Public bug bounty programs

Every public bug bounty and vulnerability disclosure program we track, with what it pays, what is in scope and how fast it answers.

6,160 programs on 28 platforms · Updated 12 Nov 2026, 21:22 UTC

Sort

Filters

1,285 programs match · Highest reward

Programs, highest reward first
Program	Platform	Scope	First response	Top reward
OpenSea Managed Bug Bounty Program opensea.io	Bugcrowd	11	–	$3,000,000 from $125
Pendle Bounty pendle.finance	Cantina	32	–	$2,000,000
Coinbase coinbase.com	Self-hosted	2	–	$1,000,000 from $1
Compound Finance	Immunefi	135	–	$1,000,000 from $1,000
Origin Protocol originprotocol.com New scope	Immunefi	57	–	$1,000,000 from $2,000
Microsoft Bounty Program microsoft.com	Self-hosted	11	–	$250,000
Swiss Post - E-Voting post.ch	YesWeHack	5	1 d	€230,000 from €100
Arc circle.com	HackerOne	6	5 d	$200,000
Enzyme Blue	Immunefi	301	–	$200,000 from $5,000
Enzyme Onyx	Immunefi	50	–	$200,000 from $1,000
Shopify shopify.com	Self-hosted	–	–	$200,000
Fireblocks MPC Managed Bug Bounty Engagement	Bugcrowd	1	–	$150,000 from $200
T-Mobile t-mobile.com	Bugcrowd	73	–	$133,700 from $12k
Chainlink chain.link	HackerOne	8	3 d	$100,000
Proton proton.me	Self-hosted	39	–	$100,000 from $1,000
SpaceX/Starlink spacex.com	Bugcrowd	1	–	$100,000
Superhuman (formerly Grammarly) superhuman.com	HackerOne	29	2 d	$100,000
Telegram telegram.org	Self-hosted	22	–	$100,000 from $100
TRON DAO tron.network	HackerOne	1	5 d	$100,000
Sophos sophos.com	Bugcrowd	14	–	$80,000 from $100
Okta okta.com	Bugcrowd	20	–	$75,000 from $100
Auth0 auth0.com	Self-hosted	25	–	$50,000 from $100
Auth0 by Okta auth0.com	Bugcrowd	26	–	$50,000 from $100
AXIS OS axis.com	Bugcrowd	1	–	$50,000 from $500
Chia Network chia.net	HackerOne	9	2 d	$50,000
CoinSpot coinspot.com.au	HackerOne	4	5 d	$50,000
Deribit deribit.com	HackerOne	8	–	$50,000
Figma figma.com	HackerOne	8	1 d	$50,000
Immunefi	Immunefi	6	–	$50,000 from $1,000
Wagwalking wagwalking.com	Self-hosted	8	3 d	$50,000
Zendesk Managed Bug Bounty Engagement	Bugcrowd	6	–	$50,000 from $100
PlayStation playstation.com	HackerOne	24	–	$49,999
Snapchat snapchat.com	HackerOne	40	–	$35,000
eero eero.com	HackerOne	5	–	$30,000
OKG okg.com	HackerOne	10	–	$30,000
Ring ring.com	HackerOne	30	–	$30,000
Airbnb airbnb.com	HackerOne	27	2 d	$25,000
Aiven Managed Bug Bounty aiven.io	Bugcrowd	16	–	$25,000 from $50
Audible audible.com	HackerOne	4	–	$25,000
Bullish Exchange bullish.com	Bugcrowd	2	–	$25,000 from $200
hostinger hostinger.com New scope	HackerOne	13	2 d	$25,000
Hypixel Studios Managed Bug Bounty Engagement hytale.com	Bugcrowd	10	–	$25,000 from $300
Netflix netflix.com	HackerOne	30	7 d	$25,000
Pinterest pinterest.com	Bugcrowd	13	–	$25,000 from $200
Ripio ripio.com	HackerOne	24	–	$25,000
Robinhood Markets Bounty robinhood.com	HackerOne	24	–	$25,000
TikTok tiktok.com	HackerOne	35	–	$25,000
Tools for Humanity toolsforhumanity.com	HackerOne	22	1 d	$25,000
Wickr wickr.com	HackerOne	13	–	$25,000
Arm arm.com	Intigriti	2	–	$20,000 from $500

OpenSea Managed Bug Bounty Program

Bugcrowd · opensea.io

$3M
from $125

Scope

11

First response

–

Top severity

Critical

Safe harbor
Pendle Bounty

Cantina · pendle.finance

$2M

Scope

32

First response

–

Top severity

–

Safe harbor No KYC
Coinbase

Self-hosted · coinbase.com

$1M
from $1

Scope

2

First response

–

Top severity

–

Safe harbor
Compound Finance

Immunefi

$1M
from $1,000

Scope

135

First response

–

Top severity

Critical

Safe harbor
Origin Protocol

Immunefi · originprotocol.com

$1M
from $2,000

Scope

57

First response

–

Top severity

Critical

New scope Safe harbor No KYC
Microsoft Bounty Program

Self-hosted · microsoft.com

$250k

Scope

11

First response

–

Top severity

–

Safe harbor
Swiss Post - E-Voting

YesWeHack · post.ch

€230k
from €100

Scope

5

First response

1 d

Top severity

Critical

Safe harbor
Arc

HackerOne · circle.com

$200k

Scope

6

First response

5 d

Top severity

Critical

Safe harbor
Enzyme Blue

Immunefi

$200k
from $5,000

Scope

301

First response

–

Top severity

Critical

Safe harbor No KYC
Enzyme Onyx

Immunefi

$200k
from $1,000

Scope

50

First response

–

Top severity

Critical

Safe harbor No KYC
Shopify

Self-hosted · shopify.com

$200k

Scope

–

First response

–

Top severity

–

Safe harbor
Fireblocks MPC Managed Bug Bounty Engagement

Bugcrowd

$150k
from $200

Scope

1

First response

–

Top severity

Critical

Safe harbor
T-Mobile

Bugcrowd · t-mobile.com

$133.7k
from $12k

Scope

73

First response

–

Top severity

Critical

Safe harbor
Chainlink

HackerOne · chain.link

$100k

Scope

8

First response

3 d

Top severity

Critical

Safe harbor
Proton

Self-hosted · proton.me

$100k
from $1,000

Scope

39

First response

–

Top severity

Critical

Safe harbor
SpaceX/Starlink

Bugcrowd · spacex.com

$100k

Scope

1

First response

–

Top severity

Critical

Safe harbor
Superhuman (formerly Grammarly)

HackerOne · superhuman.com

$100k

Scope

29

First response

2 d

Top severity

Critical

Safe harbor
Telegram

Self-hosted · telegram.org

$100k
from $100

Scope

22

First response

–

Top severity

–

Safe harbor
TRON DAO

HackerOne · tron.network

$100k

Scope

1

First response

5 d

Top severity

Critical

Safe harbor
Sophos

Bugcrowd · sophos.com

$80k
from $100

Scope

14

First response

–

Top severity

Critical

Safe harbor
Okta

Bugcrowd · okta.com

$75k
from $100

Scope

20

First response

–

Top severity

Critical

Safe harbor
Auth0

Self-hosted · auth0.com

$50k
from $100

Scope

25

First response

–

Top severity

Critical

Safe harbor
Auth0 by Okta

Bugcrowd · auth0.com

$50k
from $100

Scope

26

First response

–

Top severity

Critical

Safe harbor
AXIS OS

Bugcrowd · axis.com

$50k
from $500

Scope

1

First response

–

Top severity

Critical

Safe harbor
Chia Network

HackerOne · chia.net

$50k

Scope

9

First response

2 d

Top severity

Critical

Safe harbor
CoinSpot

HackerOne · coinspot.com.au

$50k

Scope

4

First response

5 d

Top severity

Critical

Safe harbor
Deribit

HackerOne · deribit.com

$50k

Scope

8

First response

–

Top severity

Critical

Safe harbor
Figma

HackerOne · figma.com

$50k

Scope

8

First response

1 d

Top severity

Critical

Safe harbor
Immunefi

Immunefi

$50k
from $1,000

Scope

6

First response

–

Top severity

Critical

Safe harbor
Wagwalking

Self-hosted · wagwalking.com

$50k

Scope

8

First response

3 d

Top severity

Critical

Safe harbor
Zendesk Managed Bug Bounty Engagement

Bugcrowd

$50k
from $100

Scope

6

First response

–

Top severity

Critical

Safe harbor
PlayStation

HackerOne · playstation.com

$50k

Scope

24

First response

–

Top severity

Critical

Safe harbor
Snapchat

HackerOne · snapchat.com

$35k

Scope

40

First response

–

Top severity

Critical

Safe harbor
eero

HackerOne · eero.com

$30k

Scope

5

First response

–

Top severity

Critical

Safe harbor
OKG

HackerOne · okg.com

$30k

Scope

10

First response

–

Top severity

Critical

Safe harbor
Ring

HackerOne · ring.com

$30k

Scope

30

First response

–

Top severity

Critical

Safe harbor
Airbnb

HackerOne · airbnb.com

$25k

Scope

27

First response

2 d

Top severity

Critical

Safe harbor
Aiven Managed Bug Bounty

Bugcrowd · aiven.io

$25k
from $50

Scope

16

First response

–

Top severity

Critical

Safe harbor
Audible

HackerOne · audible.com

$25k

Scope

4

First response

–

Top severity

Critical

Safe harbor
Bullish Exchange

Bugcrowd · bullish.com

$25k
from $200

Scope

2

First response

–

Top severity

Critical

Safe harbor
hostinger

HackerOne · hostinger.com

$25k

Scope

13

First response

2 d

Top severity

Critical

New scope Safe harbor
Hypixel Studios Managed Bug Bounty Engagement

Bugcrowd · hytale.com

$25k
from $300

Scope

10

First response

–

Top severity

Critical

Safe harbor
Netflix

HackerOne · netflix.com

$25k

Scope

30

First response

7 d

Top severity

Critical

Safe harbor
Pinterest

Bugcrowd · pinterest.com

$25k
from $200

Scope

13

First response

–

Top severity

Critical

Safe harbor
Ripio

HackerOne · ripio.com

$25k

Scope

24

First response

–

Top severity

Critical

Safe harbor
Robinhood Markets Bounty

HackerOne · robinhood.com

$25k

Scope

24

First response

–

Top severity

Critical

Safe harbor
TikTok

HackerOne · tiktok.com

$25k

Scope

35

First response

–

Top severity

Critical

Safe harbor
Tools for Humanity

HackerOne · toolsforhumanity.com

$25k

Scope

22

First response

1 d

Top severity

Critical

Safe harbor
Wickr

HackerOne · wickr.com

$25k

Scope

13

First response

–

Top severity

Critical

Safe harbor
Arm

Intigriti · arm.com

$20k
from $500

Scope

2

First response

–

Top severity

Critical

Safe harbor