Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
Kiteworks
https://kw-bugcrowd-pub.bounty.kiteworks.dev/
≤ $25kbugcrowd 1 in scope
1≤ $25kbugcrowd
KuCoin Managed Bug Bounty Program
https://kucoin.com · https://kucoin.com · https://apps.apple.com/us/app/kucoin-buy-bitcoin-crypto/id1378956601?mt=8
≤ $15kbugcrowd 4 in scope
4≤ $15kbugcrowd
Keeper Security Public Bounty Program
https://www.keepersecurity.com/download.html · https://www.keepersecurity.com/download.html · https://keepersecurity.com/vault
≤ $10kbugcrowd 22 in scope
22≤ $10kbugcrowd
Kruidvat
www.kruidvat.nl · www.kruidvat.be · Kruidvat BE iOS
≤ $9kintigriti 50 in scope
50≤ $9kintigriti
KOMOJU - Public Bug Bounty Program
https://yeswehack.staging.komoju.com · https://doc.komoju.com/docs/fields-overview
≤ $7kyeswehack 2 in scope
2≤ $7kyeswehack
Kaleido
https://www.remove.bg · https://www.designify.com · https://www.kaleido.ai
≤ $6kbugcrowd 4 in scope
4≤ $6kbugcrowd
Kohl's
Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below) · https://www.kohls.com · https://www.kohls.com/feature/app.jsp
≤ $5kbugcrowd 4 in scope
4≤ $5kbugcrowd
Klaviyo Managed Bug Bounty
https://*.myklpages.com/* · https://a.klaviyo.com/api/* · https://klaviyo.com/*
≤ $4kbugcrowd 51 in scope
51≤ $4kbugcrowd
K15t
≤ $2kbugcrowd 22 in scope
22≤ $2kbugcrowd
Kantega SSO
≤ $2kbugcrowd 11 in scope
11≤ $2kbugcrowd
Kubernetes
Community Management & Communications · Tier 1 · Tier 2
$hackerone 82 in scope
82$hackerone
Kiwi.com
*.kiwi.com · *.skypicker.com · auth.skypicker.com
$hackerone 19 in scope
19$hackerone
Krisp
*.krisp.ai · Other · account.krisp.ai
$hackerone 15 in scope
15$hackerone
Kong
GitHub Actions in our Public Repositories · Insomnia CLI (inso) · Insomnia Desktop Client
$hackerone 14 in scope
14$hackerone
KHealth
*.csconnect.org · *.hhc247.org · *.hmh247.org
$hackerone 13 in scope
13$hackerone
KAYAK
*.kayak.com · business.kayak.com · com.kayak.android
$hackerone 12 in scope
12$hackerone
KOHO
1091010942 · app.koho.ca · assets.koho.ca
$hackerone 11 in scope
11$hackerone
KKR-VDP
*.gafg.com · *.globalatlantic.com · *.kkr.cloud
hackerone 60 in scope
60hackerone
Kaseya
*.365command.com · *.auditforit.com · *.autotask.net
hackerone 36 in scope
36hackerone
KeyBank
*.key.com · *.key2businesscard.com · *.keyapsolutions.com
hackerone 19 in scope
19hackerone
Kiwa Vulnerability Disclosure Program
*.kiwa.com · *.kiwaimpact.com · *.kiwa.info
intigriti 6 in scope
6intigriti
KU Leuven Vulnerability Disclosure Program (VDP)
www.kuleuven.be · IPv4: 134.58.0.0/16 · IPv6: 2a02:2c40::/32
intigriti 3 in scope
3intigriti
Kraken Tech (VDP)
hackerone
hackerone
Khan Academy
hackerone
hackerone