Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
Pinterest
https://api.pinterest.com · *.pinterest.com Web Apps · https://apps.apple.com/us/app/pinterest/id429047995
≤ $25kbugcrowd 13 in scope
13≤ $25kbugcrowd
Pixabay
https://pixabay.com/
≤ $6kbugcrowd 1 in scope
1≤ $6kbugcrowd
Pexels
https://www.pexels.com/
≤ $6kbugcrowd 1 in scope
1≤ $6kbugcrowd
Personio
*.app.personio-dev.com · *.app.personio.com · *.personio-internal.de
≤ $5kintigriti 14 in scope
14≤ $5kintigriti
Paddle.com Public Bug Bounty Program
https://vendors.paddle.com · https://sandbox-vendors.paddle.com · https://api.paddle.com
≤ $5kyeswehack 12 in scope
12≤ $5kyeswehack
Plusgrade Loyalty Public Program
*.points.com · Additional Loyalty scope included under resources tab
≤ $5kbugcrowd 2 in scope
2≤ $5kbugcrowd
PNI Media - Bug Bounty
████████████████████████████████████████████████████ · ██████████████████████████████████████████ · █████████████████████████████████████████████
≤ $5kbugcrowd 59 in scope
59≤ $5kbugcrowd
Port of Antwerp-Bruges
188.118.8.0/25 · 94.107.237.192/26 · login-test.portofantwerpbruges.com/
≤ $5kintigriti 49 in scope
49≤ $5kintigriti
PlanetHoster Bug Bounty
https://my.planethoster.com · https://api.planethoster.net · https://world.planethoster.net
≤ $3kbugcrowd 5 in scope
5≤ $3kbugcrowd
Programme de prime aux bogues du Gouvernement du Québec
*.cyber.gouv.qc.ca · https://auth-ywh.it.authentification.si.gouv.qc.ca/
≤ $3kyeswehack 2 in scope
2≤ $3kyeswehack
Posti Bug Bounty
postikuori.posti.fi · logout.id.posti.fi · mfa.posti.fi
≤ $2kintigriti 43 in scope
43≤ $2kintigriti
Programmer Hat Marketplace Bug Bounty Program
≤ $2kbugcrowd 6 in scope
6≤ $2kbugcrowd
ProjectBalm
https://marketplace.atlassian.com/apps/1213146/risk-register?hosting=cloud
≤ $2kbugcrowd 1 in scope
1≤ $2kbugcrowd
Private Internet Access - Bug Bounty Program
*.privateinternetaccess.com · *.piaservers.com · *.piaservers.net
≤ $1kyeswehack 12 in scope
12≤ $1kyeswehack
Prosus
https://dealflow.prosus.com · https://dealflowapi.prosus.com · https://analytics-admin.prosus.com
≤ $1kbugcrowd 10 in scope
10≤ $1kbugcrowd
Pine Labs Bug Bounty Program
https://billingserver.pinelabs.com · dashboard.pluralonline.com · https://lounge.pinelabs.com/loungeui/login
≤ $1kyeswehack 22 in scope
22≤ $1kyeswehack
Pantheon
https://dashboard.pantheon.io
≤ $500bugcrowd 1 in scope
1≤ $500bugcrowd
Playtika
*.bingoblitz.com · *.boardkingsgame.com · *.caesarsgames.com
$hackerone 65 in scope
65$hackerone
PayPal
*.braintree-api.com · *.braintree.tools · *.braintreegateway.com
$hackerone 41 in scope
41$hackerone
PlayStation
*.api.playstation.com · *.playstation.com · *.playstation.net
$hackerone 24 in scope
24$hackerone
pixiv
*.fanbox.cc · accounts.pixiv.net · booth.pm
$hackerone 18 in scope
18$hackerone
Priceline
336381998 · Penny · bookingholdings-coe.com
$hackerone 13 in scope
13$hackerone
Plaid
cdn.plaid.com · dashboard.plaid.com · demo.plaid.com
$hackerone 12 in scope
12$hackerone
Privy (Bounty)
@privy-io controlled namespace dependencies · api.privy.io · auth.privy.io
$hackerone 12 in scope
12$hackerone