Platforms
YesWeHack
YE
YesWeHack bug bounty programs
Web and apps
EU Updated 8 minutes ago
YesWeHack is a web and app bug bounty platform (EU) with 53 public programs; 51 (96%) pay cash, with a median top reward of €3,000 and a highest of €230k.
Public programs
53
Pay cash (96%)
51
Median top reward
€3,000
Highest reward
€230k
No cash (VDP)
2
First response
1 d
Reward changes, 90 d
+0 / −4
Is YesWeHack a good place to start?
What matters most when you are new: rewards for small bugs, open access and quick answers.
51 programs list a cash reward for Low-severity bugs.
Every program can be read without an account.
52 are known to answer within 3 days.
What hunters should know
The usual complaints about bug bounty platforms, and what the data says here.
Triage speed
Median first response is 1 day.
Based on 53 programs
Answer within 3 days
Reward changes
0 reward raises and 4 cuts in the last 90 days.
Based on 53 programs
Low-severity bugs
51 programs list a cash reward for Low.
Based on 51 programs
Pays for Low
Identity checks (KYC)
1 require KYC before paying, 0 say they don't; the rest don't say.
Based on 1 program
No KYC
Fees and deposits
51 programs charge a fee, deposit or credits per report.
Based on 53 programs
No fee
How you are paid
51 pay in fiat money and 0 in crypto.
Based on 51 programs
Safe harbor
5 state full safe harbor and 11 partial.
Based on 16 programs
Full safe harbor
SP
Scope
5
First response
1 d
Top severity
Critical
Safe harbor
DO
€50k
Scope
17
First response
1 d
Top severity
Critical
KP
€50k
Scope
12
First response
1 d
Top severity
Critical
FU
Scope
68
First response
1 d
Top severity
Critical
YE
Scope
4
First response
1 d
Top severity
Critical
OV
Scope
3
First response
2 d
Top severity
Critical
Rewards by severity
Maximum reward per severity, from EUR reward tables.
Severity
Programs
Median
Top
Critical
51
€3,500
€230k
High
51
€1,500
€70k
Medium
51
€500
€50k
Low
51
€100
€40k
What you can test
722 in-scope targets across all programs.
Web
357
API
82
Wildcard
72
Domain
53
Other
50
iOS
45
Android
45
Binary
18
TS
Scope +
YesWeHack
Added to scope: butik.vimla.se
HI
Scope −
YesWeHack
Removed from scope: https://pl.jbl.com
HI
Scope −
YesWeHack
Removed from scope: https://jp.harmanaudio.com
HI
Scope −
YesWeHack
Removed from scope: https://jp.jbl.com
HI
Cut
YesWeHack
Top reward $4,000 to $2,000.
YD
Scope +
YesWeHack
Added to scope: https://dojo-yeswehack.com/challenge-of-the-month/dojo-56
IB
Scope +
YesWeHack
Added to scope: s3.gva2.infomaniak.cloud
IB
Scope −
YesWeHack
Removed from scope: manager.infomaniak.com/*proxy*
Browse
Top platforms
About
Legal
Facts come from public pages and are checked every hour. Policies are summarised with AI and every quoted line is checked against the source.
The program's own policy always wins; read it before you test.
© 2026 bugbounty.fyi. All rights reserved.