- Scope
- 11
- First response
- –
- Top severity
- Critical
Safe harbor
Bugcrowd bug bounty programs
Web and apps US Updated
Bugcrowd is a web and app bug bounty platform (US) with 305 public programs; 300 (98%) pay cash, with a median top reward of $3,500 and a highest of $3M.
- Public programs
- 305
- Pay cash (98%)
- 300
- Median top reward
- $3,500
- Highest reward
- $3M
- No cash (VDP)
- 5
- First response
- 4 d
- Reward changes, 90 d
- +2 / −1
Is Bugcrowd a good place to start?
What matters most when you are new: rewards for small bugs, open access and quick answers.
- 264 programs list a cash reward for Low-severity bugs.
- Every program can be read without an account.
- 6 are known to answer within 3 days.
What hunters should know
The usual complaints about bug bounty platforms, and what the data says here.
-
Triage speed
Median first response is 4 days.
Based on 12 programs Answer within 3 days -
Reward changes
2 reward raises and 1 cuts in the last 90 days.
Based on 305 programs -
Low-severity bugs
264 programs list a cash reward for Low. 35 start at Medium or higher. 1 publish one top amount instead of a table, so Low isn't stated.
Based on 300 programs Pays for Low -
Identity checks (KYC)
8 require KYC before paying, 0 say they don't; the rest don't say.
Based on 8 programs No KYC -
Fees and deposits
No program here lists a fee or deposit per report.
Based on 305 programs -
How you are paid
298 pay in fiat money and 2 in crypto.
Based on 300 programs Fiat only -
Safe harbor
240 state full safe harbor and 52 partial.
Based on 292 programs Full safe harbor -
Unclear scope
7 list no in-scope targets publicly: read the policy before testing.
Based on 305 programs
Highest-paying programs
See all- Scope
- 1
- First response
- –
- Top severity
- Critical
Safe harbor
- Scope
- 73
- First response
- –
- Top severity
- Critical
Safe harbor
- Scope
- 21
- First response
- –
- Top severity
- Critical
- Scope
- 13
- First response
- –
- Top severity
- Critical
- Scope
- 1
- First response
- –
- Top severity
- Critical
Safe harbor
Rewards by severity
Maximum reward per severity, from USD reward tables.
| Severity | Programs | Median | Top |
|---|---|---|---|
| Critical | 299 | $3,500 | $3M |
| High | 288 | $1,725 | $100k |
| Medium | 283 | $600 | $25k |
| Low | 264 | $200 | $10k |
All 305 programs on Bugcrowd
Search and filter without leaving the page. Filters stay in the link, so you can share a view.
6 programs match · Highest reward
-
- Scope
- 18
- First response
- 3 d
- Top severity
- Critical
Safe harbor
-
- Scope
- 8
- First response
- 2 d
- Top severity
- Critical
New scope Safe harbor
-
- Scope
- 5
- First response
- 2 d
- Top severity
- Critical
Safe harbor
-
- Scope
- 9
- First response
- 2 d
- Top severity
- Critical
Safe harbor
-
- Scope
- 92
- First response
- 3 d
- Top severity
- Critical
Safe harbor
-
- Scope
- 3
- First response
- 3 d
- Top severity
- –
