500
from $250

Scope

6

First response

–

Top severity

Critical

Safe harbor