Public bug bounty programs

Every public bug bounty and vulnerability disclosure program we track, with what it pays, what is in scope and how fast it answers.

6,160 programs on 28 platforms · Updated 12 Nov 2026, 21:22 UTC

Sort

Filters

615 programs match · Highest reward

Programs, highest reward first
Program	Platform	Scope	First response	Top reward
OpenSea Managed Bug Bounty Program opensea.io	Bugcrowd	11	–	$3,000,000 from $125
BitDelta bitdelta.com	HackenProof	3	–	$1,000,000
Bitget bitget.com	BugRap	6	–	$1,000,000
Crypto.com crypto.com	HackerOne	24	–	$1,000,000
Dapper Labs dapperlabs.com	Self-hosted	7	–	$1,000,000
GMGN Web & Mobile gmgn.ai	HackenProof	4	–	$1,000,000
OKX	HackenProof	8	–	$1,000,000
Phemex Web & Mobile phemex.com	HackenProof	6	3 d	$500,000
pump-fun pump.fun	Cantina	11	–	$500,000 from $10k
Google Mobile VRP google.com	Self-hosted	4	–	$300,000 from $360
Meta Bug Bounty meta.com	Self-hosted	28	–	$300,000 from $500
Glow glow.app	Self-hosted	6	–	$250,000
업비트 (Upbit) upbit.com	PatchDay	7	–	$148,888
T-Mobile t-mobile.com	Bugcrowd	73	–	$133,700 from $12k
MAX okcdn.ru	Standoff 365	12	–	$120,976
Google and Alphabet VRP google.com	Self-hosted	26	–	$101,010 from $100
1inch - Wallet	Immunefi	2	–	$100,000 from $100
1inch Wallet	HackenProof	2	–	$100,000
Binance binance.com New scope	Bugcrowd	21	–	$100,000 from $200
Cregis	BugRap	5	–	$100,000
Phantom phantom.app	Cantina	13	–	$100,000 from $500
Proton proton.me	Self-hosted	39	–	$100,000 from $1,000
Safeheron	BugRap	8	–	$100,000
Superhuman (formerly Grammarly) superhuman.com	HackerOne	29	2 d	$100,000
Tesla tesla.com	Bugcrowd	11	–	$100,000 from $100
Walt.io walt.io New scope	HackerOne	11	2 d	$100,000
Sophos sophos.com	Bugcrowd	14	–	$80,000 from $100
Okta okta.com	Bugcrowd	20	–	$75,000 from $100
Doctolib doctolib.com	YesWeHack	17	1 d	€50,000
Kiteworks Public Bug Bounty Program kiteworks.com	YesWeHack	12	1 d	€50,000
Auth0 auth0.com	Self-hosted	25	–	$50,000 from $100
Auth0 by Okta auth0.com	Bugcrowd	26	–	$50,000 from $100
Bitget Wallet (Formerly BitKeep)	BugRap	4	–	$50,000
Bitunix Web bitunix.com New scope	HackenProof	6	–	$50,000
BlancVPN blancvpn.com	Self-hosted	7	–	$50,000 from $2,000
CoinSpot coinspot.com.au	HackerOne	4	5 d	$50,000
DeBox	BugRap	20	–	$50,000
Deribit deribit.com	HackerOne	8	–	$50,000
PlatON	BugRap	8	–	$50,000
Tothemoon Web tothemoon.com	HackenProof	6	–	$50,000
Wagwalking wagwalking.com	Self-hosted	8	3 d	$50,000
PlayStation playstation.com	HackerOne	24	–	$49,999
Zora zora.co	Self-hosted	12	–	$40,000
Snapchat snapchat.com	HackerOne	40	–	$35,000
bitFlyer bitflyer.com	IssueHunt	12	–	¥5,000,000
Public Bug Bounty Program bitflyer.com	IssueHunt	12	–	$31,479 from $32
Amazon Vulnerability Research Program amazon.com	HackerOne	120	–	$30,000
eero eero.com	HackerOne	5	–	$30,000
PayPal paypal.com	HackerOne	42	2 d	$30,000
Ring ring.com	HackerOne	30	–	$30,000

OpenSea Managed Bug Bounty Program

Bugcrowd · opensea.io

$3M
from $125

Scope

11

First response

–

Top severity

Critical

Safe harbor
BitDelta

HackenProof · bitdelta.com

$1M

Scope

3

First response

–

Top severity

Critical
Bitget

BugRap · bitget.com

$1M

Scope

6

First response

–

Top severity

–
Crypto.com

HackerOne · crypto.com

$1M

Scope

24

First response

–

Top severity

Critical
Dapper Labs

Self-hosted · dapperlabs.com

$1M

Scope

7

First response

–

Top severity

–
GMGN Web & Mobile

HackenProof · gmgn.ai

$1M

Scope

4

First response

–

Top severity

Critical
OKX

HackenProof

$1M

Scope

8

First response

–

Top severity

Critical
Phemex Web & Mobile

HackenProof · phemex.com

$500k

Scope

6

First response

3 d

Top severity

Critical
pump-fun

Cantina · pump.fun

$500k
from $10k

Scope

11

First response

–

Top severity

Critical
Google Mobile VRP

Self-hosted · google.com

$300k
from $360

Scope

4

First response

–

Top severity

–
Meta Bug Bounty

Self-hosted · meta.com

$300k
from $500

Scope

28

First response

–

Top severity

–
Glow

Self-hosted · glow.app

$250k

Scope

6

First response

–

Top severity

–
업비트 (Upbit)

PatchDay · upbit.com

$148.9k

Scope

7

First response

–

Top severity

Critical
T-Mobile

Bugcrowd · t-mobile.com

$133.7k
from $12k

Scope

73

First response

–

Top severity

Critical

Safe harbor
MAX

Standoff 365 · okcdn.ru

$121k

Scope

12

First response

–

Top severity

Critical
Google and Alphabet VRP

Self-hosted · google.com

$101k
from $100

Scope

26

First response

–

Top severity

–
1inch - Wallet

Immunefi

$100k
from $100

Scope

2

First response

–

Top severity

Critical
1inch Wallet

HackenProof

$100k

Scope

2

First response

–

Top severity

Critical
Binance

Bugcrowd · binance.com

$100k
from $200

Scope

21

First response

–

Top severity

Critical

New scope
Cregis

BugRap

$100k

Scope

5

First response

–

Top severity

–
Phantom

Cantina · phantom.app

$100k
from $500

Scope

13

First response

–

Top severity

Critical
Proton

Self-hosted · proton.me

$100k
from $1,000

Scope

39

First response

–

Top severity

Critical

Safe harbor
Safeheron

BugRap

$100k

Scope

8

First response

–

Top severity

–
Superhuman (formerly Grammarly)

HackerOne · superhuman.com

$100k

Scope

29

First response

2 d

Top severity

Critical

Safe harbor
Tesla

Bugcrowd · tesla.com

$100k
from $100

Scope

11

First response

–

Top severity

Critical
Walt.io

HackerOne · walt.io

$100k

Scope

11

First response

2 d

Top severity

Critical

New scope
Sophos

Bugcrowd · sophos.com

$80k
from $100

Scope

14

First response

–

Top severity

Critical

Safe harbor
Okta

Bugcrowd · okta.com

$75k
from $100

Scope

20

First response

–

Top severity

Critical

Safe harbor
Doctolib

YesWeHack · doctolib.com

€50k

Scope

17

First response

1 d

Top severity

Critical
Kiteworks Public Bug Bounty Program

YesWeHack · kiteworks.com

€50k

Scope

12

First response

1 d

Top severity

Critical
Auth0

Self-hosted · auth0.com

$50k
from $100

Scope

25

First response

–

Top severity

Critical

Safe harbor
Auth0 by Okta

Bugcrowd · auth0.com

$50k
from $100

Scope

26

First response

–

Top severity

Critical

Safe harbor
Bitget Wallet (Formerly BitKeep)

BugRap

$50k

Scope

4

First response

–

Top severity

–
Bitunix Web

HackenProof · bitunix.com

$50k

Scope

6

First response

–

Top severity

Critical

New scope
BlancVPN

Self-hosted · blancvpn.com

$50k
from $2,000

Scope

7

First response

–

Top severity

–
CoinSpot

HackerOne · coinspot.com.au

$50k

Scope

4

First response

5 d

Top severity

Critical

Safe harbor
DeBox

BugRap

$50k

Scope

20

First response

–

Top severity

–
Deribit

HackerOne · deribit.com

$50k

Scope

8

First response

–

Top severity

Critical

Safe harbor
PlatON

BugRap

$50k

Scope

8

First response

–

Top severity

–
Tothemoon Web

HackenProof · tothemoon.com

$50k

Scope

6

First response

–

Top severity

Critical
Wagwalking

Self-hosted · wagwalking.com

$50k

Scope

8

First response

3 d

Top severity

Critical

Safe harbor
PlayStation

HackerOne · playstation.com

$50k

Scope

24

First response

–

Top severity

Critical

Safe harbor
Zora

Self-hosted · zora.co

$40k

Scope

12

First response

–

Top severity

–
Snapchat

HackerOne · snapchat.com

$35k

Scope

40

First response

–

Top severity

Critical

Safe harbor
bitFlyer

IssueHunt · bitflyer.com

¥5M

Scope

12

First response

–

Top severity

Critical
Public Bug Bounty Program

IssueHunt · bitflyer.com

$31.5k
from $32

Scope

12

First response

–

Top severity

Critical
Amazon Vulnerability Research Program

HackerOne · amazon.com

$30k

Scope

120

First response

–

Top severity

Critical
eero

HackerOne · eero.com

$30k

Scope

5

First response

–

Top severity

Critical

Safe harbor
PayPal

HackerOne · paypal.com

$30k

Scope

42

First response

2 d

Top severity

Critical
Ring

HackerOne · ring.com

$30k

Scope

30

First response

–

Top severity

Critical

Safe harbor