Open Bug Bounty Community https://www.openbugbounty.org/bugbounty-list/ The complete list of bug bounty and security vulnerability disclosure programs launched and operated by open bug bounty community. Resources — Disclosure Email, Website security page, Number of reports fixed. BugCrowd bug bounty list https://www.bugcrowd.com/bug-bounty-list/ The most comprehensive, up-to-date crowdsourced list of bug bounty and security vulnerability disclosure programs from across the web curated by the hacker community. Filters — Program Name, Bug Bounty eligible, Swag, Hall of Fame, Submission URL, Safe harbor. Project Discovery Chaos web program list https://github.com/projectdiscovery/public-bugbounty-programs The JSON file includes the public bug bounty programs listed on . chaos.projectdiscovery.io { "name":"HackerOne", "url":"https://hackerone.com/security", "bounty": true, "swag": true, "domains":[ "hackerone.com", "hackerone.net", "hacker101.com", "hackerone-ext-content.com" ] } Disclose DB program list https://raw.githubusercontent.com/disclose/diodb/master/program-list.json A true, community-powered, vendor-agnostic directory of all known VDP and BBPs, contact details, policy location, preferred languages, and the status of Safe harbor, Availability rewards, hall of fame, swag, and Disclosure policy. FireBounty https://firebounty.com/ Government VDPs https://github.com/cablej/hack-your-government Vulnerability disclosure policies and bug bounty programs are becoming standard across industry and government. Beginning with the U.S. Department of Defense, several government agencies worldwide have implemented vulnerability disclosure programs. This is a list of government agencies that have bug bounty programs or vulnerability disclosure policies. Note: This list is not an invitation to hack any of the listed organizations. Ensure that you comply with all listed terms of an organization’s vulnerability disclosure policy. Includes details about — Organization, Type, Rewards, Link, Notes. Google dorks List https://github.com/sushiwushi/bug-bounty-dorks List of Google Dorks to search for companies that have a responsible disclosure program or bug bounty program which are not affiliated with known bug bounty platforms such as HackerOne or BugCrowd. If you found this article helpful 👇🏻 https://buymeacoffee.com/sam5epi0l Comment your queries. Check out other articles. Open terminal — https://sam5epi0l.github.io/ Also Published here

Discovery

Google

Read My Stories

Buy Me a Coffee

Hire Me

Portfolio

Too Long; Didn't Read

CTA: Download the FREE AI Productivity Shift report

Top Bug Bounty Programmes You Can Participate in Today

About Author

Comments

TOPICS

THIS ARTICLE WAS FEATURED IN

Related Stories

Untitled Story

#10 Rules of Bug Bounty

A Guide To Web Security Testing: Part 1 - Mapping Contents

A Guide To Web Security Testing: Part 2 - Analyze the Web Application

Bounty0x Is Here To Change The Way People Make Money With Cryptos

Bug Bounties and Penetration Testing Will NOT Be Made Obsolete Anytime Soon.

#10 Rules of Bug Bounty

A Guide To Web Security Testing: Part 1 - Mapping Contents

A Guide To Web Security Testing: Part 2 - Analyze the Web Application

Bounty0x Is Here To Change The Way People Make Money With Cryptos

Bug Bounties and Penetration Testing Will NOT Be Made Obsolete Anytime Soon.

Light-Mode

Classic

Newspaper

Dark-Mode

Neon Noir

Minty

HN StartUps