Is HackerOne a good place to start bug bounty hunting?

232 programs list a cash reward for Low-severity bugs, every program can be read without an account, 167 are known to answer within 3 days and 7 launched in the last 90 days.

HackerOne bug bounty programs

Web and apps US Updated 1 hour ago

HackerOne is a web and app bug bounty platform (US) with 594 public programs; 287 (48%) pay cash, with a median top reward of $8,000 and a highest of $1M.

Visit hackerone.com Browse all 594 programs

Public programs: 594
Pay cash (48%): 287
Median top reward: $8,000
Highest reward: $1M
No cash (VDP): 307
New, 30 / 90 days: 0 / 7
First response: 2 d
Reward changes, 90 d: +4 / −5

Is HackerOne a good place to start?

What matters most when you are new: rewards for small bugs, open access and quick answers.

232 programs list a cash reward for Low-severity bugs.
Every program can be read without an account.
167 are known to answer within 3 days.
7 launched in the last 90 days.

Pays for Low Fast responders

What hunters should know

The usual complaints about bug bounty platforms, and what the data says here.

Triage speed

Median first response is 2 days.

Based on 243 programs Answer within 3 days
Reward changes

4 reward raises and 5 cuts in the last 90 days.

Based on 594 programs
Low-severity bugs

232 programs list a cash reward for Low. 12 start at Medium or higher. 44 publish one top amount instead of a table, so Low isn't stated.

Based on 287 programs Pays for Low
Identity checks (KYC)

12 require KYC before paying, 0 say they don't; the rest don't say.

Based on 12 programs No KYC
Fees and deposits

No program here lists a fee or deposit per report.

Based on 594 programs
How you are paid

275 pay in fiat money and 12 in crypto.

Based on 287 programs Fiat only
Safe harbor

259 state full safe harbor and 68 partial.

Based on 327 programs Full safe harbor
Unclear scope

42 list no in-scope targets publicly: read the policy before testing.

Based on 594 programs

Highest-paying programs

See all

Crypto.com

crypto.com

$1M

Scope

24

First response

–

Top severity

Critical
Arc

circle.com

$200k

Scope

6

First response

5 d

Top severity

Critical

Safe harbor
Shopify

shopify.com

$200k

Scope

24

First response

–

Top severity

Critical
Chainlink

chain.link

$100k

Scope

8

First response

3 d

Top severity

Critical

Safe harbor
Superhuman (formerly Grammarly)

superhuman.com

$100k

Scope

29

First response

2 d

Top severity

Critical

Safe harbor
TRON DAO

tron.network

$100k

Scope

1

First response

5 d

Top severity

Critical

Safe harbor

Rewards by severity

Maximum reward per severity, from USD reward tables.

Severity	Programs	Median	Top
Critical	241	$8,000	$1M
High	244	$3,000	$50k
Medium	242	$800	$14k
Low	232	$250	$5,000

What you can test

44,300 in-scope targets across all programs.

Web 37,253
Wildcard 3,090
Other 1,297
Android 604
Network 560
Source code 537
iOS 504
Binary 178

Newest programs

Verisk VDP Launched 6 Oct 2026
No cash
Omarchy Launched 1 Oct 2026
$1,500
XP Inc Vulnerability Disclosure Launched 22 Sep 2026
No cash
Nebius AI Vulnerability Disclosure Launched 22 Sep 2026
No cash
d-you App & German EUDI Wallet Ecosystem Launched 16 Sep 2026
$15k
CoinDCX Vulnerability Disclosure Launched 3 Sep 2026
No cash

Recent changes

View all

Ferrero 1h ago

Scope + HackerOne

Added to scope: ferrero.integrityline.app
Divvy Homes 7h ago

Back HackerOne

Open for reports again.
Cloudflare Public Bug Bounty 12h ago

Scope + HackerOne

Added to scope: https://github.com/cloudflare/boringtun
Hilton 1d ago

Scope + HackerOne

Added to scope: *.hilton.com.cn
Unico IDtech 1d ago

Scope + HackerOne

Added to scope: developer.unico.io
Unico IDtech 1d ago

Scope + HackerOne

Added to scope: api.humantoken.unico.app
Unico IDtech 1d ago

Scope + HackerOne

Added to scope: humantoken.unico.app
Unico IDtech 1d ago

Scope + HackerOne

Added to scope: dashboard.unico.app

All 594 programs on HackerOne

Search and filter without leaving the page. Filters stay in the link, so you can share a view.

Sort

Filters

232 programs match · Highest reward

Programs, highest reward first
Program	Top severity	Scope	First response	Top reward
Crypto.com crypto.com	Critical	24	–	$1,000,000
Arc circle.com	Critical	6	5 d	$200,000
Shopify shopify.com New scope	Critical	24	–	$200,000
Chainlink chain.link	Critical	8	3 d	$100,000
TRON DAO tron.network	Critical	1	5 d	$100,000
Walt.io walt.io New scope	Critical	11	2 d	$100,000
Chia Network chia.net	Critical	9	2 d	$50,000
CoinSpot coinspot.com.au	Critical	4	5 d	$50,000
Deribit deribit.com	Critical	8	–	$50,000
Figma figma.com	Critical	8	1 d	$50,000
Files.com files.com	Critical	10	–	$50,000
Nintendo nintendo.com	Critical	7	–	$50,000
PlayStation playstation.com	Critical	24	–	$49,999
GitLab gitlab.com	Critical	19	1 d	$35,000
Snapchat snapchat.com	Critical	40	–	$35,000
1Password - Enterprise Password Manager 1password.com	Critical	4	3 d	$30,000
Amazon Vulnerability Research Program amazon.com	Critical	120	–	$30,000
BitMEX bitmex.com	Critical	4	–	$30,000
eero eero.com	Critical	5	–	$30,000
OKG okg.com	Critical	10	–	$30,000
PayPal paypal.com	Critical	42	2 d	$30,000
Ring ring.com	Critical	30	–	$30,000
Ubiquiti Inc. ui.com New scope	Critical	53	–	$30,000
Airbnb airbnb.com	Critical	27	2 d	$25,000
Anduril Industries anduril.com New scope	Critical	4	–	$25,000
Audible audible.com	Critical	4	–	$25,000
Epic Games epicgames.com New scope	Critical	85	–	$25,000
hostinger hostinger.com New scope	Critical	13	2 d	$25,000
Netflix netflix.com	Critical	30	7 d	$25,000
Ripio ripio.com	Critical	24	–	$25,000
Robinhood Markets Bounty robinhood.com	Critical	24	–	$25,000
Rockstar Games rockstargames.com	Critical	9	–	$25,000
Temu temu.com	Critical	6	2 d	$25,000
TikTok tiktok.com	Critical	35	–	$25,000
Tools for Humanity toolsforhumanity.com	Critical	22	1 d	$25,000
Exodus exodus.com New scope	Critical	28	5 d	$20,000
Instacart instacart.com	Critical	10	–	$20,000
MoonPay moonpay.com New scope	Critical	21	5 d	$20,000
Polygon Technology polygon.technology	Critical	8	2 d	$20,000
The Browser Company of NYC thebrowser.company	Critical	6	1 d	$20,000
Tinder tinder.com	Critical	8	–	$20,000
Wealthsimple wealthsimple.com	Critical	6	5 d	$20,000
XVIDEOS xvideos.com	Critical	5	5 d	$20,000
X / xAI x.com	Critical	23	2 d	$20,000
Slack slack.com	Critical	19	3 d	$17,000
CLEAR clearme.com	Critical	17	2 d	$15,000
d-you App & German EUDI Wallet Ecosystem common.codes	Critical	7	–	$15,000
EXNESS exness.com	Critical	14	2 d	$15,000
Goldman Sachs goldmansachs.com	Critical	39	–	$15,000
Grab grab.com	Critical	32	–	$15,000

Crypto.com

crypto.com

$1M

Scope

24

First response

–

Top severity

Critical
Arc

circle.com

$200k

Scope

6

First response

5 d

Top severity

Critical

Safe harbor
Shopify

shopify.com

$200k

Scope

24

First response

–

Top severity

Critical

New scope
Chainlink

chain.link

$100k

Scope

8

First response

3 d

Top severity

Critical

Safe harbor
TRON DAO

tron.network

$100k

Scope

1

First response

5 d

Top severity

Critical

Safe harbor
Walt.io

walt.io

$100k

Scope

11

First response

2 d

Top severity

Critical

New scope
Chia Network

chia.net

$50k

Scope

9

First response

2 d

Top severity

Critical

Safe harbor
CoinSpot

coinspot.com.au

$50k

Scope

4

First response

5 d

Top severity

Critical

Safe harbor
Deribit

deribit.com

$50k

Scope

8

First response

–

Top severity

Critical

Safe harbor
Figma

figma.com

$50k

Scope

8

First response

1 d

Top severity

Critical

Safe harbor
Files.com

files.com

$50k

Scope

10

First response

–

Top severity

Critical
Nintendo

nintendo.com

$50k

Scope

7

First response

–

Top severity

Critical
PlayStation

playstation.com

$50k

Scope

24

First response

–

Top severity

Critical

Safe harbor
GitLab

gitlab.com

$35k

Scope

19

First response

1 d

Top severity

Critical
Snapchat

snapchat.com

$35k

Scope

40

First response

–

Top severity

Critical

Safe harbor
1Password - Enterprise Password Manager

1password.com

$30k

Scope

4

First response

3 d

Top severity

Critical
Amazon Vulnerability Research Program

amazon.com

$30k

Scope

120

First response

–

Top severity

Critical
BitMEX

bitmex.com

$30k

Scope

4

First response

–

Top severity

Critical
eero

eero.com

$30k

Scope

5

First response

–

Top severity

Critical

Safe harbor
OKG

okg.com

$30k

Scope

10

First response

–

Top severity

Critical

Safe harbor
PayPal

paypal.com

$30k

Scope

42

First response

2 d

Top severity

Critical
Ring

ring.com

$30k

Scope

30

First response

–

Top severity

Critical

Safe harbor
Ubiquiti Inc.

ui.com

$30k

Scope

53

First response

–

Top severity

Critical

New scope
Airbnb

airbnb.com

$25k

Scope

27

First response

2 d

Top severity

Critical

Safe harbor
Anduril Industries

anduril.com

$25k

Scope

4

First response

–

Top severity

Critical

New scope
Audible

audible.com

$25k

Scope

4

First response

–

Top severity

Critical

Safe harbor
Epic Games

epicgames.com

$25k

Scope

85

First response

–

Top severity

Critical

New scope
hostinger

hostinger.com

$25k

Scope

13

First response

2 d

Top severity

Critical

New scope Safe harbor
Netflix

netflix.com

$25k

Scope

30

First response

7 d

Top severity

Critical

Safe harbor
Ripio

ripio.com

$25k

Scope

24

First response

–

Top severity

Critical

Safe harbor
Robinhood Markets Bounty

robinhood.com

$25k

Scope

24

First response

–

Top severity

Critical

Safe harbor
Rockstar Games

rockstargames.com

$25k

Scope

9

First response

–

Top severity

Critical
Temu

temu.com

$25k

Scope

6

First response

2 d

Top severity

Critical
TikTok

tiktok.com

$25k

Scope

35

First response

–

Top severity

Critical

Safe harbor
Tools for Humanity

toolsforhumanity.com

$25k

Scope

22

First response

1 d

Top severity

Critical

Safe harbor
Exodus

exodus.com

$20k

Scope

28

First response

5 d

Top severity

Critical

New scope Safe harbor
Instacart

instacart.com

$20k

Scope

10

First response

–

Top severity

Critical
MoonPay

moonpay.com

$20k

Scope

21

First response

5 d

Top severity

Critical

New scope Safe harbor
Polygon Technology

polygon.technology

$20k

Scope

8

First response

2 d

Top severity

Critical

Safe harbor
The Browser Company of NYC

thebrowser.company

$20k

Scope

6

First response

1 d

Top severity

Critical

Safe harbor
Tinder

tinder.com

$20k

Scope

8

First response

–

Top severity

Critical
Wealthsimple

wealthsimple.com

$20k

Scope

6

First response

5 d

Top severity

Critical

Safe harbor
XVIDEOS

xvideos.com

$20k

Scope

5

First response

5 d

Top severity

Critical
X / xAI

x.com

$20k

Scope

23

First response

2 d

Top severity

Critical
Slack

slack.com

$17k

Scope

19

First response

3 d

Top severity

Critical

Safe harbor
CLEAR

clearme.com

$15k

Scope

17

First response

2 d

Top severity

Critical

Safe harbor
d-you App & German EUDI Wallet Ecosystem

common.codes

$15k

Scope

7

First response

–

Top severity

Critical

Safe harbor
EXNESS

exness.com

$15k

Scope

14

First response

2 d

Top severity

Critical
Goldman Sachs

goldmansachs.com

$15k

Scope

39

First response

–

Top severity

Critical
Grab

grab.com

$15k

Scope

32

First response

–

Top severity

Critical