Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
Hypixel Studios Managed Bug Bounty Engagement
Hypixel Public APIs · Hytale Game Client · Hytale Game Server
≤ $25kbugcrowd 10 in scope
10≤ $25kbugcrowd
HotDoc
█████████████████████████████████████████ · ██████████████████████████████████ · ███████████████████████████████████████████████████████████
≤ $8kbugcrowd 3 in scope
3≤ $8kbugcrowd
HPE Networking Product Public Program
HPE Aruba Networking Wireless - AOS-10.7 and above Gateways (GW) · HPE Aruba Networking Wireless - AOS-10.7 and above Access Points (AP) · HPE Aruba Networking Central - New UI (see Scope Details)
≤ $5kbugcrowd 20 in scope
20≤ $5kbugcrowd
HARMAN International - Web Applications
*.jbl.com · https://www.bowerswilkins.com · https://www.denon.com
≤ $4kyeswehack 27 in scope
27≤ $4kyeswehack
Harman International Lifestyle Products & Services
Device: JBL Bar 500MK2 · Device: JBL Bar 700MK2 · Device: JBL Bar 800MK2
≤ $4kyeswehack 25 in scope
25≤ $4kyeswehack
HostGator LATAM Bug Bounty
https://www.hostgator.com.br/ · https://financeiro.hostgator.com.br
≤ $3kbugcrowd 2 in scope
2≤ $3kbugcrowd
Het Laatste Nieuws
hln.be/inloggen · hln.be/login · hln.be/registreren
≤ $2kintigriti 7 in scope
7≤ $2kintigriti
Het Parool
myaccount.parool.nl · shop.parool.nl · webwinkel.parool.nl
≤ $2kintigriti 6 in scope
6≤ $2kintigriti
Humo
humo.be/registreren · myaccount.humo.be · shop.humo.be
≤ $2kintigriti 6 in scope
6≤ $2kintigriti
Here Technologies
*.account.api.here.com · *.account.here.com · *.mobilitygraph.hereapi.com
≤ $2kintigriti 13 in scope
13≤ $2kintigriti
Housing Application (huisvestingsapp) Bug Bounty Program
https://www.kuleuven.be/sapredir/huisvesting
≤ $2kintigriti 1 in scope
1≤ $2kintigriti
Hyatt Hotels
140.95.0.0/16 · 199.66.248.0/22 · 213.139.133.32/28
$hackerone 61 in scope
61$hackerone
HackerOne
*.vpn.hackerone.net · a5s.hackerone-ext-content.com · api.hackerone.com
$hackerone 26 in scope
26$hackerone
Hilton
*.hilton.com · *.hilton.io · *.hiltonbusinessonline.com
$hackerone 23 in scope
23$hackerone
HubSpot
*.hs-sites(-eu1)?.com · *.hubspotemail.net · *.hubspotpagebuilder.com
$hackerone 15 in scope
15$hackerone
hostinger
H5G · Managed OpenClaw · agents.hostinger.com
$hackerone 11 in scope
11$hackerone
HYPR
*.gethypr.com · *.hypr.com · HYPR Workforce Access.app
$hackerone 6 in scope
6$hackerone
Henkel
*.academyofhairsalon.com · *.agorex.cl · *.allyoucare-byhenkel.com
hackerone 257 in scope
257hackerone
HPE VDP
*.arubanetworks.com* · *.central.arubanetworks.com* · *.juniper.net
hackerone 207 in scope
207hackerone
HCL Software Inc.
HCL AppScan · HCL Atlas · HCL BigFix
hackerone 48 in scope
48hackerone
Hyland Software
*.experience.hyland.com,*.app.hyland.eu · Acuo · Alfresco
hackerone 14 in scope
14hackerone
Hack The Box
api.jobs.hackthebox.com · https://academy.hackthebox.com/ · https://account.hackthebox.com
hackerone 9 in scope
9hackerone
Hex
https://*.hex.tech · https://app.hex.tech · https://hex.tech
hackerone 3 in scope
3hackerone
Hy-Vee
*.hy-vee.cloud · *.hy-vee.com · Other Hy-Vee owned asset
hackerone 3 in scope
3hackerone