How many bug bounty programs does Self-hosted programs have?

Self-hosted programs

Web and apps Global Updated 6 hours ago

2,175 companies run their own bug bounty or disclosure program; 641 of them pay cash.

Companies that run their own program on their own site.

Browse all 2,175 programs

Public programs: 2,175
Pay cash (29%): 641
Median top reward: $4,999.50
Highest reward: $5M
No cash (VDP): 1,534
New, 30 / 90 days: 4 / 6
First response: 3 d
Reward changes, 90 d: +3 / −0

What hunters should know

The usual complaints about bug bounty platforms, and what the data says here.

Triage speed

Median first response is 3 days.

Based on 618 programs Answer within 3 days
Reward changes

3 reward raises and 0 cuts in the last 90 days.

Based on 2,175 programs
Low-severity bugs

35 programs list a cash reward for Low. 15 start at Medium or higher. 591 publish one top amount instead of a table, so Low isn't stated.

Based on 641 programs Pays for Low
Identity checks (KYC)

32 require KYC before paying, 3 say they don't; the rest don't say.

Based on 35 programs No KYC
Fees and deposits

No program here lists a fee or deposit per report.

Based on 2,175 programs
How you are paid

591 pay in fiat money and 50 in crypto.

Based on 641 programs Fiat only
Safe harbor

433 state full safe harbor and 292 partial.

Based on 1,030 programs Full safe harbor
Unclear scope

830 list no in-scope targets publicly: read the policy before testing.

Based on 2,175 programs

Highest-paying programs

See all

Apple Security Bounty

apple.com

$5M

Scope

3

First response

–

Top severity

–
Android and Google Devices Security Rewards

google.com

$1.5M

Scope

8

First response

–

Top severity

–
Across Protocol

across.to

$1M
from $250

Scope

3

First response

–

Top severity

Critical
Coinbase

coinbase.com

$1M
from $1

Scope

2

First response

–

Top severity

–

Safe harbor
Dapper Labs

dapperlabs.com

$1M

Scope

7

First response

–

Top severity

–
Ethereum Foundation Bug Bounty

ethereum.org

$1M
from $2,000

Scope

34

First response

7 d

Top severity

–

Rewards by severity

Maximum reward per severity, from USD reward tables.

Severity	Programs	Median	Top
Critical	43	$5,000	$1M
High	42	$2,000	$150k
Medium	41	$500	$100k
Low	31	$200	$3,000

What you can test

7,931 in-scope targets across all programs.

Domain 4,213
Other 1,230
Wildcard 1,080
Source code 390
API 289
Android 263
Web 182
Network 79

Newest programs

SunLicense Launched 6 Nov 2026
No cash
Vanthal Launched 5 Nov 2026
No cash
Noctula Risk Intelligence Launched 31 Oct 2026
No cash
SUHUL LLC Launched 21 Oct 2026
No cash
MCPBay Launched 11 Oct 2026
No cash
Exception Security Launched 19 Sep 2026
No cash

Recent changes

View all

Fyxer 6h ago

Raised Self-hosted

Top reward now listed: $10,000.
Telekom 6h ago

Raised Self-hosted

Top reward now listed: €10,000.
State Voices Florida 6h ago

Raised Self-hosted

Top reward now listed: $1,000,000.

All 2,175 programs on Self-hosted programs

Search and filter without leaving the page. Filters stay in the link, so you can share a view.

Sort

Filters

35 programs match · Highest reward

Programs, highest reward first
Program	Top severity	Scope	First response	Top reward
Across Protocol across.to	Critical	3	–	$1,000,000 from $250
ENS ens.domains	Critical	2	–	$250,000 from $1,000
szns szns.io	Critical	2	–	$250,000 from $100
Trezor trezor.io	Critical	5	–	$100,000
Auth0 auth0.com	Critical	25	–	$50,000 from $100
Wagwalking wagwalking.com	Critical	8	3 d	$50,000
Braintree paypal.com	Critical	8	2 d	$30,000 from $50
Decred decred.org	Critical	14	–	$30,000 from $500
Obol Labs obol.org	Critical	19	–	$25,000 from $125
CodeRabbit coderabbit.ai	Critical	3	3 d	$20,000 from $100
Mozilla 0din.ai	High	3	3 d	$15,000 from $500
SpectroCoin spectrocoin.com	Critical	8	–	$15,000 from $200
Google Abuse VRP google.com	High	1	–	$13,337 from $100
Forex Factory forexfactory.com	Critical	8	–	$10,000 from $100
Asana asana.com	Critical	11	–	$6,500 from $100
Ably ably.com	Critical	13	5 d	$5,000 from $150
beyondmemory beyondmemory.io	Critical	2	2 d	$5,000 from $250
Glia glia.com	Critical	11	–	$5,000 from $200
Range range.org	Critical	11	2 d	$5,000 from $50
TradingView tradingview.com	Critical	6	–	$5,000 from $100
CleanShot cleanshot.com	Critical	20	–	$4,000 from $50
stormrake stormrake.com	Critical	3	1 d	AUD 5,000 from AUD 50
Spendesk spendesk.com	Critical	2	–	€2,000 from €50
BisectHosting bisecthosting.com	Critical	3	–	$2,000 from $100
Nothing nothing.tech	Critical	1	3 d	$2,000 from $20
SquareX sqrx.com	Critical	11	2 d	$2,000 from $100
DeskPro deskpro.com	Critical	8	–	$1,850 from $50
Cabify cabify.com	Critical	1	–	€1,000 from €100
Coinpayments coinpayments.net	Critical	12	–	$1,000 from $50
Billie billie.io	Critical	18	2 d	€500 from €50
CoderPad coderpad.io	Critical	8	–	$500 from $50
CoderPad and CodinGame codingame.com	Critical	6	–	$500 from $50
Foundation foundation.xyz	Critical	6	–	$500 from $50
Parabol parabol.co	Critical	–	–	$500 from $50
Wallbox wallbox.com	Critical	12	5 d	$500 from $50

Across Protocol

across.to

$1M
from $250

Scope

3

First response

–

Top severity

Critical
ENS

ens.domains

$250k
from $1,000

Scope

2

First response

–

Top severity

Critical
szns

szns.io

$250k
from $100

Scope

2

First response

–

Top severity

Critical
Trezor

trezor.io

$100k

Scope

5

First response

–

Top severity

Critical
Auth0

auth0.com

$50k
from $100

Scope

25

First response

–

Top severity

Critical

Safe harbor
Wagwalking

wagwalking.com

$50k

Scope

8

First response

3 d

Top severity

Critical

Safe harbor
Braintree

paypal.com

$30k
from $50

Scope

8

First response

2 d

Top severity

Critical
Decred

decred.org

$30k
from $500

Scope

14

First response

–

Top severity

Critical

No KYC
Obol Labs

obol.org

$25k
from $125

Scope

19

First response

–

Top severity

Critical
CodeRabbit

coderabbit.ai

$20k
from $100

Scope

3

First response

3 d

Top severity

Critical

Safe harbor
Mozilla

0din.ai

$15k
from $500

Scope

3

First response

3 d

Top severity

High
SpectroCoin

spectrocoin.com

$15k
from $200

Scope

8

First response

–

Top severity

Critical

Safe harbor
Google Abuse VRP

google.com

$13.3k
from $100

Scope

1

First response

–

Top severity

High
Forex Factory

forexfactory.com

$10k
from $100

Scope

8

First response

–

Top severity

Critical
Asana

asana.com

$6,500
from $100

Scope

11

First response

–

Top severity

Critical

Safe harbor
Ably

ably.com

$5,000
from $150

Scope

13

First response

5 d

Top severity

Critical

Safe harbor
beyondmemory

beyondmemory.io

$5,000
from $250

Scope

2

First response

2 d

Top severity

Critical

Safe harbor
Glia

glia.com

$5,000
from $200

Scope

11

First response

–

Top severity

Critical

Safe harbor
Range

range.org

$5,000
from $50

Scope

11

First response

2 d

Top severity

Critical

Safe harbor
TradingView

tradingview.com

$5,000
from $100

Scope

6

First response

–

Top severity

Critical
CleanShot

cleanshot.com

$4,000
from $50

Scope

20

First response

–

Top severity

Critical

Safe harbor
stormrake

stormrake.com

AUD 5,000
from AUD 50

Scope

3

First response

1 d

Top severity

Critical
Spendesk

spendesk.com

€2,000
from €50

Scope

2

First response

–

Top severity

Critical
BisectHosting

bisecthosting.com

$2,000
from $100

Scope

3

First response

–

Top severity

Critical
Nothing

nothing.tech

$2,000
from $20

Scope

1

First response

3 d

Top severity

Critical
SquareX

sqrx.com

$2,000
from $100

Scope

11

First response

2 d

Top severity

Critical
DeskPro

deskpro.com

$1,850
from $50

Scope

8

First response

–

Top severity

Critical
Cabify

cabify.com

€1,000
from €100

Scope

1

First response

–

Top severity

Critical
Coinpayments

coinpayments.net

$1,000
from $50

Scope

12

First response

–

Top severity

Critical

Safe harbor
Billie

billie.io

€500
from €50

Scope

18

First response

2 d

Top severity

Critical

Safe harbor
CoderPad

coderpad.io

$500
from $50

Scope

8

First response

–

Top severity

Critical
CoderPad and CodinGame

codingame.com

$500
from $50

Scope

6

First response

–

Top severity

Critical
Foundation

foundation.xyz

$500
from $50

Scope

6

First response

–

Top severity

Critical
Parabol

parabol.co

$500
from $50

Scope

–

First response

–

Top severity

Critical
Wallbox

wallbox.com

$500
from $50

Scope

12

First response

5 d

Top severity

Critical

Safe harbor