Bug Bounty Directory
Every public program across HackerOne, Bugcrowd, Intigriti & YesWeHack — 924 targets, refreshed daily. Pick one, hack it on the platform that hosts it. Sharpen up in our labs first.
// data refreshed 9/7/2026, 5:52:40 PM
// platform
Swiss Post - E-Voting
Source Code · System Specification · Scenarios with Special Bounties
≤ $230kyeswehack 4 in scope
4≤ $230kyeswehack
Doctolib
www.doctolib.(fr|de|it) · pro.doctolib.(fr|de|it) (see "Free features for healthcare professionals")) · Special scenarios (see description)
≤ $50kyeswehack 9 in scope
9≤ $50kyeswehack
FDJ United (Online Betting and Gaming) - Bug Bounty program
www.unibet.(com|it|se|co.uk|be|nl|dk|ro|ee|ie|com.au|mt) · fi.unibet.com · payment.unibet.(com|it|se|co.uk|be|nl|dk|ro|ee|ie|com.au|mt)
≤ $15kyeswehack 33 in scope
33≤ $15kyeswehack
YesWeHack
https://yeswehack.com · https://api.yeswehack.com · https://apps.yeswehack.com
≤ $15kyeswehack 4 in scope
4≤ $15kyeswehack
OVHcloud
api.ovh.com · www.ovh.com · *.soyoustart.com
≤ $13kyeswehack 3 in scope
3≤ $13kyeswehack
TeamViewer - Bounty Program
https://www.teamviewer.com/en/products/teamviewer/ · https://web.teamviewer.com · https://account.teamviewer.com
≤ $10kyeswehack 9 in scope
9≤ $10kyeswehack
Swiss Post
(*.post.ch:80|*.post.ch:443) AND 194.41.128.0/17 · https://account.post.ch · https://shop.post.ch/shop
≤ $10kyeswehack 9 in scope
9≤ $10kyeswehack
Mon Espace Santé (MES)
www.monespacesante.fr · admincms.monespacesante.fr · adminstore.monespacesante.fr
≤ $8kyeswehack 43 in scope
43≤ $8kyeswehack
Infomaniak Bug Bounty program
ksuite.infomaniak.com · *.kdrive.infomaniak.com · api.infomaniak.com
≤ $7kyeswehack 46 in scope
46≤ $7kyeswehack
KOMOJU - Public Bug Bounty Program
https://yeswehack.staging.komoju.com · https://doc.komoju.com/docs/fields-overview
≤ $7kyeswehack 2 in scope
2≤ $7kyeswehack
Thüringer Aufbaubank Bug Bounty Program
https://thueringer-foerderportal.eu · https://login.aufbaubank.de
≤ $7kyeswehack 2 in scope
2≤ $7kyeswehack
Telenor Sweden Public Bug Bounty Program
telenor.se · *.signin.telenor.se · *.profile.telenor.se
≤ $6kyeswehack 24 in scope
24≤ $6kyeswehack
GoTo Financial - Public Bounty Program
https://apps.apple.com/id/app/gopay-transfer-pulsa-bills/id6446321594 · https://play.google.com/store/apps/details?id=com.gojek.gopay&hl=id · *.gopayapi.com
≤ $5kyeswehack 14 in scope
14≤ $5kyeswehack
Ezviz - Bug Bounty Program
Hardware found on https://www.ezviz.com/category/security-wifi-cameras · Hardware found on https://www.ezviz.com/category/smart-home · api.ezvizlife.com
≤ $5kyeswehack 13 in scope
13≤ $5kyeswehack
Paddle.com Public Bug Bounty Program
https://vendors.paddle.com · https://sandbox-vendors.paddle.com · https://api.paddle.com
≤ $5kyeswehack 12 in scope
12≤ $5kyeswehack
Maya - Public Bug Bounty Program
https://play.google.com/store/apps/details?id=com.paymaya · https://apps.apple.com/am/app/maya-your-all-in-one-money-app/id991673877 · https://appgallery.huawei.com/app/C101186357
≤ $5kyeswehack 9 in scope
9≤ $5kyeswehack
3DS OUTSCALE
https://cockpit-eu-west-2.outscale.com/ · https://fcu.eu-west-2.outscale.com · https://lbu.eu-west-2.outscale.com
≤ $5kyeswehack 7 in scope
7≤ $5kyeswehack
Louis Vuitton Malletier - Public Bug Bounty Program
https://[it | fr | us | sg | …].louisvuitton.com · *.api.louisvuitton.com · https://apps.apple.com/fr/app/louis-vuitton/id709101942
≤ $5kyeswehack 6 in scope
6≤ $5kyeswehack
Cryptobox
https://bounty.cryptobox.com · https://play.google.com/store/apps/details?id=com.ercom.cryptobox.release&hl=fr · https://apps.apple.com/fr/app/cryptobox/id972602802
≤ $5kyeswehack 3 in scope
3≤ $5kyeswehack
Tencent Bug Bounty Program
≤ $5kyeswehack 2 in scope
2≤ $5kyeswehack
MediaMarktSaturn Bug Bounty Program
https://www.mediamarkt.de · https://www.saturn.de · https://www.mediamarkt.com.tr
≤ $4kyeswehack 31 in scope
31≤ $4kyeswehack
HARMAN International - Web Applications
*.jbl.com · https://www.bowerswilkins.com · https://www.denon.com
≤ $4kyeswehack 27 in scope
27≤ $4kyeswehack
Harman International Lifestyle Products & Services
Device: JBL Bar 500MK2 · Device: JBL Bar 700MK2 · Device: JBL Bar 800MK2
≤ $4kyeswehack 25 in scope
25≤ $4kyeswehack
ATG Public Bug Bounty Program
*.atg.se · www.atg.se · api.atg.se
≤ $4kyeswehack 7 in scope
7≤ $4kyeswehack