Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
OpenSea Managed Bug Bounty Program
https://opensea.io/ · http://wallet.opensea.io/ · https://play.google.com/store/apps/details?id=io.opensea&hl=en_US&gl=US
≤ $3.0Mbugcrowd 11 in scope
11≤ $3.0Mbugcrowd
Fireblocks MPC Managed Bug Bounty Engagement
https://github.com/fireblocks/mpc-lib
≤ $150kbugcrowd 1 in scope
1≤ $150kbugcrowd
T-Mobile
Self-Register Account on T-Mobile Microsoft Entra ID · Cellular Network Auth Bypass via Web App/T-Life (404-200-7239) · T&P Servers
≤ $134kbugcrowd 77 in scope
77≤ $134kbugcrowd
Tesla
*.tesla.cn · *.tesla.services · https://apps.apple.com/us/app/tesla/id582007913
≤ $100kbugcrowd 11 in scope
11≤ $100kbugcrowd
SpaceX/Starlink
≤ $100kbugcrowd 1 in scope
1≤ $100kbugcrowd
Sophos
https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial · https://central.sophos.com/ · Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE
≤ $80kbugcrowd 18 in scope
18≤ $80kbugcrowd
Okta
bugcrowd-pam-###.oktapreview.com · bugcrowd-pam-###.pam.oktapreview.com · https://bugcrowd-pam-###.workflows.oktapreview.com
≤ $75kbugcrowd 21 in scope
21≤ $75kbugcrowd
Auth0 by Okta
config.cic-bug-bounty.auth0app.com · https://manage.cic-bug-bounty.auth0app.com/ · *.cic-bug-bounty.auth0app.com
≤ $50kbugcrowd 25 in scope
25≤ $50kbugcrowd
Zendesk Managed Bug Bounty Engagement
Zendesk AI · Zendesk Front End · Zendesk Suite
≤ $50kbugcrowd 6 in scope
6≤ $50kbugcrowd
AXIS OS
AXIS OS
≤ $40kbugcrowd 1 in scope
1≤ $40kbugcrowd
Aiven Managed Bug Bounty
https://aiven.io/clickhouse · https://aiven.io/docs/products/metrics/concepts/metrics-overview · Aiven for Valkey
≤ $25kbugcrowd 16 in scope
16≤ $25kbugcrowd
Pinterest
https://api.pinterest.com · *.pinterest.com Web Apps · https://apps.apple.com/us/app/pinterest/id429047995
≤ $25kbugcrowd 13 in scope
13≤ $25kbugcrowd
Hypixel Studios Managed Bug Bounty Engagement
Hypixel Public APIs · Hytale Game Client · Hytale Game Server
≤ $25kbugcrowd 10 in scope
10≤ $25kbugcrowd
Bullish Exchange
https://simnext.bullish-test.com · https://api.simnext.bullish-test.com
≤ $25kbugcrowd 2 in scope
2≤ $25kbugcrowd
Kiteworks
https://kw-bugcrowd-pub.bounty.kiteworks.dev/
≤ $25kbugcrowd 1 in scope
1≤ $25kbugcrowd
SAP Invitational Bug Bounty Program
SAP SuccessFactors Employee Central · SAP SuccessFactors Recruiting Marketing · SAP S/4HANA Cloud Public Edition
≤ $20kbugcrowd 25 in scope
25≤ $20kbugcrowd
Chime Managed Bug Bounty Engagement
All Chime Assets · *.chimepayments.com · https://*.chime.com
≤ $20kbugcrowd 19 in scope
19≤ $20kbugcrowd
FIS
Any FIS asset is in scope
≤ $20kbugcrowd 1 in scope
1≤ $20kbugcrowd
Square
https://squareup.com/ · https://squareup.com/ · https://square.online
≤ $18kbugcrowd 8 in scope
8≤ $18kbugcrowd
Cash App
https://itunes.apple.com/us/app/cash-app/id711923939?mt=8 · https://play.google.com/store/apps/details?id=com.squareup.cash · https://cash.app
≤ $18kbugcrowd 4 in scope
4≤ $18kbugcrowd
Canva
https://www.canva.com · https://www.canva.com/developers/ · Apps SDK Sandboxing
≤ $15kbugcrowd 18 in scope
18≤ $15kbugcrowd
Bitpanda Ongoing Bug Bounty
https://web.bitpanda.com · https://www.bitpanda.com/ · https://api.bitpanda.com
≤ $15kbugcrowd 10 in scope
10≤ $15kbugcrowd
eToro Managed Bug Bounty Engagement
https://*.etoro.com · https://io.getdelta.ios · https://io.getdelta.android
≤ $15kbugcrowd 8 in scope
8≤ $15kbugcrowd
Bitdefender
Bitdefender Total Security · *.bitdefender.net · Bitdefender Antimalware Engines
≤ $15kbugcrowd 5 in scope
5≤ $15kbugcrowd