Public bug bounty programs

Every public bug bounty and vulnerability disclosure program we track, with what it pays, what is in scope and how fast it answers.

6,160 programs on 28 platforms · Updated 12 Nov 2026, 21:22 UTC

Sort

Filters

476 programs match · Highest reward

Programs, highest reward first
Program	Platform	Scope	First response	Top reward
Safe (Safe Smart Account) safe.global	Sorona	9	–	$1,000,000
WebKit webkit.org	Sorona	9	–	$300,000
Chromium chromium.org	Sorona	10	–	$250,000
kvmCTF (Linux KVM hypervisor) google.github.io	Sorona	8	–	$250,000
V8 v8.dev	Sorona	10	–	$250,000
Chainlink node chain.link	Sorona	8	12 d	$101,000 from $125
kernelCTF (Linux kernel LTS)	Sorona	8	–	$101,000
Trezor trezor.io	Sorona	8	–	$100,000
Swiss Post e-voting crypto-primitives	Sorona	9	1 d	€50,000
Proton (Mail, VPN, Pass, Drive, Bridge clients) proton.me	Sorona	9	–	$51,000 from $1,250
.NET microsoft.com	Sorona	9	–	$40,000
WordPress plugin and theme ecosystem (Patchstack Alliance) wordpress.org	Sorona	9	–	$33,000
Elementor elementor.com	Sorona	7	–	$31,200
WordPress wordpress.org	Sorona	9	–	$31,200
ChromeOS	Sorona	9	–	$30,000
coreboot coreboot.org	Sorona	9	–	$30,000
Android (AOSP)	Sorona	11	–	$25,000
Android Runtime (ART) and libcore android.com	Sorona	9	–	$25,000
Android Virtualization Framework and pKVM android.com	Sorona	10	–	$25,000
Firefox / Gecko mozilla.org	Sorona	10	–	$20,000
NSS mozilla.org	Sorona	9	–	$20,000
OP-TEE	Sorona	9	–	$20,000
SpiderMonkey mozilla.org	Sorona	9	–	$20,000
TF-PSA-Crypto	Sorona	8	–	$20,000
Trusted Firmware-A trustedfirmware.org	Sorona	8	–	$20,000
Trusted Firmware-M trustedfirmware.org	Sorona	10	–	$20,000
Nebula	Sorona	8	–	$17,000
Coinbase cb-mpc coinbase.com	Sorona	7	–	$16,001
crosvm crosvm.dev	Sorona	8	–	$16,000 from $625
minijail google.com	Sorona	8	–	$16,000 from $625
Azure SDK for Java azure.github.io	Sorona	8	–	$15,000
Azure SDK for JavaScript azure.github.io	Sorona	8	–	$15,000
Azure SDK for .NET azure.github.io	Sorona	7	–	$15,000
Azure SDK for Python azure.github.io	Sorona	7	–	$15,000
Envoy envoyproxy.io	Sorona	7	–	$15,000
Fluent UI microsoft.com	Sorona	7	–	$15,000
Microsoft Agent Framework microsoft.com	Sorona	9	–	$15,000
Monaco Editor microsoft.github.io	Sorona	8	–	$15,000
MsQuic microsoft.github.io	Sorona	9	–	$15,000
NVIDIA Container Toolkit	Sorona	7	–	$15,000
PowerShell microsoft.com	Sorona	10	–	$15,000
Shipit Engine	Sorona	11	5 d	$15,000 from $1,250
Shopify identity_cache	Sorona	10	5 d	$15,000 from $1,250
Shopify job-iteration	Sorona	9	5 d	$15,000 from $1,250
TypeScript	Sorona	9	–	$15,000
Visual Studio Code	Sorona	12	–	$15,000
CycloneDX Rust Cargo	Sorona	8	–	€11,000 from €625
OpenPGP.js openpgp.js	Sorona	8	–	€11,000 from €625
Dependabot Core	Sorona	9	4 d	$11,000 from $313
ntpd-rs (Project Pendulum)	Sorona	7	–	€10,000

Safe (Safe Smart Account)

Sorona · safe.global

$1M

Scope

9

First response

–

Top severity

High

Open source
WebKit

Sorona · webkit.org

$300k

Scope

9

First response

–

Top severity

–

Open source
Chromium

Sorona · chromium.org

$250k

Scope

10

First response

–

Top severity

–

Open source
kvmCTF (Linux KVM hypervisor)

Sorona · google.github.io

$250k

Scope

8

First response

–

Top severity

–

Open source
V8

Sorona · v8.dev

$250k

Scope

10

First response

–

Top severity

–

Open source
Chainlink node

Sorona · chain.link

$101k
from $125

Scope

8

First response

12 d

Top severity

Critical

No KYC Open source
kernelCTF (Linux kernel LTS)

Sorona

$101k

Scope

8

First response

–

Top severity

–

Open source
Trezor

Sorona · trezor.io

$100k

Scope

8

First response

–

Top severity

Critical

Open source
Swiss Post e-voting crypto-primitives

Sorona

€50k

Scope

9

First response

1 d

Top severity

Critical

Open source
Proton (Mail, VPN, Pass, Drive, Bridge clients)

Sorona · proton.me

$51k
from $1,250

Scope

9

First response

–

Top severity

Critical

Open source
.NET

Sorona · microsoft.com

$40k

Scope

9

First response

–

Top severity

Critical

Open source
WordPress plugin and theme ecosystem (Patchstack Alliance)

Sorona · wordpress.org

$33k

Scope

9

First response

–

Top severity

–

Open source
Elementor

Sorona · elementor.com

$31.2k

Scope

7

First response

–

Top severity

–

Open source
WordPress

Sorona · wordpress.org

$31.2k

Scope

9

First response

–

Top severity

Critical

Open source
ChromeOS

Sorona

$30k

Scope

9

First response

–

Top severity

Critical

Open source
coreboot

Sorona · coreboot.org

$30k

Scope

9

First response

–

Top severity

Critical

Open source
Android (AOSP)

Sorona

$25k

Scope

11

First response

–

Top severity

–

Open source
Android Runtime (ART) and libcore

Sorona · android.com

$25k

Scope

9

First response

–

Top severity

–

Open source
Android Virtualization Framework and pKVM

Sorona · android.com

$25k

Scope

10

First response

–

Top severity

–

Open source
Firefox / Gecko

Sorona · mozilla.org

$20k

Scope

10

First response

–

Top severity

High

Open source
NSS

Sorona · mozilla.org

$20k

Scope

9

First response

–

Top severity

High

Open source
OP-TEE

Sorona

$20k

Scope

9

First response

–

Top severity

Critical

Open source
SpiderMonkey

Sorona · mozilla.org

$20k

Scope

9

First response

–

Top severity

High

Open source
TF-PSA-Crypto

Sorona

$20k

Scope

8

First response

–

Top severity

Critical

Open source
Trusted Firmware-A

Sorona · trustedfirmware.org

$20k

Scope

8

First response

–

Top severity

Critical

Open source
Trusted Firmware-M

Sorona · trustedfirmware.org

$20k

Scope

10

First response

–

Top severity

Critical

Open source
Nebula

Sorona

$17k

Scope

8

First response

–

Top severity

Critical

Open source
Coinbase cb-mpc

Sorona · coinbase.com

$16k

Scope

7

First response

–

Top severity

High

Open source
crosvm

Sorona · crosvm.dev

$16k
from $625

Scope

8

First response

–

Top severity

High

Open source
minijail

Sorona · google.com

$16k
from $625

Scope

8

First response

–

Top severity

High

Open source
Azure SDK for Java

Sorona · azure.github.io

$15k

Scope

8

First response

–

Top severity

Critical

Open source
Azure SDK for JavaScript

Sorona · azure.github.io

$15k

Scope

8

First response

–

Top severity

Critical

Open source
Azure SDK for .NET

Sorona · azure.github.io

$15k

Scope

7

First response

–

Top severity

Critical

Open source
Azure SDK for Python

Sorona · azure.github.io

$15k

Scope

7

First response

–

Top severity

Critical

Open source
Envoy

Sorona · envoyproxy.io

$15k

Scope

7

First response

–

Top severity

–

Open source
Fluent UI

Sorona · microsoft.com

$15k

Scope

7

First response

–

Top severity

Critical

Open source
Microsoft Agent Framework

Sorona · microsoft.com

$15k

Scope

9

First response

–

Top severity

Critical

Open source
Monaco Editor

Sorona · microsoft.github.io

$15k

Scope

8

First response

–

Top severity

Critical

Open source
MsQuic

Sorona · microsoft.github.io

$15k

Scope

9

First response

–

Top severity

Critical

Open source
NVIDIA Container Toolkit

Sorona

$15k

Scope

7

First response

–

Top severity

Critical

Open source
PowerShell

Sorona · microsoft.com

$15k

Scope

10

First response

–

Top severity

Critical

Open source
Shipit Engine

Sorona

$15k
from $1,250

Scope

11

First response

5 d

Top severity

Medium

Open source
Shopify identity_cache

Sorona

$15k
from $1,250

Scope

10

First response

5 d

Top severity

Medium

Open source
Shopify job-iteration

Sorona

$15k
from $1,250

Scope

9

First response

5 d

Top severity

Medium

Open source
TypeScript

Sorona

$15k

Scope

9

First response

–

Top severity

Critical

Open source
Visual Studio Code

Sorona

$15k

Scope

12

First response

–

Top severity

Critical

Open source
CycloneDX Rust Cargo

Sorona

€11k
from €625

Scope

8

First response

–

Top severity

Critical

Open source
OpenPGP.js

Sorona · openpgp.js

€11k
from €625

Scope

8

First response

–

Top severity

Critical

Open source
Dependabot Core

Sorona

$11k
from $313

Scope

9

First response

4 d

Top severity

Critical

Open source
ntpd-rs (Project Pendulum)

Sorona

€10k

Scope

7

First response

–

Top severity

Critical

Open source