Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
Swiss Post - E-Voting
Source Code · System Specification · Scenarios with Special Bounties
≤ $230kyeswehack 4 in scope
4≤ $230kyeswehack
SpaceX/Starlink
≤ $100kbugcrowd 1 in scope
1≤ $100kbugcrowd
Sophos
https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial · https://central.sophos.com/ · Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE
≤ $80kbugcrowd 18 in scope
18≤ $80kbugcrowd
SAP Invitational Bug Bounty Program
SAP SuccessFactors Employee Central · SAP SuccessFactors Recruiting Marketing · SAP S/4HANA Cloud Public Edition
≤ $20kbugcrowd 25 in scope
25≤ $20kbugcrowd
Square
https://squareup.com/ · https://squareup.com/ · https://square.online
≤ $18kbugcrowd 8 in scope
8≤ $18kbugcrowd
SEEK
*.seek.com · https://*.employer.seek.com · *.seekpass.co
≤ $10kbugcrowd 18 in scope
18≤ $10kbugcrowd
Swiss Post
(*.post.ch:80|*.post.ch:443) AND 194.41.128.0/17 · https://account.post.ch · https://shop.post.ch/shop
≤ $10kyeswehack 9 in scope
9≤ $10kyeswehack
Superdrug
www.superdrug.com · Superdrug iOS · Superdrug Android
≤ $9kintigriti 28 in scope
28≤ $9kintigriti
Skyscanner
Skyscanner iOS App · Skyscanner Android App · gateway.skyscanner.net/*
≤ $8kbugcrowd 10 in scope
10≤ $8kbugcrowd
Safety Bug Bounty
Agentic Tools · *.openai.com · https://openai.com/
≤ $8kbugcrowd 4 in scope
4≤ $8kbugcrowd
SBB - Swiss Federal Railways
Mobile Apps · *.swisspass.ch · www.sbb.ch
≤ $7kintigriti 13 in scope
13≤ $7kintigriti
SimpliSafe Managed Bug Bounty Engagement
https://bb1.simplisafe.com · https://bb2.simplisafe.com · https://cb.simplisafe.com
≤ $6kbugcrowd 24 in scope
24≤ $6kbugcrowd
Seek.com
███████████████████ · ████████████ · ███████████████
≤ $6kbugcrowd 18 in scope
18≤ $6kbugcrowd
SimScale
SimScale API · SimScale Platform · SimScale Forum
≤ $6kintigriti 4 in scope
4≤ $6kintigriti
Skroutz Public Managed Bug Bounty
https://www.skroutz.gr
≤ $5kbugcrowd 1 in scope
1≤ $5kbugcrowd
SoundCloud
https://soundcloud.com · *.soundcloud.org · *.s-cloud.net
≤ $5kbugcrowd 10 in scope
10≤ $5kbugcrowd
Soteri Marketplace Bug Bounty
≤ $5kbugcrowd 5 in scope
5≤ $5kbugcrowd
Statuspage
https://manage.statuspage.io · *.statuspage.io
≤ $4kbugcrowd 2 in scope
2≤ $4kbugcrowd
Stiltsoft
≤ $3kbugcrowd 14 in scope
14≤ $3kbugcrowd
SecureDrop
https://github.com/freedomofpress/securedrop · https://github.com/freedomofpress/securedrop-workstation · https://github.com/freedomofpress/securedrop-client
≤ $3kbugcrowd 3 in scope
3≤ $3kbugcrowd
Swapcard
api.swapcard.com · chat-api.swapcard.com/graphql · developer.swapcard.com/event-admin/graphql
≤ $2kyeswehack 12 in scope
12≤ $2kyeswehack
Sogexia
https://my.sogexia.com · https://play.google.com/store/apps/details?id=io.gonative.android.xjndrq&hl=fr · itmss://apps.apple.com/us/app/id1510360750?ign-mscache=1
≤ $2kyeswehack 3 in scope
3≤ $2kyeswehack
SnapNames Bug Bounty
https://snapnames.com/ · https://www.namejet.com/
≤ $2kbugcrowd 2 in scope
2≤ $2kbugcrowd
SaaSJet
https://marketplace.atlassian.com/apps/1220385/issue-history?hosting=cloud
≤ $2kbugcrowd 10 in scope
10≤ $2kbugcrowd