Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
USAA
https://api.usaa.com/ · https://api-a.usaa.com · https://b2bapi-a.usaa.com
≤ $6kbugcrowd 49 in scope
49≤ $6kbugcrowd
Uphold
Uphold: Buy BTC, ETH and 360+ · Uphold: Buy BTC, ETH and 300+ · docs.uphold.com
≤ $6kintigriti 23 in scope
23≤ $6kintigriti
UZ Leuven
autodiscover.uzleuven.be · ecrf.uzleuven.be · extranet-asa.uzleuven.be
≤ $5kintigriti 34 in scope
34≤ $5kintigriti
Upwork
https://www.upwork.com · Upwork - Android Application · Upwork - iOS Application
≤ $5kbugcrowd 12 in scope
12≤ $5kbugcrowd
Ultra Mobile Public ECOMM 2025 Bug Bounty Engagement
http://my.mintmobile.com/ · http://my.ultramobile.com · https://my.mintmobile.com
≤ $5kbugcrowd 4 in scope
4≤ $5kbugcrowd
Ultra Mobile Mobile Apps Bug Bounty Engagement
https://play.google.com/store/apps/details?id=com.uvnv.mintsim · https://apps.apple.com/us/app/mint-mobile/id1295303441
≤ $5kbugcrowd 2 in scope
2≤ $5kbugcrowd
Ultra Mobile Public Bug Bounty Engagement
https://mintmobile.com · https://ultramobile.com
≤ $5kbugcrowd 2 in scope
2≤ $5kbugcrowd
Ultra Mobile Retailer Portal Bug Bounty Engagement
https://web-retailer-portal.ultramobile.com
≤ $4kbugcrowd 1 in scope
1≤ $4kbugcrowd
Unity Technologies
https://id.unity.com · https://api.unity.com · https://cloud.unity.com
≤ $3kbugcrowd 9 in scope
9≤ $3kbugcrowd
Under Armour Corporate
https://apphouse.underarmour.com/ · http://ourhouse.underarmour.com/ · https://transfer.underarmour.com/
≤ $3kbugcrowd 23 in scope
23≤ $3kbugcrowd
Under Armour Product Security
https://www.underarmour.com · https://www.underarmour.co.uk · https://apps.apple.com/us/app/under-armour/id1092704571
≤ $3kbugcrowd 14 in scope
14≤ $3kbugcrowd
Ubiquiti Inc.
UniFi OS Server · *.ubnt.com · *.ui.com
$hackerone 50 in scope
50$hackerone
Unico IDtech
*.uat.unico.app · [Unico] Liveness Bypass · accountshomolog.acesso.io
$hackerone 14 in scope
14$hackerone
Urban Company
1032480595 · 982922982 · com.urbanclap.provider
$hackerone 6 in scope
6$hackerone
Uber
*.uberinternal.com · *ubereats.com · Recon Data
$hackerone 4 in scope
4$hackerone
Udemy
www.udemy.com · yourcompany.udemy.com
$hackerone 2 in scope
2$hackerone
U.S. Department of State
*.AMERICA.GOV · *.DEVTESTFAN1.GOV · *.ELGUARDIA.NET
hackerone 24 in scope
24hackerone
USPS - United States Postal Service
gateway.usps.com · https://about.usps.com/what/government-services/election-mail/ · https://holdmail.usps.com/holdmail/
hackerone 17 in scope
17hackerone
Uniti
*.windstream.com · *.windstream.net · *broadviewnet.com
hackerone 16 in scope
16hackerone
UPS VDP
*.ups-mi.com · *.ups-tms.com · *.ups.com
hackerone 3 in scope
3hackerone
Ubisoft Responsible Disclosure Program
Game Titles · First-party Ubisoft Web, Desktop and Mobile applications
intigriti 2 in scope
2intigriti
University of Basel VDP
131.152.0.0/16 · *.unibas.ch
intigriti 2 in scope
2intigriti
Universitätsspital Zürich VDP
*.unispital.ch · *.usz.ch
intigriti 2 in scope
2intigriti
U.S. Dept Of Defense
hackerone
hackerone