Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Sorona bug bounty programs

Ecosystem Global Updated

Sorona is an open-source bug bounty platform with 475 public programs; 475 (100%) pay cash, with a median top reward of $1,500 and a highest of $1M.

Paid bounties on open-source projects. Sorona pays where a project has no bounty of its own, and many programs let you take a Low finding as cash or a Claude Max subscription.

Visit sorona.xyz Browse all 475 programs Perk Low bugs: $100 or 1 mo Claude Max
Public programs
475
Pay cash (100%)
475
Median top reward
$1,500
Highest reward
$1M
First response
3 d

Is Sorona a good place to start?

What matters most when you are new: rewards for small bugs, open access and quick answers.

  • 371 programs list a cash reward for Low-severity bugs.
  • Every program can be read without an account.
  • 71 are known to answer within 3 days.
  • 272 let you take a Low finding as cash or a Claude Max subscription.
Pays for Low Fast responders

What hunters should know

The usual complaints about bug bounty platforms, and what the data says here.

  • Triage speed

    Median first response is 3 days.

    Based on 109 programs Answer within 3 days

  • Low-severity bugs

    371 programs list a cash reward for Low. 27 start at Medium or higher. 77 publish one top amount instead of a table, so Low isn't stated.

    Based on 475 programs Pays for Low

  • Rewards beyond cash

    272 programs let you take a Low finding as cash or a Claude Max subscription instead.

    Based on 475 programs Pays for Low

  • Identity checks (KYC)

    39 require KYC before paying, 2 say they don't; the rest don't say.

    Based on 41 programs No KYC

  • Fees and deposits

    No program here lists a fee or deposit per report.

    Based on 475 programs

  • How you are paid

    461 pay in fiat money and 14 in crypto.

    Based on 475 programs Fiat only

  • Safe harbor

    1 state full safe harbor and 474 partial.

    Based on 475 programs Full safe harbor

Highest-paying programs

See all

  • WebKit

    webkit.org

    $300k
    Scope
    9
    First response
    –
    Top severity
    –

    Open source

  • Chromium

    chromium.org

    $250k
    Scope
    10
    First response
    –
    Top severity
    –

    Open source

  • V8

    v8.dev

    $250k
    Scope
    10
    First response
    –
    Top severity
    –

    Open source

  • Chainlink node

    chain.link

    $101k

    from $125

    Scope
    8
    First response
    12 d
    Top severity
    Critical

    No KYC Open source

Rewards by severity

Maximum reward per severity, from USD reward tables.

Severity Programs Median Top
Critical 61 $10k $101k
High 99 $3,750 $1M
Medium 100 $1,125 $50k
Low 364 $100 $10k

All 475 programs on Sorona

Search and filter without leaving the page. Filters stay in the link, so you can share a view.

71 programs match · Highest reward

  • Kubernetes

    kubernetes.io

    $10k
    Scope
    9
    First response
    1 d
    Top severity
    Critical

    Open source

  • Prow

    k8s.io

    $10k
    Scope
    8
    First response
    1 d
    Top severity
    Critical

    Open source

  • MongoDB MCP Server

    mongodb.com

    $8,500

    from $125

    Scope
    11
    First response
    1 d
    Top severity
    Critical

    Open source

  • Luau

    luau.org

    $6,000

    from $375

    Scope
    9
    First response
    3 d
    Top severity
    High

    Open source

  • Next.js

    $6,000

    from $625

    Scope
    10
    First response
    1 d
    Top severity
    High

    Open source

  • Nitro

    nitro.build

    $6,000

    from $625

    Scope
    11
    First response
    1 d
    Top severity
    High

    Open source

  • Nuxt

    nuxt.com

    $6,000

    from $625

    Scope
    8
    First response
    1 d
    Top severity
    High

    Open source

  • Svelte

    svelte.dev

    $6,000

    from $625

    Scope
    9
    First response
    1 d
    Top severity
    High

    Open source

  • Turborepo

    turborepo.com

    $6,000

    from $625

    Scope
    9
    First response
    1 d
    Top severity
    High

    Open source

  • Vercel AI SDK

    $6,000

    from $625

    Scope
    9
    First response
    1 d
    Top severity
    High

    Open source

  • Vercel CLI

    vercel.com

    $6,000

    from $625

    Scope
    9
    First response
    1 d
    Top severity
    High

    Open source

  • Vercel Workflow

    workflow-sdk.dev

    $6,000

    from $625

    Scope
    9
    First response
    1 d
    Top severity
    High

    Open source

  • Jenkins

    jenkins.io

    €5,000
    Scope
    8
    First response
    3 d
    Top severity
    Critical

    Open source

  • Chia

    chia.net

    $5,000

    from $625

    Scope
    10
    First response
    2 d
    Top severity
    High

    Open source

  • CLVM

    $5,000

    from $625

    Scope
    7
    First response
    2 d
    Top severity
    High

    Open source

  • Mozilla Accounts

    firefox.com

    $5,000
    Scope
    9
    First response
    2 h
    Top severity
    Critical

    Open source

  • Beats

    elastic.co

    $3,750

    from $875

    Scope
    9
    First response
    11 h
    Top severity
    High

    Open source

  • Elastic APM Agents

    elastic.co

    $3,750

    from $875

    Scope
    8
    First response
    11 h
    Top severity
    High

    Open source

  • Elastic APM Server

    elastic.co

    $3,750

    from $875

    Scope
    9
    First response
    1 d
    Top severity
    High

    Open source

  • Elasticsearch

    elastic.co

    $3,750

    from $875

    Scope
    9
    First response
    11 h
    Top severity
    High

    Open source

  • Kibana

    $3,750

    from $875

    Scope
    9
    First response
    1 d
    Top severity
    High

    Open source

  • Logstash

    elastic.co

    $3,750

    from $875

    Scope
    9
    First response
    11 h
    Top severity
    High

    Open source

  • Anthropic SDKs

    anthropic.com

    $3,125

    from $313

    Scope
    8
    First response
    3 d
    Top severity
    High

    Open source

  • Cluster Autoscaler

    $3,125

    from $125

    Scope
    7
    First response
    1 d
    Top severity
    High

    Open source

  • Doppler CLI

    doppler.com

    $3,125

    from $313

    Scope
    8
    First response
    2 d
    Top severity
    High

    Open source

  • kOps

    k8s.io

    $3,125

    from $125

    Scope
    8
    First response
    1 d
    Top severity
    High

    Open source

  • Kubernetes CSI sidecars

    kubernetes-csi.github.io

    $3,125

    from $125

    Scope
    8
    First response
    1 d
    Top severity
    High

    Open source

  • kube-state-metrics

    $3,125

    from $125

    Scope
    7
    First response
    1 d
    Top severity
    High

    Open source

  • Minikube

    k8s.io

    $3,125

    from $125

    Scope
    8
    First response
    1 d
    Top severity
    High

    Open source

  • Tor Browser

    torproject.org

    $2,500

    from $125

    Scope
    7
    First response
    3 d
    Top severity
    High

    Open source

  • Mattermost

    mattermost.com

    $2,000
    Scope
    9
    First response
    2 d
    Top severity
    Critical

    Open source

  • cert-manager

    cert-manager.io

    $1,500

    from $100

    Scope
    14
    First response
    3 d
    Top severity
    Critical

    Open source

  • containerd

    containerd.io

    $1,500

    from $100

    Scope
    15
    First response
    1 d
    Top severity
    Critical

    Open source

  • CRI-O

    $1,500

    from $100

    Scope
    16
    First response
    3 d
    Top severity
    Critical

    Open source

  • Docker Engine

    $1,500

    from $100

    Scope
    16
    First response
    3 d
    Top severity
    Critical

    Open source

  • etcd

    etcd.io

    $1,500

    from $100

    Scope
    13
    First response
    3 d
    Top severity
    Critical

    Open source

  • Fluent Bit

    fluentbit.io

    $1,500

    from $100

    Scope
    9
    First response
    3 d
    Top severity
    Critical

    Open source

  • GDM

    gnome.org

    $1,500

    from $100

    Scope
    14
    First response
    2 d
    Top severity
    Critical

    Open source

  • GNOME Shell + Mutter

    gnome.org

    $1,500

    from $100

    Scope
    13
    First response
    2 d
    Top severity
    Critical

    Open source

  • Haraka

    $1,500

    from $100

    Scope
    11
    First response
    3 d
    Top severity
    Critical

    Open source

  • Harbor

    goharbor.io

    $1,500

    from $100

    Scope
    16
    First response
    3 d
    Top severity
    Critical

    Open source

  • Helm

    helm.sh

    $1,500

    from $100

    Scope
    14
    First response
    3 d
    Top severity
    Critical

    Open source

  • Istio

    istio.io

    $1,500

    from $100

    Scope
    14
    First response
    3 d
    Top severity
    Critical

    Open source

  • Karapace

    karapace.io

    $1,500
    Scope
    8
    First response
    2 d
    Top severity
    Critical

    Open source

  • kitty

    $1,500

    from $100

    Scope
    12
    First response
    3 d
    Top severity
    Critical

    Open source

  • LLVM / Clang

    llvm.org

    $1,500

    from $100

    Scope
    10
    First response
    2 d
    Top severity
    Critical

    Open source

  • Perl

    perl.org

    $1,500

    from $100

    Scope
    12
    First response
    3 d
    Top severity
    Critical

    Open source

  • Podman

    podman.io

    $1,500

    from $100

    Scope
    17
    First response
    3 d
    Top severity
    Critical

    Open source

  • Proxmox VE

    proxmox.com

    $1,500

    from $100

    Scope
    14
    First response
    1 d
    Top severity
    Critical

    Open source