Information only
Everything here is a copy of what programs and platforms publish, made at a point in time. Rewards, scope and rules change, and a copy can be wrong. Nothing on this site gives you permission to test anything. Only the program's own policy does.
Testing is your responsibility
Before you test, read the official policy linked from every program page, stay inside its scope and follow its rules. Testing a target that is not in scope can be illegal, even if this site lists it.
No affiliation
bugbounty.fyi is independent. It is not run by, endorsed by or affiliated with HackerOne, Bugcrowd, Intigriti, YesWeHack, Immunefi or any other platform or company it lists.
Reuse
You may quote and link to pages here. Don't copy the site as a whole or collect it automatically at scale; clients that hammer it are blocked.
Names and logos
Company and platform names and logos belong to their owners and are shown only to identify a program. Logos provided by Logo.dev. CVE records: this product uses the NVD API but is not endorsed or certified by the NVD.
Liability
The site is provided as is, without any promise that it is complete, correct or available. To the extent the law allows, the operator is not liable for loss caused by relying on it. Nothing here limits liability that cannot be limited by law.