Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 26 unique programs, refreshed daily. Platform counts overlap when a program runs on more than one platform. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 10/24/2026, 1:53:26 AM
// platform
Kiteworks Public Bug Bounty Program
Crown Jewel Heist · Kiteworks Core · Email Protection Gateway (EPG)
≤ $50kyeswehack 12 in scope
12≤ $50kyeswehack
Kiteworks
█████████████████████████████████████████████
≤ $25kbugcrowd 1 in scope
1≤ $25kbugcrowd
KuCoin Managed Bug Bounty Program
https://kucoin.com · https://kucoin.com · https://apps.apple.com/us/app/kucoin-buy-bitcoin-crypto/id1378956601?mt=8
≤ $15kbugcrowd 4 in scope
4≤ $15kbugcrowd
Keeper Security Public Bounty Program
https://www.keepersecurity.com/download.html · https://www.keepersecurity.com/download.html · https://keepersecurity.com/vault
≤ $10kbugcrowd 22 in scope
22≤ $10kbugcrowd
Kruidvat
www.kruidvat.nl · www.kruidvat.be · Kruidvat BE iOS
≤ $9kintigriti 50 in scope
50≤ $9kintigriti
Kaleido
https://www.remove.bg · https://www.designify.com · https://www.kaleido.ai
≤ $6kbugcrowd 4 in scope
4≤ $6kbugcrowd
Kinepolis Group
*.klubcinema.fr · *.megatix.be · booking.mjrtheatres.com
≤ $5kintigriti 51 in scope
51≤ $5kintigriti
Kohl's
Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below) · https://www.kohls.com · https://www.kohls.com/feature/app.jsp
≤ $5kbugcrowd 4 in scope
4≤ $5kbugcrowd
Klaviyo Managed Bug Bounty
https://*.myklpages.com/* · https://a.klaviyo.com/api/* · https://klaviyo.com/*
≤ $4kbugcrowd 51 in scope
51≤ $4kbugcrowd
K15t
≤ $2kbugcrowd 22 in scope
22≤ $2kbugcrowd
Kantega SSO
≤ $2kbugcrowd 10 in scope
10≤ $2kbugcrowd
Kubernetes
Community Management & Communications · Tier 1 · Tier 2
$hackerone 82 in scope
82$hackerone
Krisp
*.krisp.ai · Other · account.krisp.ai
$hackerone 15 in scope
15$hackerone
KHealth
*.csconnect.org · *.hhc247.org · *.hmh247.org
$hackerone 13 in scope
13$hackerone
KAYAK
*.kayak.com · business.kayak.com · com.kayak.android
$hackerone 12 in scope
12$hackerone
Kong
GitHub Actions in our Public Repositories · Kong Gateway Enterprise · Kong Gateway OSS
$hackerone 12 in scope
12$hackerone
KOHO
1091010942 · app.koho.ca · assets.koho.ca
$hackerone 11 in scope
11$hackerone
Kiwi.com
*.kiwi.com · *.skypicker.com · auth.skypicker.com
$hackerone 9 in scope
9$hackerone
Klarna
*.klarna.com · *.klarna.net · *.klarnacdn.net
$hackerone 8 in scope
8$hackerone
KKR-VDP
*.gafg.com · *.globalatlantic.com · *.kkr.cloud
hackerone 60 in scope
60hackerone
Kaseya
*.365command.com · *.auditforit.com · *.autotask.net
hackerone 36 in scope
36hackerone
KeyBank
*.key.com · *.key2businesscard.com · *.keyapsolutions.com
hackerone 19 in scope
19hackerone
Kiwa Vulnerability Disclosure Program
*.kiwa.com · *.kiwaimpact.com · *.kiwa.info
intigriti 6 in scope
6intigriti
KU Leuven Vulnerability Disclosure Program (VDP)
www.kuleuven.be · IPv4: 134.58.0.0/16 · IPv6: 2a02:2c40::/32
intigriti 3 in scope
3intigriti