Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
OpenSea Managed Bug Bounty Program
https://opensea.io/ · http://wallet.opensea.io/ · https://play.google.com/store/apps/details?id=io.opensea&hl=en_US&gl=US
≤ $3.0Mbugcrowd 11 in scope
11≤ $3.0Mbugcrowd
Swiss Post - E-Voting
Source Code · System Specification · Scenarios with Special Bounties
≤ $230kyeswehack 4 in scope
4≤ $230kyeswehack
Fireblocks MPC Managed Bug Bounty Engagement
https://github.com/fireblocks/mpc-lib
≤ $150kbugcrowd 1 in scope
1≤ $150kbugcrowd
T-Mobile
Self-Register Account on T-Mobile Microsoft Entra ID · Cellular Network Auth Bypass via Web App/T-Life (404-200-7239) · T&P Servers
≤ $134kbugcrowd 77 in scope
77≤ $134kbugcrowd
Tesla
*.tesla.cn · *.tesla.services · https://apps.apple.com/us/app/tesla/id582007913
≤ $100kbugcrowd 11 in scope
11≤ $100kbugcrowd
Intel®
Hardware · Firmware · Software
≤ $100kintigriti 5 in scope
5≤ $100kintigriti
SpaceX/Starlink
≤ $100kbugcrowd 1 in scope
1≤ $100kbugcrowd
Sophos
https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial · https://central.sophos.com/ · Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE
≤ $80kbugcrowd 18 in scope
18≤ $80kbugcrowd
Okta
bugcrowd-pam-###.oktapreview.com · bugcrowd-pam-###.pam.oktapreview.com · https://bugcrowd-pam-###.workflows.oktapreview.com
≤ $75kbugcrowd 21 in scope
21≤ $75kbugcrowd
Auth0 by Okta
config.cic-bug-bounty.auth0app.com · https://manage.cic-bug-bounty.auth0app.com/ · *.cic-bug-bounty.auth0app.com
≤ $50kbugcrowd 25 in scope
25≤ $50kbugcrowd
Doctolib
www.doctolib.(fr|de|it) · pro.doctolib.(fr|de|it) (see "Free features for healthcare professionals")) · Special scenarios (see description)
≤ $50kyeswehack 9 in scope
9≤ $50kyeswehack
Zendesk Managed Bug Bounty Engagement
Zendesk AI · Zendesk Front End · Zendesk Suite
≤ $50kbugcrowd 6 in scope
6≤ $50kbugcrowd
AXIS OS
AXIS OS
≤ $40kbugcrowd 1 in scope
1≤ $40kbugcrowd
Altera
Firmware · Hardware · FPGA Solution Development Tools and Utilities
≤ $30kintigriti 5 in scope
5≤ $30kintigriti
Aiven Managed Bug Bounty
https://aiven.io/clickhouse · https://aiven.io/docs/products/metrics/concepts/metrics-overview · Aiven for Valkey
≤ $25kbugcrowd 16 in scope
16≤ $25kbugcrowd
Pinterest
https://api.pinterest.com · *.pinterest.com Web Apps · https://apps.apple.com/us/app/pinterest/id429047995
≤ $25kbugcrowd 13 in scope
13≤ $25kbugcrowd
Hypixel Studios Managed Bug Bounty Engagement
Hypixel Public APIs · Hytale Game Client · Hytale Game Server
≤ $25kbugcrowd 10 in scope
10≤ $25kbugcrowd
Bullish Exchange
https://simnext.bullish-test.com · https://api.simnext.bullish-test.com
≤ $25kbugcrowd 2 in scope
2≤ $25kbugcrowd
Kiteworks
https://kw-bugcrowd-pub.bounty.kiteworks.dev/
≤ $25kbugcrowd 1 in scope
1≤ $25kbugcrowd
SAP Invitational Bug Bounty Program
SAP SuccessFactors Employee Central · SAP SuccessFactors Recruiting Marketing · SAP S/4HANA Cloud Public Edition
≤ $20kbugcrowd 25 in scope
25≤ $20kbugcrowd
Chime Managed Bug Bounty Engagement
All Chime Assets · *.chimepayments.com · https://*.chime.com
≤ $20kbugcrowd 19 in scope
19≤ $20kbugcrowd
Trusted Firmware
TrustedFirmware-A (TF-A) · TrustedFirmware-M (TF-M) · TF-PSA-Crypto
≤ $20kintigriti 4 in scope
4≤ $20kintigriti
Arm
Firmware: Mali Command Stream Frontend (CSF) Firmware · Software: Mali GPU Kernel Driver
≤ $20kintigriti 2 in scope
2≤ $20kintigriti
FIS
Any FIS asset is in scope
≤ $20kbugcrowd 1 in scope
1≤ $20kbugcrowd