bug-bounty-platforms

A community-powered, open catalog of every known bug bounty & vulnerability-disclosure platform on the Internet.

Part of the disclose.io Project — the open, vendor-neutral infrastructure for vulnerability disclosure. Browse the ecosystem →

---

An ongoing community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet.

Is there a platform or detail missing, or have you spotted something wrong? This site is open source. Improve this page!

Adding or moving an entry

Every platform lives in exactly one category section below. If a platform fits more than one, the first match in this precedence order wins: Government & public-interest → AI → Web3 → Brokered disclosure → Ecosystem-specific → General. If a category ever drops below two entries, fold it into General. Keep rows alphabetical within their section, and keep the 8-column format (CI enforces the column count).

Jump to: Government and public-interest programs · Web3 and smart-contract platforms · AI and LLM security platforms · Vulnerability acquisition and brokered disclosure · Ecosystem-specific platforms · General crowdsourced platforms

Government and public-interest programs

Platform Name	URL	Region	Twitter/X	Program Types	Has Leaderboard	Leaderboard URL	Public Programs URL
Australian Government VDP	https://www.homeaffairs.gov.au	Australia		Public	No
bugbounty.sa	https://bugbounty.sa	Saudi Arabia	@BugBountySA	Private	Yes	https://bugbounty.sa/leaderboard
CCB Belgium CVD	https://ccb.belgium.be/cert/vulnerability-reporting-ccb	Belgium		Public	No
CERT Polska CVD	https://cert.pl/en/cvd/	Poland	@CERT_Polska_en	Public	No		https://cert.pl/en/cve/
CERT-In RVDCP	https://www.cert-in.org.in/RVDCP.jsp	India	@IndianCERT	Public	Yes	https://www.cert-in.org.in/Hallof_Fame.jsp
CISA VDP Platform	https://www.cisa.gov/resources-tools/services/vulnerability-disclosure-policy-vdp-platform	USA	@CISAgov	Public	No
DIVD	https://www.divd.nl	Netherlands	@DIVDnl	Public	No
HITCON ZeroDay	https://zeroday.hitcon.org	Taiwan	@HacksInTaiwan	Private + Public	No		https://zeroday.hitcon.org/bug-bounty/list
Japan Vulnerability Notes (JVN)	https://jvn.jp/en/	Japan	@jpcert_en	Public	No		https://jvn.jp/en/nav/
KISA KNVD	https://knvd.krcert.or.kr	South Korea		Public	No
NCIIPC RVDP	https://nciipc.gov.in/RVDP.html	India	@NCIIPC	Public	No
NCSA Bug Bounty Programme	https://hub.ncsa.gov.mv/resources/bug-bounty-program	Maldives		Public	Yes	https://hub.ncsa.gov.mv/bug-bounty/hall-of-fame
NCSC-FI CVD	https://www.kyberturvallisuuskeskus.fi/en/report	Finland		Public	No
NCSC-NL CVD	https://www.ncsc.nl/contact/kwetsbaarheid-melden	Netherlands		Public	No
NKSC Lithuania CVD	https://www.nksc.lt/pranesti-spraga.html	Lithuania		Public	No
Open Bug Bounty	https://openbugbounty.org	Global	@openbugbounty	Public	Yes		https://openbugbounty.org/bugbounty-list/
Qatar Bug Bounty	https://bugbounty.qa	Qatar		Private + Public	No
Singapore GovTech VDP	https://www.tech.gov.sg/report-vulnerability/	Singapore	@GovTechSG	Public	No
Swiss NCSC Bug Bounty	https://www.ncsc.admin.ch	Switzerland		Public	No
Taiwan Vulnerability Note (TVN)	https://www.twcert.org.tw/en/np-138-2.html	Taiwan	@TWCERTCC	Public	No		https://www.twcert.org.tw/en/lp-139-2.html
UAE National Bug Bounty	https://bugbounty.ae	United Arab Emirates		Private
UK NCSC VDP	https://www.ncsc.gov.uk	UK	@NCSC	Public	No

Web3 and smart-contract platforms

Platform Name	URL	Region	Twitter/X	Program Types	Has Leaderboard	Leaderboard URL	Public Programs URL
AuditOne	https://auditone.io	Europe	@AuditOne_io	Private + Public	Yes	https://www.auditone.io/bounty-activity	https://www.auditone.io/bug-bounty
BugRap	https://bugrap.io		@BugRap_Team	Public	Yes	https://bugrap.io/whiteHats	https://bugrap.io/bounties
Cantina	https://cantina.xyz	USA	@Cantinaxyz	Private + Public	Yes	https://cantina.xyz/leaderboard	https://cantina.xyz/competitions
CertiK Bug Bounty	https://certik.com	USA	@CertiK	Private + Public	Yes	https://www.certik.com/products/bug-bounty
Certora Contests	https://www.certora.com/contests	Global	@certora	Public	Yes	https://www.certora.com/leaderboard	https://www.certora.com/contests
Code4rena	https://code4rena.com		@code4rena	Public	Yes	https://code4rena.com/leaderboard	https://code4rena.com/contests
CodeHawks	https://codehawks.cyfrin.io	USA	@CodeHawks	Private + Public	Yes	https://codehawks.cyfrin.io/leaderboard	https://codehawks.cyfrin.io/contests
HackenProof	https://hackenproof.com	Estonia	@HackenProof	Private + Public	Yes	https://hackenproof.com/leaderboard	https://hackenproof.com/programs
Hashlock	https://hashlock.com	Australia	@HashLockAudit	Private + Public	No		https://hashlock.com/bug-bounty
Hats	https://hats.finance		@HatsFinance	Public	Yes
Immunefi	https://immunefi.com		@immunefi	Public	Yes	https://immunefi.com/leaderboard/	https://immunefi.com/explore/
OpenBounty (Shentu)	https://openbounty.shentu.org			Public	Yes	https://openbounty.shentu.org/leaderboard	https://openbounty.shentu.org/allBounties
Remedy	https://r.xyz	Global	@xyz_remedy	Private + Public	No		https://hunt.r.xyz
Secure3	https://secure3.io	USA	@Secure3io	Private + Public
Sherlock	https://sherlock.xyz	Global	@sherlockdefi	Public	Yes	https://app.sherlock.xyz/audits/leaderboard	https://app.sherlock.xyz/audits/contests
SlowMist	https://slowmist.com	China	@SlowMist_Team	Public	Yes		https://slowmist.io/bug-bounty.html

AI and LLM security platforms

Platform Name	URL	Region	Twitter/X	Program Types	Has Leaderboard	Leaderboard URL	Public Programs URL
Gray Swan Arena	https://app.grayswan.ai/arena	USA	@GraySwanAI	Public	Yes	https://app.grayswan.ai/arena/leaderboard/global	https://app.grayswan.ai/arena
HackAPrompt	https://www.hackaprompt.com	USA		Public	Yes	https://www.hackaprompt.com/leaderboard
Huntr	https://huntr.com	UK	@huntrdev	Private + Public	Yes	https://huntr.com/leaderboard	https://huntr.com/bounties/hacktivity
ødin	https://0din.ai	USA	@0dinai	Public	Yes	https://0din.ai/leaderboard	https://0din.ai/scope

Vulnerability acquisition and brokered disclosure

Platform Name	URL	Region	Twitter/X	Program Types	Has Leaderboard	Leaderboard URL	Public Programs URL
SSD Secure Disclosure	https://ssd-disclosure.com	Israel	@SecuriTeam_SSD	Public	No
Zero Day Initiative	https://zerodayinitiative.com	USA	@thezdi	Public	Yes	https://zerodayinitiative.com/advisories/published/

Ecosystem-specific platforms

Platform Name	URL	Region	Twitter/X	Program Types	Has Leaderboard	Leaderboard URL	Public Programs URL
IssueHunt	https://issuehunt.io	Japan	@IssueHunt	Private + Public	Yes		https://issuehunt.io/programs
Patchstack	https://patchstack.com	Estonia	@paborza	Public	Yes	https://patchstack.com/database/leaderboard	https://patchstack.com/database/vdp
Wordfence Bug Bounty	https://www.wordfence.com/threat-intel/bug-bounty-program/	USA	@wordfence	Public	No

General crowdsourced platforms

Platform Name	URL	Region	Twitter/X	Program Types	Has Leaderboard	Leaderboard URL	Public Programs URL
360 SRC	https://src.360.net	China		Public + Private
BBHunt Japan	https://bbhunt.jp	Japan	@bbhuntjapan	Private + Public
BI.ZONE Bug Bounty	https://bugbounty.bi.zone	Russia	@bizone	Private + Public	Yes	https://bugbounty.bi.zone/top-hackers	https://bugbounty.bi.zone/companies
BountyTeam	https://www.bountyteam.com	China		Private + Public	Yes	https://www.bountyteam.com/leader-board	https://www.bountyteam.com/bug-bounty-list
Bug Bounty Switzerland	https://bugbounty.ch	Switzerland	@bugbounty_ch	Private + Public	Yes		https://www.bugbounty.ch/en/programs/
Bug Hunt	https://bughunt.com.br	Brazil	@bughuntoficial	Private + Public	Yes
Bug Zero	https://bugzero.io	Sri Lanka	@BugZero_io	Private + Public	Yes	https://bugzero.io/leaderboard	https://bugzero.io/programs
BugBank	https://www.bugbank.cn	China		Private + Public	Yes	https://www.bugbank.cn/ranks.html	https://www.bugbank.cn/task/
Bugbase	https://bugbase.ai	India	@bugbase	Private + Public	Yes	https://bugbase.ai/dashboard/leaderboard	https://bugbase.ai/programs
Bugbop	https://bugbop.com	Australia	@BugbopApp	Private + Public	Yes		https://bugbop.com/public-programs
BugBounter	https://bugbounter.com	US & Estonia & Turkey	@bugbounterr	Private + Public	Yes	https://app.bugbounter.com/public-top-bounters
BugBounty.am	https://bugbounty.am	Armenia		Private + Public
bugbounty.jp	https://bugbounty.jp	Japan		Private + Public			https://bugbounty.jp/en/
BugBounty.ru	https://bugbounty.ru	Russia		Private + Public			https://bugbounty.ru/app/programs
Bugcrowd	https://bugcrowd.com	USA	@bugcrowd	Private + Public	Yes	https://bugcrowd.com/leaderboard	https://bugcrowd.com/programs
Buglab	https://buglab.io	Singapore	@joinbuglab	Private + Public	Yes
Bugloud	https://bugloud.com	United Arab Emirates		Private + Public	Yes	https://bugloud.com/leaderboard	https://bugloud.com/programs
BugRakshak	https://www.bugrakshak.com	India		Private + Public	Yes	https://www.bugrakshak.com/platform/leaderboard
bugsbounty.io	https://bugsbounty.com	England	@bugsbounty_com	Private
Bugv	https://bugv.io	Nepal	@bugvsecurity	Public	Yes
Butian	https://butian.net	China		Private + Public	Yes	https://www.butian.net/Rank/whitehat	https://www.butian.net/Reward/plan/2
Capture The Bug	https://capturethebug.xyz	New Zealand	@Capturethebugs	Private
Cobalt	https://cobalt.io	USA	@cobalt_io	Private	Yes	https://app.us.cobalt.io/pentesters
Com Olho	https://comolho.com	India	@com_olho	Private + Public	Yes	https://cyber.comolho.com/researcher-community/	https://cyber.comolho.com/programs/bug-bounty/
Compass Security	https://compass-security.com	Switzerland	@compasssecurity	Private + Public	Yes		https://bugbounty.compass-security.com/
Crowdswarm	https://crowdswarm.io	United Arab Emirates	@Crowdswarm1	Private + Public	Yes
Cyber Army Indonesia	https://www.cyberarmy.asia	Indonesia	@cyberarmyid	Private + Public
Cyber3ra	https://cyber3ra.com	India		Private + Public
Cyberbay	https://cyberbay.tech	Hong Kong		Private + Public
CyberTalents	https://cybertalents.com	Middle East	@CyberTalents	Public	Yes	https://cybertalents.com/worldrank	https://cybertalents.com/competitions
Cyscope	https://cyscope.io	Switzerland & Latam	@cy_scope	Private + Public	Yes
Detectify	https://detectify.com	Sweden	@detectify	Crowdsource (ASM)	Yes
Dvuln	https://dvuln.com	Australia	@d_vuln	Private	Yes
Federacy	https://federacy.com	USA	@_federacy	Private + Public	Yes
Find The Gap	https://findthegap.co.kr/en	South Korea		Private + Public	No
Findbug	https://findbug.io	Kosovo	@Findbugks	Private	Yes
Genbounty	https://genbounty.com/	UK	@Genbounty	Private	Yes	https://genbounty.com/teams
Gerobug	https://gerobug.gerosecurity.com	Indonesia		Self-hosted	No		https://gerobug.gerosecurity.com/programs/
GObugfree	https://gobugfree.com	Switzerland	@gobugfree	Private + Public	Yes		https://gobugfree.com/programs
HackerOne	https://hackerone.com	USA	@hacker0x01	Private + Public	Yes	https://hackerone.com/leaderboard	https://hackerone.com/directory/programs
Hackr.fi	https://www.hackr.fi	Finland	@hackrfi	Private + Public	No		https://www.hackr.fi/en/programs.html
Hackrate	https://hckrt.com	Hungary	@hackrate	Private + Public	Yes		https://hckrt.com/Catalog
HACKTIFY	https://hacktify.eu	Central and Eastern Europe	@HACKTIFY_	Private + Public	Yes	https://hacktify.eu/en/leaderboard/	https://hacktify.eu/en/public-programs/
HuntBug	https://huntbug.com	USA	@officialhuntbug	Private + Public	Yes	https://huntbug.com/leaderboard
HuntersPay	https://www.hunterspay.com.br	Brazil		Private + Public	No
Huoxian	https://www.huoxian.cn	China		Private + Public	Yes	https://www.huoxian.cn/community	https://www.huoxian.cn/project
Inspectiv	https://inspectiv.com	USA	@inspectiv	Private + Public	Yes
Intigriti	https://intigriti.com	Belgium	@intigriti	Private + Public	Yes	https://intigriti.com/leaderboard	https://intigriti.com/programs
Kolahsefid	https://www.kolahsefid.org	Iran	@Kolaahsefid	Private + Public	No
Nordic Defender	https://nordicdefender.com	Sweden	@nordicdefender	Private
PatchDay	https://patchday.io	South Korea	@patchday_io	Private + Public	Yes
Ravro	https://ravro.ir	Iran	@Ravro_ir	Private + Public	Yes	https://ravro.ir/reports	https://ravro.ir/companies
RedStorm	https://redstorm.io	Indonesia	@redstorm_io	Private + Public	Yes		https://redstorm.io/program
safehats	https://safehats.com	India		Private + Public
Safevuln	https://safevuln.com	Vietnam		Public	Yes	https://safevuln.com/leaderboard	https://safevuln.com/programs
Secuna	https://secuna.io	Philippines	@SecunaSecurity	Private + Public	Yes		https://platform.secuna.io/programs
Secur0	https://secur0.com	Europe & Latam	@Secur00	Private + Public	Yes	https://app.secur0.com/leaderboards	https://app.secur0.com/programs
Standoff 365 Bug Bounty	https://bugbounty.standoff365.com	Russia	@standoff365	Private + Public	Yes	https://standoff365.com/en-US/ratings/	https://bugbounty.standoff365.com/en-US/
Swarmnetics	https://swarmnetics.com	Singapore	@swarmnetics	Private	Yes
Synack	https://synack.com	USA	@synack	Private	Yes
Teklabspace	https://teklabspace.com	Nigeria	@teklabspace	Public	Yes
Testbirds	https://testbirds.com	Germany	@Testbirds	QA + Bug Bounty	No
Topcoder	https://topcoder.com	USA	@topcoder	Dev + Bug Bounty	Yes	https://www.topcoder.com/community/statistics	https://www.topcoder.com/challenges
TrustLine	https://www.trustline.sa	Saudi Arabia	@trustlineSec	Private + Public
TumarOne	https://tumar.one	Kazakhstan		Private + Public	Yes	https://tumar.one/leaderboard	https://tumar.one/#for-bug-hunters
UzHunter	https://uzhunter.com	Uzbekistan
Vulbox	https://vulbox.com	China		Private + Public	Yes	https://vulbox.com/top/season	https://vulbox.com/projects/list
Vulnerability Lab	https://vulnerability-lab.com	Germany		Private + Public	Yes	https://vulnerability-lab.com/hacktivity.php	https://www.vulnerability-lab.com/list-of-bug-bounty-programs.php
Vulnscope	https://vulnscope.com	Chile	@vulnscope	Private + Public	Yes	https://vulnscope.com/hacker-ranking	https://vulnscope.com/programas
WhiteHub	https://whitehub.net	Vietnam	@CyStackSecurity	Private + Public	Yes	https://whitehub.net/leaderboard	https://whitehub.net/programs
YesWeHack	https://yeswehack.com	France	@yeswehack	Private + Public	Yes	https://yeswehack.com/ranking	https://yeswehack.com/programs
Yogosha	https://yogosha.com	France	@yogoshaofficial	Private	Yes	https://yogosha.com/hackers/leaderboard/
Zerocopter	https://zerocopter.com	Netherlands	@zerocopter	Private	Yes
ZeroDay Test	https://zerodaytest.com	Bangladesh	@Zer0day_t3st