bounty.index
menu

// sync across devices

Every public bounty program. One index.

1,170 public programs across five platforms — filtered by scope, asset type, and payout. Top of the leaderboard: $3,000,000.

browse programs →check a domain
bounty.index/programs?sort=reward
§TOP · 05payouts · right now
all →
  1. 01

    OpenSea Managed Bug Bounty Program

    Bugcrowd

    $3M

  2. 02

    Swiss Post - E-Voting

    YesWeHack

    €230K

  3. 03

    Fireblocks MPC Managed Bug Bounty Engagement

    Bugcrowd

    $150K

  4. 04

    T-Mobile

    Bugcrowd

    $134K

  5. 05

    SpaceX/Starlink

    Bugcrowd

    $100K

Programs
1,170
Paying bounties
601
In-scope assets
48,524
Platforms
5
Ingest
1d ago
Live · latest
Deezer Bug Bounty Program·YesWeHack·€2.5KKeycloak·YesWeHack·€5.0KDataCamp·Intigriti·€1.5KStellar.org·HackerOne·—Box BB·HackerOne·—Water-Link·Intigriti·€5.0KTrueLayer VDP·Intigriti·—Salto Vulnerability Disclosure ·Intigriti·—Kinepolis Group·Intigriti·€5.0KBrave Software·HackerOne·—HackerOne·HackerOne·—Django·HackerOne·—Ruby on Rails·HackerOne·—Phabricator·HackerOne·—Slack·HackerOne·—Concrete CMS·HackerOne·—Coinbase·HackerOne·—Khan Academy·HackerOne·—Automattic·HackerOne·—Cloudflare Public Bug Bounty·HackerOne·—Deezer Bug Bounty Program·YesWeHack·€2.5KKeycloak·YesWeHack·€5.0KDataCamp·Intigriti·€1.5KStellar.org·HackerOne·—Box BB·HackerOne·—Water-Link·Intigriti·€5.0KTrueLayer VDP·Intigriti·—Salto Vulnerability Disclosure ·Intigriti·—Kinepolis Group·Intigriti·€5.0KBrave Software·HackerOne·—HackerOne·HackerOne·—Django·HackerOne·—Ruby on Rails·HackerOne·—Phabricator·HackerOne·—Slack·HackerOne·—Concrete CMS·HackerOne·—Coinbase·HackerOne·—Khan Academy·HackerOne·—Automattic·HackerOne·—Cloudflare Public Bug Bounty·HackerOne·—

§01/Workflow

Three steps.
Zero platform-hopping.

01step

Aggregate.

Every public program from five platforms pulled daily into a single normalized index. HackerOne, Bugcrowd, Intigriti, YesWeHack, Federacy.

// source · arkadiyt/bounty-targets-data

$ ingest --all

Σ 918

INDEX918
  • HackerOneHackerOne+448
  • BugcrowdBugcrowd+242
  • IntigritiIntigriti+131
  • YesWeHackYesWeHack+62
  • federacyFederacy+35
02step

Filter.

Platform, asset type (wildcard, API, mobile, hardware, source), minimum payout tier, and full-text scope search. Chip-based. URL is the state.

// scan-heavy · not click-heavy

$ filter

→ 42

RESULTS
bugcrowd ×wildcard ×$10k+ ×
03step

Hunt.

Open a program to see full in-scope + out-of-scope lists with severity notes. Jump straight to the platform to submit.

// / to search · j k ↵

$ open shopify

↗ submit
Shopify$50K
+*.shopify.comwildcard
+api.shopify.comapi
+checkout.shopify.comurl
−community.shopify.comout

§ 03 · Pulse

What's moving now.

Recently added

last 14 days

Top new payouts

last 30 days

§02/Why this exists

Every alternative is fragmented.

Each platform shows its own programs. Directories are stale or policy-only. Raw JSON is fine if you enjoy jq. This is the one built for scanning.

bounty.index
Coverage
5 of 5 · unified
Sort by payout
✓ max payout
Scope lookup
✓ one query
Keyboard nav
✓ / j k ↵
HackerOne directory
Coverage
1 of 5
Sort by payout
severity only
Scope lookup
✗
Keyboard nav
✗
Bugcrowd programs page
Coverage
1 of 5
Sort by payout
✓ max payout
Scope lookup
✗
Keyboard nav
✗
disclose.io
Coverage
VDP policies only
Sort by payout
✗
Scope lookup
✗
Keyboard nav
✗
bounty-targets-data
Coverage
5 of 5 · raw JSON
Sort by payout
grep + jq
Scope lookup
grep + jq
Keyboard nav
n/a

§03/What it does

Four things.
Done properly.

01 · index

Unified index

One table. Five platforms. Sort by max reward, filter by asset type, jump to the highest payouts first. 601 of 1,170 pay in cash right now.

/programs
ProgramMax reward
OpenSea$3M
T-Mobile$134K
Intel®$100K

02 · lookup

Scope lookup

Paste a domain. Instant verdict — in-scope somewhere, or not.

$ lookup tesla.com

→ in scope · 2 programs

/scope-lookup

03 · nav

Keyboard-first

/searchj kmove↵openescblur
anywhere

04 · feed

Log & RSS

New programs surface within an hour, grouped as a dated log. Subscribe by RSS or read the web view.

/feed
2026-08-03OpenSeanew
2026-08-03Fireblocks MPCnew
2026-08-02Twilioscope+

§04/Start hunting

601 programs
are paying bounties
right now.

Filter the list, save an RSS, find the ones that fit your stack.

browse paying programs →check a domain