Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
T-Mobile
Self-Register Account on T-Mobile Microsoft Entra ID · Cellular Network Auth Bypass via Web App/T-Life (404-200-7239) · T&P Servers
≤ $134kbugcrowd 77 in scope
77≤ $134kbugcrowd
Tesla
*.tesla.cn · *.tesla.services · https://apps.apple.com/us/app/tesla/id582007913
≤ $100kbugcrowd 11 in scope
11≤ $100kbugcrowd
Trusted Firmware
TrustedFirmware-A (TF-A) · TrustedFirmware-M (TF-M) · TF-PSA-Crypto
≤ $20kintigriti 4 in scope
4≤ $20kintigriti
Trello
trello.com · api.trello.com · *.trello.services
≤ $12kbugcrowd 13 in scope
13≤ $12kbugcrowd
TeamViewer - Bounty Program
https://www.teamviewer.com/en/products/teamviewer/ · https://web.teamviewer.com · https://account.teamviewer.com
≤ $10kyeswehack 9 in scope
9≤ $10kyeswehack
The Perfume Shop
www.theperfumeshop.com · app.theperfumeshop.com · api.theperfumeshop.com
≤ $9kintigriti 10 in scope
10≤ $9kintigriti
Thüringer Aufbaubank Bug Bounty Program
https://thueringer-foerderportal.eu · https://login.aufbaubank.de
≤ $7kyeswehack 2 in scope
2≤ $7kyeswehack
Torfs
winkels.torfs.be · www.schoenentorfs.be · www.schoenentorfs.nl
≤ $7kintigriti 7 in scope
7≤ $7kintigriti
Telenor Sweden Public Bug Bounty Program
telenor.se · *.signin.telenor.se · *.profile.telenor.se
≤ $6kyeswehack 24 in scope
24≤ $6kyeswehack
The Trade Desk
https://open.sincera.io · https://desk.thetradedesk.com · https://api.thetradedesk.com
≤ $5kbugcrowd 38 in scope
38≤ $5kbugcrowd
Tripadvisor
https://api.production.cde.tamg.cloud · https://partnerapi.tapayments.com · https://partnerapi1.tapayments.com
≤ $5kbugcrowd 27 in scope
27≤ $5kbugcrowd
TIDAL
https://tidal.com/ · *.wimpmusic.com · *.tidalhifi.com
≤ $5kbugcrowd 10 in scope
10≤ $5kbugcrowd
Tencent Bug Bounty Program
≤ $5kyeswehack 2 in scope
2≤ $5kyeswehack
TheFork Managed Bug Bounty Engagement
https://manager.thefork.com · https://apps.apple.com/app/thefork-manager-neo/id1295795281 · https://play.google.com/store/apps/details?id=com.lafourchette.tfm3
≤ $4kbugcrowd 17 in scope
17≤ $4kbugcrowd
toom Baumarkt GmbH - Webshop
https://toom.de · https://api.toom.de
≤ $3kyeswehack 2 in scope
2≤ $3kyeswehack
Tomorrowland
cas.tomorrowland.com · *.weareone.world · belgium.tomorrowland.com
≤ $3kintigriti 22 in scope
22≤ $3kintigriti
The Hut Group: Public Managed Bug Bounty Engagement
https://www.cultbeauty.co.uk/ · https://www.lookfantastic.com/ · https://www.myprotein.com/
≤ $3kbugcrowd 9 in scope
9≤ $3kbugcrowd
Tamedia
https://www.tagesanzeiger.ch · API calls going to disco-api from https://www.tagesanzeiger.ch
≤ $3kbugcrowd 2 in scope
2≤ $3kbugcrowd
Tyler Technologies Data & Insights – Tyler Data Platform, powered by Socrata
https://opendata-demo.test-socrata.com · https://opendata.test-socrata.com
≤ $3kbugcrowd 2 in scope
2≤ $3kbugcrowd
Trouw
myaccount.trouw.nl · shop.trouw.nl · webwinkel.trouw.nl
≤ $2kintigriti 6 in scope
6≤ $2kintigriti
Tweakers
*.tweakblogs.net · *.tweakers.net · *.tweakimg.net
≤ $2kintigriti 3 in scope
3≤ $2kintigriti
The Plugin People
≤ $2kbugcrowd 7 in scope
7≤ $2kbugcrowd
ToolsPlus
https://marketplace.atlassian.com/apps/1217371/intercom-for-jira?hosting=cloud
≤ $2kbugcrowd 1 in scope
1≤ $2kbugcrowd
TRM Labs Public Bug Bounty Engagement
chainabuse-staging.com · api.chainabuse-staging.com
≤ $1kbugcrowd 2 in scope
2≤ $1kbugcrowd