OTTO.DE Bug Bounty

YesWeHack up to $3k 10 in-scope assets

OTTO.DE Bug Bounty runs a public bug bounty program hosted on YesWeHack. The program currently lists 10 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are rewarded, with payouts reaching up to $3k depending on severity.

// example in-scope assets

https://www.otto.dehttps://www.otto.de/jobshttps://play.google.com/store/apps/details?id=de.cellular.ottohybrid&hl=dehttps://apps.apple.com/de/app/otto-shopping-m%C3%B6bel/id404844644

Always read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.

open official YesWeHack program page

// more YesWeHack programs

Swiss Post - E-Voting≤ $230k Doctolib≤ $50k FDJ United (Online Betting and Gaming) - Bug Bounty program≤ $15k YesWeHack≤ $15k OVHcloud≤ $13k Swiss Post≤ $10k

// data aggregated from public YesWeHack listings · refreshed 8/24/2026 · the official program page is authoritative