Get Money Quick.INFO
The webmaster's directory — sponsors, hosting, scripts, tutorials. Curated since 2001.
BUG BOUNTY
31 listings
ADULT GATE: OFF
§15 · The Directory

Bug Bounty

HackerOne, Bugcrowd, Immunefi. Find the hole, report it, get paid — legally.

31 listings · 1 clicks all-time
Heads up: some links on this site are referral/affiliate links. If you sign up through them we may earn a commission, at no cost to you. Those are marked REF.
Sort Top New Hot A–Z
+ Submit a listing
  1. 01

    YesWeHack

    European bug bounty and VDP platform with a large public program list.

    yeswehack.com 1 clicks
    Visit →
  2. 02

    HackerOne

    The biggest bug bounty platform. Public and private programs from thousands of companies.

    hackerone.com
    Visit →
  3. 03

    Bugcrowd

    Crowdsourced security platform with public bounties and invite-only programs.

    bugcrowd.com
    Visit →
  4. 04

    Intigriti

    European bug bounty platform. Strong on EU companies and fast triage.

    intigriti.com
    Visit →
  5. 05

    Immunefi

    Web3 and smart-contract bounties. Where the biggest single payouts happen.

    immunefi.com
    Visit →
  6. 06

    HackenProof

    Bug bounty platform focused on crypto and Web3 projects.

    hackenproof.com
    Visit →
  7. 07

    Synack Red Team

    Vetted, invite-only researcher network. Apply and pass the assessment to get paid work.

    synack.com/red-team
    Visit →
  8. 08

    Open Bug Bounty

    Coordinated disclosure for web vulnerabilities. Rewards are up to each site owner.

    openbugbounty.org
    Visit →
  9. 09

    Code4rena

    Competitive smart-contract audits. Prize pools split between finders.

    code4rena.com
    Visit →
  10. 10

    Sherlock

    Audit contests and bug bounties for DeFi protocols.

    sherlock.xyz
    Visit →
  11. 11

    Cantina

    Security competitions and bounties for Web3 code.

    cantina.xyz
    Visit →
  12. 12

    Google Bug Hunters

    Google's vulnerability reward programs: Google, Android, Chrome, Cloud.

    bughunters.google.com
    Visit →
  13. 13

    Microsoft Security Response Center

    Microsoft bounties for Windows, Azure, Edge, Copilot and more.

    microsoft.com/en-us/msrc/bounty
    Visit →
  14. 14

    Apple Security Bounty

    Apple's program for iOS, macOS and iCloud vulnerabilities.

    security.apple.com/bounty
    Visit →
  15. 15

    Meta Bug Bounty

    Bounties for Facebook, Instagram, WhatsApp and Quest.

    bugbounty.meta.com
    Visit →
  16. 16

    GitHub Security Bug Bounty

    GitHub's own bug bounty, run on HackerOne.

    bounty.github.com
    Visit →
  17. 17

    Zero Day Initiative

    Trend Micro buys vulnerability research and handles disclosure with the vendor.

    zerodayinitiative.com
    Visit →
  18. 18

    Hacker101

    HackerOne's free web security classes and CTF. Solving CTFs earns private invites.

    hacker101.com
    Visit →
  19. 19

    PortSwigger Web Security Academy

    Free hands-on labs for every major web vulnerability class.

    portswigger.net/web-security
    Visit →
  20. 20

    Hack The Box

    Hacking labs, Academy courses and certifications.

    hackthebox.com
    Visit →
  21. 21

    TryHackMe

    Beginner-friendly guided hacking rooms in your browser.

    tryhackme.com
    Visit →
  22. 22

    TCM Security Academy

    Affordable practical courses in pentesting and bug bounty.

    academy.tcm-sec.com
    Visit →
  23. 23

    INE Security

    Security training and the eJPT / eWPT certifications.

    ine.com
    Visit →
  24. 24

    PentesterLab

    Exercises that teach you to find bugs by reading real code.

    pentesterlab.com
    Visit →
  25. 25

    Bugcrowd University

    Free bug hunting training from Bugcrowd.

    bugcrowd.com/hackers/bugcrowd-university
    Visit →
  26. 26

    Burp Suite

    The standard web proxy for testing apps. Free Community edition.

    portswigger.net/burp
    Visit →
  27. 27

    Caido

    Lightweight, modern alternative to Burp Suite.

    caido.io
    Visit →
  28. 28

    ProjectDiscovery

    Open-source recon tools: nuclei, subfinder, httpx, katana.

    projectdiscovery.io
    Visit →
  29. 29

    OWASP ZAP

    Free, open-source web app scanner and proxy.

    zaproxy.org
    Visit →
  30. 30

    r/bugbounty

    Reddit community for bug hunters: writeups, questions, payouts.

    reddit.com/r/bugbounty
    Visit →
  31. 31

    Pentester Land Writeups

    A huge index of public bug bounty writeups. Learn what actually pays.

    pentester.land/writeups
    Visit →