bug-bounty-platforms

July 6, 2026 · View on GitHub

bug-bounty-platforms — every bug bounty & VDP platform, in one open list · disclose.io

bug-bounty-platforms

A community-powered, open catalog of every known bug bounty & vulnerability-disclosure platform on the Internet.

CC0 1.0 Browse at disclose.io/platforms 121+ platforms tracked Contributors PRs welcome

Part of the disclose.io Project — the open, vendor-neutral infrastructure for vulnerability disclosure. Browse the ecosystem →

An ongoing community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet.

Is there a platform or detail missing, or have you spotted something wrong? This site is open source. Improve this page!

Adding or moving an entry

Every platform lives in exactly one category section below. If a platform fits more than one, the first match in this precedence order wins: Government & public-interest → AI → Web3 → Brokered disclosure → Ecosystem-specific → General. If a category ever drops below two entries, fold it into General. Keep rows alphabetical within their section, and keep the 8-column format (CI enforces the column count).

Jump to: Government and public-interest programs · Web3 and smart-contract platforms · AI and LLM security platforms · Vulnerability acquisition and brokered disclosure · Ecosystem-specific platforms · General crowdsourced platforms

Government and public-interest programs

Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
Australian Government VDPhttps://www.homeaffairs.gov.auAustraliaPublicNo
bugbounty.sahttps://bugbounty.saSaudi Arabia@BugBountySAPrivateYeshttps://bugbounty.sa/leaderboard
CCB Belgium CVDhttps://ccb.belgium.be/cert/vulnerability-reporting-ccbBelgiumPublicNo
CERT Polska CVDhttps://cert.pl/en/cvd/Poland@CERT_Polska_enPublicNohttps://cert.pl/en/cve/
CERT-In RVDCPhttps://www.cert-in.org.in/RVDCP.jspIndia@IndianCERTPublicYeshttps://www.cert-in.org.in/Hallof_Fame.jsp
CISA VDP Platformhttps://www.cisa.gov/resources-tools/services/vulnerability-disclosure-policy-vdp-platformUSA@CISAgovPublicNo
DIVDhttps://www.divd.nlNetherlands@DIVDnlPublicNo
HITCON ZeroDayhttps://zeroday.hitcon.orgTaiwan@HacksInTaiwanPrivate + PublicNohttps://zeroday.hitcon.org/bug-bounty/list
Japan Vulnerability Notes (JVN)https://jvn.jp/en/Japan@jpcert_enPublicNohttps://jvn.jp/en/nav/
KISA KNVDhttps://knvd.krcert.or.krSouth KoreaPublicNo
NCIIPC RVDPhttps://nciipc.gov.in/RVDP.htmlIndia@NCIIPCPublicNo
NCSA Bug Bounty Programmehttps://hub.ncsa.gov.mv/resources/bug-bounty-programMaldivesPublicYeshttps://hub.ncsa.gov.mv/bug-bounty/hall-of-fame
NCSC-FI CVDhttps://www.kyberturvallisuuskeskus.fi/en/reportFinlandPublicNo
NCSC-NL CVDhttps://www.ncsc.nl/contact/kwetsbaarheid-meldenNetherlandsPublicNo
NKSC Lithuania CVDhttps://www.nksc.lt/pranesti-spraga.htmlLithuaniaPublicNo
Open Bug Bountyhttps://openbugbounty.orgGlobal@openbugbountyPublicYeshttps://openbugbounty.org/bugbounty-list/
Qatar Bug Bountyhttps://bugbounty.qaQatarPrivate + PublicNo
Singapore GovTech VDPhttps://www.tech.gov.sg/report-vulnerability/Singapore@GovTechSGPublicNo
Swiss NCSC Bug Bountyhttps://www.ncsc.admin.chSwitzerlandPublicNo
Taiwan Vulnerability Note (TVN)https://www.twcert.org.tw/en/np-138-2.htmlTaiwan@TWCERTCCPublicNohttps://www.twcert.org.tw/en/lp-139-2.html
UAE National Bug Bountyhttps://bugbounty.aeUnited Arab EmiratesPrivate
UK NCSC VDPhttps://www.ncsc.gov.ukUK@NCSCPublicNo

Web3 and smart-contract platforms

Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
AuditOnehttps://auditone.ioEurope@AuditOne_ioPrivate + PublicYeshttps://www.auditone.io/bounty-activityhttps://www.auditone.io/bug-bounty
BugRaphttps://bugrap.io@BugRap_TeamPublicYeshttps://bugrap.io/whiteHatshttps://bugrap.io/bounties
Cantinahttps://cantina.xyzUSA@CantinaxyzPrivate + PublicYeshttps://cantina.xyz/leaderboardhttps://cantina.xyz/competitions
CertiK Bug Bountyhttps://certik.comUSA@CertiKPrivate + PublicYeshttps://www.certik.com/products/bug-bounty
Certora Contestshttps://www.certora.com/contestsGlobal@certoraPublicYeshttps://www.certora.com/leaderboardhttps://www.certora.com/contests
Code4renahttps://code4rena.com@code4renaPublicYeshttps://code4rena.com/leaderboardhttps://code4rena.com/contests
CodeHawkshttps://codehawks.cyfrin.ioUSA@CodeHawksPrivate + PublicYeshttps://codehawks.cyfrin.io/leaderboardhttps://codehawks.cyfrin.io/contests
HackenProofhttps://hackenproof.comEstonia@HackenProofPrivate + PublicYeshttps://hackenproof.com/leaderboardhttps://hackenproof.com/programs
Hashlockhttps://hashlock.comAustralia@HashLockAuditPrivate + PublicNohttps://hashlock.com/bug-bounty
Hatshttps://hats.finance@HatsFinancePublicYes
Immunefihttps://immunefi.com@immunefiPublicYeshttps://immunefi.com/leaderboard/https://immunefi.com/explore/
OpenBounty (Shentu)https://openbounty.shentu.orgPublicYeshttps://openbounty.shentu.org/leaderboardhttps://openbounty.shentu.org/allBounties
Remedyhttps://r.xyzGlobal@xyz_remedyPrivate + PublicNohttps://hunt.r.xyz
Secure3https://secure3.ioUSA@Secure3ioPrivate + Public
Sherlockhttps://sherlock.xyzGlobal@sherlockdefiPublicYeshttps://app.sherlock.xyz/audits/leaderboardhttps://app.sherlock.xyz/audits/contests
SlowMisthttps://slowmist.comChina@SlowMist_TeamPublicYeshttps://slowmist.io/bug-bounty.html

AI and LLM security platforms

Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
Gray Swan Arenahttps://app.grayswan.ai/arenaUSA@GraySwanAIPublicYeshttps://app.grayswan.ai/arena/leaderboard/globalhttps://app.grayswan.ai/arena
HackAPrompthttps://www.hackaprompt.comUSAPublicYeshttps://www.hackaprompt.com/leaderboard
Huntrhttps://huntr.comUK@huntrdevPrivate + PublicYeshttps://huntr.com/leaderboardhttps://huntr.com/bounties/hacktivity
ødinhttps://0din.aiUSA@0dinaiPublicYeshttps://0din.ai/leaderboardhttps://0din.ai/scope

Vulnerability acquisition and brokered disclosure

Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
SSD Secure Disclosurehttps://ssd-disclosure.comIsrael@SecuriTeam_SSDPublicNo
Zero Day Initiativehttps://zerodayinitiative.comUSA@thezdiPublicYeshttps://zerodayinitiative.com/advisories/published/

Ecosystem-specific platforms

Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
IssueHunthttps://issuehunt.ioJapan@IssueHuntPrivate + PublicYeshttps://issuehunt.io/programs
Patchstackhttps://patchstack.comEstonia@paborzaPublicYeshttps://patchstack.com/database/leaderboardhttps://patchstack.com/database/vdp
Wordfence Bug Bountyhttps://www.wordfence.com/threat-intel/bug-bounty-program/USA@wordfencePublicNo

General crowdsourced platforms

Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
360 SRChttps://src.360.netChinaPublic + Private
BBHunt Japanhttps://bbhunt.jpJapan@bbhuntjapanPrivate + Public
BI.ZONE Bug Bountyhttps://bugbounty.bi.zoneRussia@bizonePrivate + PublicYeshttps://bugbounty.bi.zone/top-hackershttps://bugbounty.bi.zone/companies
BountyTeamhttps://www.bountyteam.comChinaPrivate + PublicYeshttps://www.bountyteam.com/leader-boardhttps://www.bountyteam.com/bug-bounty-list
Bug Bounty Switzerlandhttps://bugbounty.chSwitzerland@bugbounty_chPrivate + PublicYeshttps://www.bugbounty.ch/en/programs/
Bug Hunthttps://bughunt.com.brBrazil@bughuntoficialPrivate + PublicYes
Bug Zerohttps://bugzero.ioSri Lanka@BugZero_ioPrivate + PublicYeshttps://bugzero.io/leaderboardhttps://bugzero.io/programs
BugBankhttps://www.bugbank.cnChinaPrivate + PublicYeshttps://www.bugbank.cn/ranks.htmlhttps://www.bugbank.cn/task/
Bugbasehttps://bugbase.aiIndia@bugbasePrivate + PublicYeshttps://bugbase.ai/dashboard/leaderboardhttps://bugbase.ai/programs
Bugbophttps://bugbop.comAustralia@BugbopAppPrivate + PublicYeshttps://bugbop.com/public-programs
BugBounterhttps://bugbounter.comUS & Estonia & Turkey@bugbounterrPrivate + PublicYeshttps://app.bugbounter.com/public-top-bounters
BugBounty.amhttps://bugbounty.amArmeniaPrivate + Public
bugbounty.jphttps://bugbounty.jpJapanPrivate + Publichttps://bugbounty.jp/en/
BugBounty.ruhttps://bugbounty.ruRussiaPrivate + Publichttps://bugbounty.ru/app/programs
Bugcrowdhttps://bugcrowd.comUSA@bugcrowdPrivate + PublicYeshttps://bugcrowd.com/leaderboardhttps://bugcrowd.com/programs
Buglabhttps://buglab.ioSingapore@joinbuglabPrivate + PublicYes
Bugloudhttps://bugloud.comUnited Arab EmiratesPrivate + PublicYeshttps://bugloud.com/leaderboardhttps://bugloud.com/programs
BugRakshakhttps://www.bugrakshak.comIndiaPrivate + PublicYeshttps://www.bugrakshak.com/platform/leaderboard
bugsbounty.iohttps://bugsbounty.comEngland@bugsbounty_comPrivate
Bugvhttps://bugv.ioNepal@bugvsecurityPublicYes
Butianhttps://butian.netChinaPrivate + PublicYeshttps://www.butian.net/Rank/whitehathttps://www.butian.net/Reward/plan/2
Capture The Bughttps://capturethebug.xyzNew Zealand@CapturethebugsPrivate
Cobalthttps://cobalt.ioUSA@cobalt_ioPrivateYeshttps://app.us.cobalt.io/pentesters
Com Olhohttps://comolho.comIndia@com_olhoPrivate + PublicYeshttps://cyber.comolho.com/researcher-community/https://cyber.comolho.com/programs/bug-bounty/
Compass Securityhttps://compass-security.comSwitzerland@compasssecurityPrivate + PublicYeshttps://bugbounty.compass-security.com/
Crowdswarmhttps://crowdswarm.ioUnited Arab Emirates@Crowdswarm1Private + PublicYes
Cyber Army Indonesiahttps://www.cyberarmy.asiaIndonesia@cyberarmyidPrivate + Public
Cyber3rahttps://cyber3ra.comIndiaPrivate + Public
Cyberbayhttps://cyberbay.techHong KongPrivate + Public
CyberTalentshttps://cybertalents.comMiddle East@CyberTalentsPublicYeshttps://cybertalents.com/worldrankhttps://cybertalents.com/competitions
Cyscopehttps://cyscope.ioSwitzerland & Latam@cy_scopePrivate + PublicYes
Detectifyhttps://detectify.comSweden@detectifyCrowdsource (ASM)Yes
Dvulnhttps://dvuln.comAustralia@d_vulnPrivateYes
Federacyhttps://federacy.comUSA@_federacyPrivate + PublicYes
Find The Gaphttps://findthegap.co.kr/enSouth KoreaPrivate + PublicNo
Findbughttps://findbug.ioKosovo@FindbugksPrivateYes
Genbountyhttps://genbounty.com/UK@GenbountyPrivateYeshttps://genbounty.com/teams
Gerobughttps://gerobug.gerosecurity.comIndonesiaSelf-hostedNohttps://gerobug.gerosecurity.com/programs/
GObugfreehttps://gobugfree.comSwitzerland@gobugfreePrivate + PublicYeshttps://gobugfree.com/programs
HackerOnehttps://hackerone.comUSA@hacker0x01Private + PublicYeshttps://hackerone.com/leaderboardhttps://hackerone.com/directory/programs
Hackr.fihttps://www.hackr.fiFinland@hackrfiPrivate + PublicNohttps://www.hackr.fi/en/programs.html
Hackratehttps://hckrt.comHungary@hackratePrivate + PublicYeshttps://hckrt.com/Catalog
HACKTIFYhttps://hacktify.euCentral and Eastern Europe@HACKTIFY_Private + PublicYeshttps://hacktify.eu/en/leaderboard/https://hacktify.eu/en/public-programs/
HuntBughttps://huntbug.comUSA@officialhuntbugPrivate + PublicYeshttps://huntbug.com/leaderboard
HuntersPayhttps://www.hunterspay.com.brBrazilPrivate + PublicNo
Huoxianhttps://www.huoxian.cnChinaPrivate + PublicYeshttps://www.huoxian.cn/communityhttps://www.huoxian.cn/project
Inspectivhttps://inspectiv.comUSA@inspectivPrivate + PublicYes
Intigritihttps://intigriti.comBelgium@intigritiPrivate + PublicYeshttps://intigriti.com/leaderboardhttps://intigriti.com/programs
Kolahsefidhttps://www.kolahsefid.orgIran@KolaahsefidPrivate + PublicNo
Nordic Defenderhttps://nordicdefender.comSweden@nordicdefenderPrivate
PatchDayhttps://patchday.ioSouth Korea@patchday_ioPrivate + PublicYes
Ravrohttps://ravro.irIran@Ravro_irPrivate + PublicYeshttps://ravro.ir/reportshttps://ravro.ir/companies
RedStormhttps://redstorm.ioIndonesia@redstorm_ioPrivate + PublicYeshttps://redstorm.io/program
safehatshttps://safehats.comIndiaPrivate + Public
Safevulnhttps://safevuln.comVietnamPublicYeshttps://safevuln.com/leaderboardhttps://safevuln.com/programs
Secunahttps://secuna.ioPhilippines@SecunaSecurityPrivate + PublicYeshttps://platform.secuna.io/programs
Secur0https://secur0.comEurope & Latam@Secur00Private + PublicYeshttps://app.secur0.com/leaderboardshttps://app.secur0.com/programs
Standoff 365 Bug Bountyhttps://bugbounty.standoff365.comRussia@standoff365Private + PublicYeshttps://standoff365.com/en-US/ratings/https://bugbounty.standoff365.com/en-US/
Swarmneticshttps://swarmnetics.comSingapore@swarmneticsPrivateYes
Synackhttps://synack.comUSA@synackPrivateYes
Teklabspacehttps://teklabspace.comNigeria@teklabspacePublicYes
Testbirdshttps://testbirds.comGermany@TestbirdsQA + Bug BountyNo
Topcoderhttps://topcoder.comUSA@topcoderDev + Bug BountyYeshttps://www.topcoder.com/community/statisticshttps://www.topcoder.com/challenges
TrustLinehttps://www.trustline.saSaudi Arabia@trustlineSecPrivate + Public
TumarOnehttps://tumar.oneKazakhstanPrivate + PublicYeshttps://tumar.one/leaderboardhttps://tumar.one/#for-bug-hunters
UzHunterhttps://uzhunter.comUzbekistan
Vulboxhttps://vulbox.comChinaPrivate + PublicYeshttps://vulbox.com/top/seasonhttps://vulbox.com/projects/list
Vulnerability Labhttps://vulnerability-lab.comGermanyPrivate + PublicYeshttps://vulnerability-lab.com/hacktivity.phphttps://www.vulnerability-lab.com/list-of-bug-bounty-programs.php
Vulnscopehttps://vulnscope.comChile@vulnscopePrivate + PublicYeshttps://vulnscope.com/hacker-rankinghttps://vulnscope.com/programas
WhiteHubhttps://whitehub.netVietnam@CyStackSecurityPrivate + PublicYeshttps://whitehub.net/leaderboardhttps://whitehub.net/programs
YesWeHackhttps://yeswehack.comFrance@yeswehackPrivate + PublicYeshttps://yeswehack.com/rankinghttps://yeswehack.com/programs
Yogoshahttps://yogosha.comFrance@yogoshaofficialPrivateYeshttps://yogosha.com/hackers/leaderboard/
Zerocopterhttps://zerocopter.comNetherlands@zerocopterPrivateYes
ZeroDay Testhttps://zerodaytest.comBangladesh@Zer0day_t3st