Doctolib bug bounty program

YesWeHack up to $50k 9 in-scope assets

Doctolib runs a public bug bounty program hosted on YesWeHack. The program currently lists 9 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are rewarded, with payouts reaching up to $50k depending on severity.

// example in-scope assets

www.doctolib.(fr|de|it)pro.doctolib.(fr|de|it) (see "Free features for healthcare professionals"))Special scenarios (see description)*.doctolib.(fr|de|it|com|net)

Always read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.

open official YesWeHack program page

// more YesWeHack programs

Swiss Post - E-Voting≤ $230k FDJ United (Online Betting and Gaming) - Bug Bounty program≤ $15k YesWeHack≤ $15k OVHcloud≤ $13k Swiss Post≤ $10k TeamViewer - Bounty Program≤ $10k

// data aggregated from public YesWeHack listings · refreshed 8/24/2026 · the official program page is authoritative