Bug Bounty Platforms

A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms.

The canonical disclose.io database lives at directory.disclose.io. Is there a platform or detail missing? Let us know.

Last updated: July 6, 2026

Government and public-interest programs

22 platforms
Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
Australian Government VDPhomeaffairs.gov.auAustraliaPublicNo
bugbounty.sabugbounty.saSaudi ArabiaBugBountySAPrivateYesbugbounty.sa/leaderboard
CCB Belgium CVDccb.belgium.be/cert/vulnerability-reporting-ccbBelgiumPublicNo
CERT Polska CVDcert.pl/en/cvd/PolandCERT_Polska_enPublicNocert.pl/en/cve/
CERT-In RVDCPcert-in.org.in/RVDCP.jspIndiaIndianCERTPublicYescert-in.org.in/Hallof_Fame.jsp
CISA VDP Platformcisa.gov/resources-tools/services/vulnerability-disclosure-policy-vdp-platformUSACISAgovPublicNo
DIVDdivd.nlNetherlandsDIVDnlPublicNo
HITCON ZeroDayzeroday.hitcon.orgTaiwanHacksInTaiwanPrivate + PublicNozeroday.hitcon.org/bug-bounty/list
Japan Vulnerability Notes (JVN)jvn.jp/en/Japanjpcert_enPublicNojvn.jp/en/nav/
KISA KNVDknvd.krcert.or.krSouth KoreaPublicNo
NCIIPC RVDPnciipc.gov.in/RVDP.htmlIndiaNCIIPCPublicNo
NCSA Bug Bounty Programmehub.ncsa.gov.mv/resources/bug-bounty-programMaldivesPublicYeshub.ncsa.gov.mv/bug-bounty/hall-of-fame
NCSC-FI CVDkyberturvallisuuskeskus.fi/en/reportFinlandPublicNo
NCSC-NL CVDncsc.nl/contact/kwetsbaarheid-meldenNetherlandsPublicNo
NKSC Lithuania CVDnksc.lt/pranesti-spraga.htmlLithuaniaPublicNo
Open Bug Bountyopenbugbounty.orgGlobalopenbugbountyPublicYesopenbugbounty.org/bugbounty-list/
Qatar Bug Bountybugbounty.qaQatarPrivate + PublicNo
Singapore GovTech VDPtech.gov.sg/report-vulnerability/SingaporeGovTechSGPublicNo
Swiss NCSC Bug Bountyncsc.admin.chSwitzerlandPublicNo
Taiwan Vulnerability Note (TVN)twcert.org.tw/en/np-138-2.htmlTaiwanTWCERTCCPublicNotwcert.org.tw/en/lp-139-2.html
UAE National Bug Bountybugbounty.aeUnited Arab EmiratesPrivate
UK NCSC VDPncsc.gov.ukUKNCSCPublicNo

Web3 and smart-contract platforms

16 platforms
Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
AuditOneauditone.ioEuropeAuditOne_ioPrivate + PublicYesauditone.io/bounty-activityauditone.io/bug-bounty
BugRapbugrap.ioBugRap_TeamPublicYesbugrap.io/whiteHatsbugrap.io/bounties
Cantinacantina.xyzUSACantinaxyzPrivate + PublicYescantina.xyz/leaderboardcantina.xyz/competitions
CertiK Bug Bountycertik.comUSACertiKPrivate + PublicYescertik.com/products/bug-bounty
Certora Contestscertora.com/contestsGlobalcertoraPublicYescertora.com/leaderboardcertora.com/contests
Code4renacode4rena.comcode4renaPublicYescode4rena.com/leaderboardcode4rena.com/contests
CodeHawkscodehawks.cyfrin.ioUSACodeHawksPrivate + PublicYescodehawks.cyfrin.io/leaderboardcodehawks.cyfrin.io/contests
HackenProofhackenproof.comEstoniaHackenProofPrivate + PublicYeshackenproof.com/leaderboardhackenproof.com/programs
Hashlockhashlock.comAustraliaHashLockAuditPrivate + PublicNohashlock.com/bug-bounty
Hatshats.financeHatsFinancePublicYes
Immunefiimmunefi.comimmunefiPublicYesimmunefi.com/leaderboard/immunefi.com/explore/
OpenBounty (Shentu)openbounty.shentu.orgPublicYesopenbounty.shentu.org/leaderboardopenbounty.shentu.org/allBounties
Remedyr.xyzGlobalxyz_remedyPrivate + PublicNohunt.r.xyz
Secure3secure3.ioUSASecure3ioPrivate + Public
Sherlocksherlock.xyzGlobalsherlockdefiPublicYesapp.sherlock.xyz/audits/leaderboardapp.sherlock.xyz/audits/contests
SlowMistslowmist.comChinaSlowMist_TeamPublicYesslowmist.io/bug-bounty.html

AI and LLM security platforms

4 platforms
Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
Gray Swan Arenaapp.grayswan.ai/arenaUSAGraySwanAIPublicYesapp.grayswan.ai/arena/leaderboard/globalapp.grayswan.ai/arena
HackAPrompthackaprompt.comUSAPublicYeshackaprompt.com/leaderboard
Huntrhuntr.comUKhuntrdevPrivate + PublicYeshuntr.com/leaderboardhuntr.com/bounties/hacktivity
ødin0din.aiUSA0dinaiPublicYes0din.ai/leaderboard0din.ai/scope

Vulnerability acquisition and brokered disclosure

2 platforms
Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
SSD Secure Disclosuressd-disclosure.comIsraelSecuriTeam_SSDPublicNo
Zero Day Initiativezerodayinitiative.comUSAthezdiPublicYeszerodayinitiative.com/advisories/published/

Ecosystem-specific platforms

3 platforms
Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
IssueHuntissuehunt.ioJapanIssueHuntPrivate + PublicYesissuehunt.io/programs
Patchstackpatchstack.comEstoniapaborzaPublicYespatchstack.com/database/leaderboardpatchstack.com/database/vdp
Wordfence Bug Bountywordfence.com/threat-intel/bug-bounty-program/USAwordfencePublicNo

General crowdsourced platforms

74 platforms
Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
360 SRCsrc.360.netChinaPublic + Private
BBHunt Japanbbhunt.jpJapanbbhuntjapanPrivate + Public
BI.ZONE Bug Bountybugbounty.bi.zoneRussiabizonePrivate + PublicYesbugbounty.bi.zone/top-hackersbugbounty.bi.zone/companies
BountyTeambountyteam.comChinaPrivate + PublicYesbountyteam.com/leader-boardbountyteam.com/bug-bounty-list
Bug Bounty Switzerlandbugbounty.chSwitzerlandbugbounty_chPrivate + PublicYesbugbounty.ch/en/programs/
Bug Huntbughunt.com.brBrazilbughuntoficialPrivate + PublicYes
Bug Zerobugzero.ioSri LankaBugZero_ioPrivate + PublicYesbugzero.io/leaderboardbugzero.io/programs
BugBankbugbank.cnChinaPrivate + PublicYesbugbank.cn/ranks.htmlbugbank.cn/task/
Bugbasebugbase.aiIndiabugbasePrivate + PublicYesbugbase.ai/dashboard/leaderboardbugbase.ai/programs
Bugbopbugbop.comAustraliaBugbopAppPrivate + PublicYesbugbop.com/public-programs
BugBounterbugbounter.comUS & Estonia & TurkeybugbounterrPrivate + PublicYesapp.bugbounter.com/public-top-bounters
BugBounty.ambugbounty.amArmeniaPrivate + Public
bugbounty.jpbugbounty.jpJapanPrivate + Publicbugbounty.jp/en/
BugBounty.rubugbounty.ruRussiaPrivate + Publicbugbounty.ru/app/programs
Bugcrowdbugcrowd.comUSAbugcrowdPrivate + PublicYesbugcrowd.com/leaderboardbugcrowd.com/programs
Buglabbuglab.ioSingaporejoinbuglabPrivate + PublicYes
Bugloudbugloud.comUnited Arab EmiratesPrivate + PublicYesbugloud.com/leaderboardbugloud.com/programs
BugRakshakbugrakshak.comIndiaPrivate + PublicYesbugrakshak.com/platform/leaderboard
bugsbounty.iobugsbounty.comEnglandbugsbounty_comPrivate
Bugvbugv.ioNepalbugvsecurityPublicYes
Butianbutian.netChinaPrivate + PublicYesbutian.net/Rank/whitehatbutian.net/Reward/plan/2
Capture The Bugcapturethebug.xyzNew ZealandCapturethebugsPrivate
Cobaltcobalt.ioUSAcobalt_ioPrivateYesapp.us.cobalt.io/pentesters
Com Olhocomolho.comIndiacom_olhoPrivate + PublicYescyber.comolho.com/researcher-community/cyber.comolho.com/programs/bug-bounty/
Compass Securitycompass-security.comSwitzerlandcompasssecurityPrivate + PublicYesbugbounty.compass-security.com/
Crowdswarmcrowdswarm.ioUnited Arab EmiratesCrowdswarm1Private + PublicYes
Cyber Army Indonesiacyberarmy.asiaIndonesiacyberarmyidPrivate + Public
Cyber3racyber3ra.comIndiaPrivate + Public
Cyberbaycyberbay.techHong KongPrivate + Public
CyberTalentscybertalents.comMiddle EastCyberTalentsPublicYescybertalents.com/worldrankcybertalents.com/competitions
Cyscopecyscope.ioSwitzerland & Latamcy_scopePrivate + PublicYes
Detectifydetectify.comSwedendetectifyCrowdsource (ASM)Yes
Dvulndvuln.comAustraliad_vulnPrivateYes
Federacyfederacy.comUSA_federacyPrivate + PublicYes
Find The Gapfindthegap.co.kr/enSouth KoreaPrivate + PublicNo
Findbugfindbug.ioKosovoFindbugksPrivateYes
Genbountygenbounty.com/UKGenbountyPrivateYesgenbounty.com/teams
Gerobuggerobug.gerosecurity.comIndonesiaSelf-hostedNogerobug.gerosecurity.com/programs/
GObugfreegobugfree.comSwitzerlandgobugfreePrivate + PublicYesgobugfree.com/programs
HackerOnehackerone.comUSAhacker0x01Private + PublicYeshackerone.com/leaderboardhackerone.com/directory/programs
Hackr.fihackr.fiFinlandhackrfiPrivate + PublicNohackr.fi/en/programs.html
Hackratehckrt.comHungaryhackratePrivate + PublicYeshckrt.com/Catalog
HACKTIFYhacktify.euCentral and Eastern EuropeHACKTIFY_Private + PublicYeshacktify.eu/en/leaderboard/hacktify.eu/en/public-programs/
HuntBughuntbug.comUSAofficialhuntbugPrivate + PublicYeshuntbug.com/leaderboard
HuntersPayhunterspay.com.brBrazilPrivate + PublicNo
Huoxianhuoxian.cnChinaPrivate + PublicYeshuoxian.cn/communityhuoxian.cn/project
Inspectivinspectiv.comUSAinspectivPrivate + PublicYes
Intigritiintigriti.comBelgiumintigritiPrivate + PublicYesintigriti.com/leaderboardintigriti.com/programs
Kolahsefidkolahsefid.orgIranKolaahsefidPrivate + PublicNo
Nordic Defendernordicdefender.comSwedennordicdefenderPrivate
PatchDaypatchday.ioSouth Koreapatchday_ioPrivate + PublicYes
Ravroravro.irIranRavro_irPrivate + PublicYesravro.ir/reportsravro.ir/companies
RedStormredstorm.ioIndonesiaredstorm_ioPrivate + PublicYesredstorm.io/program
safehatssafehats.comIndiaPrivate + Public
Safevulnsafevuln.comVietnamPublicYessafevuln.com/leaderboardsafevuln.com/programs
Secunasecuna.ioPhilippinesSecunaSecurityPrivate + PublicYesplatform.secuna.io/programs
Secur0secur0.comEurope & LatamSecur00Private + PublicYesapp.secur0.com/leaderboardsapp.secur0.com/programs
Standoff 365 Bug Bountybugbounty.standoff365.comRussiastandoff365Private + PublicYesstandoff365.com/en-US/ratings/bugbounty.standoff365.com/en-US/
Swarmneticsswarmnetics.comSingaporeswarmneticsPrivateYes
Synacksynack.comUSAsynackPrivateYes
Teklabspaceteklabspace.comNigeriateklabspacePublicYes
Testbirdstestbirds.comGermanyTestbirdsQA + Bug BountyNo
Topcodertopcoder.comUSAtopcoderDev + Bug BountyYestopcoder.com/community/statisticstopcoder.com/challenges
TrustLinetrustline.saSaudi ArabiatrustlineSecPrivate + Public
TumarOnetumar.oneKazakhstanPrivate + PublicYestumar.one/leaderboardtumar.one/#for-bug-hunters
UzHunteruzhunter.comUzbekistan
Vulboxvulbox.comChinaPrivate + PublicYesvulbox.com/top/seasonvulbox.com/projects/list
Vulnerability Labvulnerability-lab.comGermanyPrivate + PublicYesvulnerability-lab.com/hacktivity.phpvulnerability-lab.com/list-of-bug-bounty-programs.php
Vulnscopevulnscope.comChilevulnscopePrivate + PublicYesvulnscope.com/hacker-rankingvulnscope.com/programas
WhiteHubwhitehub.netVietnamCyStackSecurityPrivate + PublicYeswhitehub.net/leaderboardwhitehub.net/programs
YesWeHackyeswehack.comFranceyeswehackPrivate + PublicYesyeswehack.com/rankingyeswehack.com/programs
Yogoshayogosha.comFranceyogoshaofficialPrivateYesyogosha.com/hackers/leaderboard/
Zerocopterzerocopter.comNetherlandszerocopterPrivateYes
ZeroDay Testzerodaytest.comBangladeshZer0day_t3st

Stay in the loop

Weekly cybersecurity-policy news in Policy Pulse, plus disclose.io community updates and safe-harbor developments.

Subscribe to the newsletter