Is HackerOne a good place to start bug bounty hunting?

232 programs list a cash reward for Low-severity bugs, every program can be read without an account, 167 are known to answer within 3 days and 7 launched in the last 90 days.

HackerOne bug bounty programs

Web and apps US Updated 1 hour ago

HackerOne is a web and app bug bounty platform (US) with 594 public programs; 287 (48%) pay cash, with a median top reward of $8,000 and a highest of $1M.

Visit hackerone.com Browse all 594 programs

Public programs: 594
Pay cash (48%): 287
Median top reward: $8,000
Highest reward: $1M
No cash (VDP): 307
New, 30 / 90 days: 0 / 7
First response: 2 d
Reward changes, 90 d: +4 / −5

Is HackerOne a good place to start?

What matters most when you are new: rewards for small bugs, open access and quick answers.

232 programs list a cash reward for Low-severity bugs.
Every program can be read without an account.
167 are known to answer within 3 days.
7 launched in the last 90 days.

Pays for Low Fast responders

What hunters should know

The usual complaints about bug bounty platforms, and what the data says here.

Triage speed

Median first response is 2 days.

Based on 243 programs Answer within 3 days
Reward changes

4 reward raises and 5 cuts in the last 90 days.

Based on 594 programs
Low-severity bugs

232 programs list a cash reward for Low. 12 start at Medium or higher. 44 publish one top amount instead of a table, so Low isn't stated.

Based on 287 programs Pays for Low
Identity checks (KYC)

12 require KYC before paying, 0 say they don't; the rest don't say.

Based on 12 programs No KYC
Fees and deposits

No program here lists a fee or deposit per report.

Based on 594 programs
How you are paid

275 pay in fiat money and 12 in crypto.

Based on 287 programs Fiat only
Safe harbor

259 state full safe harbor and 68 partial.

Based on 327 programs Full safe harbor
Unclear scope

42 list no in-scope targets publicly: read the policy before testing.

Based on 594 programs

Highest-paying programs

See all

Crypto.com

crypto.com

$1M

Scope

24

First response

–

Top severity

Critical
Arc

circle.com

$200k

Scope

6

First response

5 d

Top severity

Critical

Safe harbor
Shopify

shopify.com

$200k

Scope

24

First response

–

Top severity

Critical
Chainlink

chain.link

$100k

Scope

8

First response

3 d

Top severity

Critical

Safe harbor
Superhuman (formerly Grammarly)

superhuman.com

$100k

Scope

29

First response

2 d

Top severity

Critical

Safe harbor
TRON DAO

tron.network

$100k

Scope

1

First response

5 d

Top severity

Critical

Safe harbor

Rewards by severity

Maximum reward per severity, from USD reward tables.

Severity	Programs	Median	Top
Critical	241	$8,000	$1M
High	244	$3,000	$50k
Medium	242	$800	$14k
Low	232	$250	$5,000

What you can test

44,300 in-scope targets across all programs.

Web 37,253
Wildcard 3,090
Other 1,297
Android 604
Network 560
Source code 537
iOS 504
Binary 178

Newest programs

Verisk VDP Launched 6 Oct 2026
No cash
Omarchy Launched 1 Oct 2026
$1,500
XP Inc Vulnerability Disclosure Launched 22 Sep 2026
No cash
Nebius AI Vulnerability Disclosure Launched 22 Sep 2026
No cash
d-you App & German EUDI Wallet Ecosystem Launched 16 Sep 2026
$15k
CoinDCX Vulnerability Disclosure Launched 3 Sep 2026
No cash

Recent changes

View all

Ferrero 1h ago

Scope + HackerOne

Added to scope: ferrero.integrityline.app
Divvy Homes 7h ago

Back HackerOne

Open for reports again.
Cloudflare Public Bug Bounty 12h ago

Scope + HackerOne

Added to scope: https://github.com/cloudflare/boringtun
Hilton 1d ago

Scope + HackerOne

Added to scope: *.hilton.com.cn
Unico IDtech 1d ago

Scope + HackerOne

Added to scope: developer.unico.io
Unico IDtech 1d ago

Scope + HackerOne

Added to scope: api.humantoken.unico.app
Unico IDtech 1d ago

Scope + HackerOne

Added to scope: humantoken.unico.app
Unico IDtech 1d ago

Scope + HackerOne

Added to scope: dashboard.unico.app

All 594 programs on HackerOne

Search and filter without leaving the page. Filters stay in the link, so you can share a view.

Sort

Filters

259 programs match · Highest reward

Programs, highest reward first
Program	Top severity	Scope	First response	Top reward
Arc circle.com	Critical	6	5 d	$200,000
Chainlink chain.link	Critical	8	3 d	$100,000
Superhuman (formerly Grammarly) superhuman.com	Critical	29	2 d	$100,000
TRON DAO tron.network	Critical	1	5 d	$100,000
Chia Network chia.net	Critical	9	2 d	$50,000
CoinSpot coinspot.com.au	Critical	4	5 d	$50,000
Deribit deribit.com	Critical	8	–	$50,000
Figma figma.com	Critical	8	1 d	$50,000
PlayStation playstation.com	Critical	24	–	$49,999
Snapchat snapchat.com	Critical	40	–	$35,000
eero eero.com	Critical	5	–	$30,000
OKG okg.com	Critical	10	–	$30,000
Ring ring.com	Critical	30	–	$30,000
Airbnb airbnb.com	Critical	27	2 d	$25,000
Audible audible.com	Critical	4	–	$25,000
hostinger hostinger.com New scope	Critical	13	2 d	$25,000
Netflix netflix.com	Critical	30	7 d	$25,000
Ripio ripio.com	Critical	24	–	$25,000
Robinhood Markets Bounty robinhood.com	Critical	24	–	$25,000
TikTok tiktok.com	Critical	35	–	$25,000
Tools for Humanity toolsforhumanity.com	Critical	22	1 d	$25,000
Wickr wickr.com	Critical	13	–	$25,000
Exodus exodus.com New scope	Critical	28	5 d	$20,000
MoonPay moonpay.com New scope	Critical	21	5 d	$20,000
Polygon Technology polygon.technology	Critical	8	2 d	$20,000
The Browser Company of NYC thebrowser.company	Critical	6	1 d	$20,000
Wealthsimple wealthsimple.com	Critical	6	5 d	$20,000
Slack slack.com	Critical	19	3 d	$17,000
CLEAR clearme.com	Critical	17	2 d	$15,000
Coinbase coinbase.com	Critical	16	–	$15,000
d-you App & German EUDI Wallet Ecosystem common.codes	Critical	7	–	$15,000
LinkedIn linkedin.com	Critical	5	2 d	$15,000
MercadoLibre mercadolibre.com New scope	Critical	78	2 d	$15,000
Uber uber.com	Critical	4	14 d	$15,000
Wells Fargo Bounty wellsfargo.com	Critical	14	2 d	$15,000
Early Warning earlywarning.com New scope	Critical	17	1 d	$12,000
Marriott Bug Bounty Program marriott.com New scope	Critical	59	2 d	$11,000
Quora quora.com	Critical	4	–	$11,000
Acronis acronis.com	Critical	21	5 d	$10,000
Anthropic anthropic.com	Critical	14	3 d	$10,000
Bybit Fintech Ltd bybit.com New scope	Critical	14	2 d	$10,000
Doppler doppler.com	Critical	6	2 d	$10,000
Front front.com	Critical	6	–	$10,000
GitHub github.com	Critical	27	–	$10,000
Hilton hilton.com New scope	Critical	24	5 d	$10,000
Hyatt Hotels hyatt.com	Critical	59	1 d	$10,000
Kubernetes kubernetes.io	Critical	82	1 d	$10,000
Magic Eden magiceden.io	Critical	2	–	$10,000
Mergify mergify.com	Critical	2	5 d	$10,000
Oasis Protocol Foundation oasisprotocol.org	Critical	13	2 d	$10,000

Arc

circle.com

$200k

Scope

6

First response

5 d

Top severity

Critical

Safe harbor
Chainlink

chain.link

$100k

Scope

8

First response

3 d

Top severity

Critical

Safe harbor
Superhuman (formerly Grammarly)

superhuman.com

$100k

Scope

29

First response

2 d

Top severity

Critical

Safe harbor
TRON DAO

tron.network

$100k

Scope

1

First response

5 d

Top severity

Critical

Safe harbor
Chia Network

chia.net

$50k

Scope

9

First response

2 d

Top severity

Critical

Safe harbor
CoinSpot

coinspot.com.au

$50k

Scope

4

First response

5 d

Top severity

Critical

Safe harbor
Deribit

deribit.com

$50k

Scope

8

First response

–

Top severity

Critical

Safe harbor
Figma

figma.com

$50k

Scope

8

First response

1 d

Top severity

Critical

Safe harbor
PlayStation

playstation.com

$50k

Scope

24

First response

–

Top severity

Critical

Safe harbor
Snapchat

snapchat.com

$35k

Scope

40

First response

–

Top severity

Critical

Safe harbor
eero

eero.com

$30k

Scope

5

First response

–

Top severity

Critical

Safe harbor
OKG

okg.com

$30k

Scope

10

First response

–

Top severity

Critical

Safe harbor
Ring

ring.com

$30k

Scope

30

First response

–

Top severity

Critical

Safe harbor
Airbnb

airbnb.com

$25k

Scope

27

First response

2 d

Top severity

Critical

Safe harbor
Audible

audible.com

$25k

Scope

4

First response

–

Top severity

Critical

Safe harbor
hostinger

hostinger.com

$25k

Scope

13

First response

2 d

Top severity

Critical

New scope Safe harbor
Netflix

netflix.com

$25k

Scope

30

First response

7 d

Top severity

Critical

Safe harbor
Ripio

ripio.com

$25k

Scope

24

First response

–

Top severity

Critical

Safe harbor
Robinhood Markets Bounty

robinhood.com

$25k

Scope

24

First response

–

Top severity

Critical

Safe harbor
TikTok

tiktok.com

$25k

Scope

35

First response

–

Top severity

Critical

Safe harbor
Tools for Humanity

toolsforhumanity.com

$25k

Scope

22

First response

1 d

Top severity

Critical

Safe harbor
Wickr

wickr.com

$25k

Scope

13

First response

–

Top severity

Critical

Safe harbor
Exodus

exodus.com

$20k

Scope

28

First response

5 d

Top severity

Critical

New scope Safe harbor
MoonPay

moonpay.com

$20k

Scope

21

First response

5 d

Top severity

Critical

New scope Safe harbor
Polygon Technology

polygon.technology

$20k

Scope

8

First response

2 d

Top severity

Critical

Safe harbor
The Browser Company of NYC

thebrowser.company

$20k

Scope

6

First response

1 d

Top severity

Critical

Safe harbor
Wealthsimple

wealthsimple.com

$20k

Scope

6

First response

5 d

Top severity

Critical

Safe harbor
Slack

slack.com

$17k

Scope

19

First response

3 d

Top severity

Critical

Safe harbor
CLEAR

clearme.com

$15k

Scope

17

First response

2 d

Top severity

Critical

Safe harbor
Coinbase

coinbase.com

$15k

Scope

16

First response

–

Top severity

Critical

Safe harbor
d-you App & German EUDI Wallet Ecosystem

common.codes

$15k

Scope

7

First response

–

Top severity

Critical

Safe harbor
LinkedIn

linkedin.com

$15k

Scope

5

First response

2 d

Top severity

Critical

Safe harbor
MercadoLibre

mercadolibre.com

$15k

Scope

78

First response

2 d

Top severity

Critical

New scope Safe harbor
Uber

uber.com

$15k

Scope

4

First response

14 d

Top severity

Critical

Safe harbor
Wells Fargo Bounty

wellsfargo.com

$15k

Scope

14

First response

2 d

Top severity

Critical

Safe harbor
Early Warning

earlywarning.com

$12k

Scope

17

First response

1 d

Top severity

Critical

New scope Safe harbor
Marriott Bug Bounty Program

marriott.com

$11k

Scope

59

First response

2 d

Top severity

Critical

New scope Safe harbor
Quora

quora.com

$11k

Scope

4

First response

–

Top severity

Critical

Safe harbor
Acronis

acronis.com

$10k

Scope

21

First response

5 d

Top severity

Critical

Safe harbor
Anthropic

anthropic.com

$10k

Scope

14

First response

3 d

Top severity

Critical

Safe harbor
Bybit Fintech Ltd

bybit.com

$10k

Scope

14

First response

2 d

Top severity

Critical

New scope Safe harbor
Doppler

doppler.com

$10k

Scope

6

First response

2 d

Top severity

Critical

Safe harbor
Front

front.com

$10k

Scope

6

First response

–

Top severity

Critical

Safe harbor
GitHub

github.com

$10k

Scope

27

First response

–

Top severity

Critical

Safe harbor
Hilton

hilton.com

$10k

Scope

24

First response

5 d

Top severity

Critical

New scope Safe harbor
Hyatt Hotels

hyatt.com

$10k

Scope

59

First response

1 d

Top severity

Critical

Safe harbor
Kubernetes

kubernetes.io

$10k

Scope

82

First response

1 d

Top severity

Critical

Safe harbor
Magic Eden

magiceden.io

$10k

Scope

2

First response

–

Top severity

Critical

Safe harbor
Mergify

mergify.com

$10k

Scope

2

First response

5 d

Top severity

Critical

Safe harbor
Oasis Protocol Foundation

oasisprotocol.org

$10k

Scope

13

First response

2 d

Top severity

Critical

Safe harbor