18. Bug bounty/security
14 records. Official 11, secondary 2, unverified 1. JSON
HackerOne official (totals) live
18 Bug bounty/security · Platform · platform
Sells or earns: bug bounties, VDPs, pentests
$380M+ rewarded (official page); fees not on page
Payout: per program · Eligibility: hacker account
Bugcrowd official (totals) live
18 Bug bounty/security · Platform · platform
Sells or earns: bug bounties
$200M+ rewarded; average P1 $3,000; P1 paid within hours
Payout: per program · Eligibility: researcher account
Intigriti official (totals) live
18 Bug bounty/security · Platform · platform
Sells or earns: bug bounties
EUR 50M+ paid; 400+ programs
Payout: per program · Eligibility: researcher account
Synack Red Team official live
18 Bug bounty/security · Platform · platform
Sells or earns: vulnerability hunting, missions
$500 to several thousand per vuln; missions $25-$50, ad-hoc $100+; same-day pay
Payout: same day · Eligibility: 5-stage vetting; independent contractor
Zero Day Initiative official live
18 Bug bounty/security · Broker · broker
Sells or earns: vulnerability acquisition
paid by check/wire; tier bonuses $2,000-$25,000 and +10% to +25% on submissions
Payout: on offer acceptance · Eligibility: researcher account
Immunefi / Cantina / Code4rena / Sherlock official (statements quoted) Code4rena closing; others live
18 Bug bounty/security · Web3 · platform
Sells or earns: smart contract bounties and audit contests
Code4rena winding down (contests $40K-$135K USDC listed); Immunefi payouts not on page
Payout: per program · Eligibility: researcher account
huntr / 0din official (quoted) live
18 Bug bounty/security · AI/ML · platform
Sells or earns: AI/ML vulnerability challenges, GenAI bounties
huntr $15,000 challenge pots; 0din amounts not on page
Payout: per challenge · Eligibility: account
Apple Security Bounty official live
18 Bug bounty/security · Vendor · program
Sells or earns: Apple platform vulnerabilities
up to $2,000,000; $1M tiers; bonuses 50%/100%/150%; charity donations doubled
Payout: per report · Eligibility: research account
Microsoft Bounty Programs official live
18 Bug bounty/security · Vendor · program
Sells or earns: Microsoft products and cloud
up to $250,000 endpoint/on-prem; $100,000 cloud; Zero Day Quest $100,000
Payout: per report · Eligibility: MSRC submission
Meta Bug Bounty official live
18 Bug bounty/security · Vendor · program
Sells or earns: Meta apps and devices
Mobile RCE $300K; WhatsApp Private Processing $130K; ATO $30K; min $500; Hacker Plus up to +30%
Payout: per report · Eligibility: account
GitHub Security Bug Bounty official live
18 Bug bounty/security · Vendor · program
Sells or earns: GitHub vulnerabilities
$10,000+ public; $30,000+ private critical
Payout: per report · Eligibility: HackerOne submission
Google and Alphabet VRP (incl. AI VRP) secondary live
18 Bug bounty/security · Vendor · program
Sells or earns: vendor bounties
AI VRP up to $20,000 base ($30,000 with multipliers); $15,000 exfiltration; $10,000 other tier; Pixel Titan M zero-click up to $1.5M (2026); $17.1M paid in 2025
Payout: per report · Eligibility: Bug Hunters account · Notes: rules pages return title only to fetches
Mozilla / OpenAI unverified live
18 Bug bounty/security · Vendor · program
Sells or earns: vendor bounties
amounts not fetched
Payout: per report · Eligibility: account
Patchli.st secondary; site unreachable to fetch live (site certificate expired on 2026-09-05)
18 Bug bounty/security · Indie programs · platform
Sells or earns: bug bounty programs for indie SaaS
described as free to list with no subscriptions, platform fees or commissions; pay only for valid bugs
Payout: per bounty · Eligibility: account