Paddle.com Public Bug Bounty Program

YesWeHack up to $5k 12 in-scope assets

Paddle.com Public Bug Bounty Program runs a public bug bounty program hosted on YesWeHack. The program currently lists 12 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are rewarded, with payouts reaching up to $5k depending on severity.

// example in-scope assets

https://vendors.paddle.comhttps://sandbox-vendors.paddle.comhttps://api.paddle.comhttps://sandbox-api.paddle.com

Always read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.

open official YesWeHack program page

// more YesWeHack programs

Swiss Post - E-Voting≤ $230k Doctolib≤ $50k FDJ United (Online Betting and Gaming) - Bug Bounty program≤ $15k YesWeHack≤ $15k OVHcloud≤ $13k Swiss Post≤ $10k

// data aggregated from public YesWeHack listings · refreshed 8/24/2026 · the official program page is authoritative