Bug Bounty Platforms

A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms.

The canonical disclose.io database lives at directory.disclose.io. Is there a platform or detail missing? Let us know.

Last updated: May 31, 2026

Platform NameURLRegionTwitter/XProgram TypesHas LeaderboardLeaderboard URLPublic Programs URL
Australian Government VDPhomeaffairs.gov.auAustraliaPublicNo
AuditOneauditone.ioEuropeAuditOne_ioPrivate + PublicYesauditone.io/bounty-activityauditone.io/bug-bounty
BI.ZONE Bug Bountybugbounty.bi.zoneRussiabizonePrivate + PublicYes
BountyTeambountyteam.comChinaPrivate + PublicYes
Bug Bounty Boxbugbountybox.comKenya/Africa
Bug Bounty Switzerlandbugbounty.chSwitzerlandbugbounty_chPrivate + PublicYes
Bug Huntbughunt.com.brBrazilbughuntoficialPrivate + PublicYesbughunt.com.br/ranking-bughunters.html
Bug Zerobugzero.ioSri LankaBugZero_ioPrivate + PublicYesbugzero.io/leaderboardbugzero.io/programs
BugBankbugbank.cnChinaPrivate + PublicYes
Bugbasebugbase.aiIndiabugbasePrivate + PublicYesbugbase.ai/dashboard/leaderboardbugbase.ai/programs
Bugbopbugbop.comAustraliaBugbopAppPrivate + PublicYesbugbop.com/public-programs
BugBounterbugbounter.comUS & Estonia & TurkeybugbounterrPrivate + PublicYesapp.bugbounter.com/public-top-bounters
BugBounty.ambugbounty.amArmeniaPrivate + Public
bugbounty.jpbugbounty.jpJapanPrivate + Publicbugbounty.jp/en/
BugBounty.robugbounty.roRomaniaPrivate + PublicYes
BugBounty.rubugbounty.ruRussiaPrivate + Public
bugbounty.sabugbounty.saSaudi ArabiaBugBountySAPrivateYesbugbounty.sa/leaderboard
Bugcrowdbugcrowd.comUSAbugcrowdPrivate + PublicYesbugcrowd.com/leaderboardbugcrowd.com/programs
Buglabbuglab.ioSingaporePrivate + PublicYes
Bugloudbugloud.comUnited Arab EmiratesPrivate + PublicYesbugloud.com/leaderboardbugloud.com/programs
BugRapbugrap.ioBugRap_TeamPublicYesbugrap.io/whiteHatsbugrap.io/bounties
bugsbounty.iobugsbounty.comEnglandbugsbounty_comPrivate
Bugvbugv.ioNepalbugvsecurityPublicYes
Butianbutian.netChinaPrivate + PublicYes
Cantinacantina.xyzUSACantinaxyzPrivate + PublicYescantina.xyz/competitions
Capture The Bugcapturethebug.xyzNew ZealandCapturethebugsPrivate
CertiK Bug Bountycertik.comUSACertiKPrivate + PublicYesskynet.certik.com/leaderboards/bug-bounty
CERT-In RVDCPcert-in.org.in/RVDCP.jspIndiaIndianCERTPublicYes
Certora Contestscertora.com/contestsGlobalcertoraPublicYescertora.com/leaderboardcertora.com/contests
CERT Polska CVDcert.pl/en/cvd/PolandCERT_Polska_enPublicNocert.pl/en/cve/
CISA VDP Platformcisa.gov/resources-tools/services/vulnerability-disclosure-policy-vdp-platformUSACISAgovPublicNo
Cobaltcobalt.ioUSAcobalt_ioPrivateYesapp.us.cobalt.io/pentesters
Code4renacode4rena.comcode4renaPublicYescode4rena.com/leaderboardcode4rena.com/contests
CodeHawkscodehawks.cyfrin.ioUSACodeHawksPrivate + PublicYescodehawks.cyfrin.io/leaderboard
Com Olhocomolho.comIndiacom_olhoPrivate + PublicYescyber.comolho.com/researcher-community/cyber.comolho.com/programs/bug-bounty/
Compass Securitycompass-security.comSwitzerlandcompasssecurityPrivate + PublicYesbugbounty.compass-security.com/
Crowdswarmcrowdswarm.ioUnited Arab EmiratesCrowdswarm1Private + PublicYes
Cyber Army Indonesiacyberarmy.idIndonesiacyberarmyidPrivate + PublicYescyberarmy.id/leaderboardcyberarmy.id/programs
Cyber3racyber3ra.comIndiaPrivate + Publicapp.cyber3ra.com/
CyberTalentscybertalents.comMiddle EastCyberTalentsPublicYes
Cyscopecyscope.ioSwitzerland & Latamcy_scopePrivate + PublicYes
Detectifydetectify.comSwedendetectifyCrowdsource (ASM)Yes
DIVDdivd.nlNetherlandsDIVDnlPublicNo
Dvulndvuln.comAustraliad_vulnPrivateYes
Federacyfederacy.comUSA_federacyPrivate + PublicYes
Find The Gapfindthegap.co.kr/enSouth KoreaPrivate + PublicNo
Findbugfindbug.ioKosovoFindbugksPrivateYes
Gerobuggerobug.gerosecurity.comIndonesiaSelf-hostedNo
GObugfreegobugfree.comSwitzerlandgobugfreePrivate + PublicYesapp.gobugfree.com/programs
Gray Swan Arenaapp.grayswan.ai/arenaUSAGraySwanAIPublicYesapp.grayswan.ai/arena/leaderboard/globalapp.grayswan.ai/arena
HackenProofhackenproof.comEstoniaHackenProofPrivate + PublicYeshackenproof.com/leaderboardhackenproof.com/programs
HackerOnehackerone.comUSAhacker0x01Private + PublicYeshackerone.com/leaderboardhackerone.com/directory/programs
Hackr.fihackr.fiFinlandPrivate + PublicNohackr.fi/en/programs.html
Hackratehckrt.comHungaryhackratePrivate + PublicYeshckrt.com/Profiles/Leaderboardhckrt.com/Catalog
HACKTIFYhacktify.euCentral and Eastern EuropeHACKTIFY_Private + PublicYeshacktify.eu/en/leaderboard/hacktify.eu/en/public-programs/
Hashlockhashlock.comAustraliaHashLockAuditPrivate + PublicNohashlock.com/bug-bounty
Hatshats.financeHatsFinancePublicYes
HITCON ZeroDayzeroday.hitcon.orgTaiwanHacksInTaiwanPrivate + PublicNozeroday.hitcon.org/bug-bounty/list
HuntBughuntbug.comUSAofficialhuntbugPrivate + PublicYeshuntbug.com/leaderboard
HuntersPayhunterspay.com.brBrazilPrivate + PublicNo
Huntrhuntr.comUKhuntrdevPrivate + PublicYeshuntr.com/leaderboardhuntr.com/bounties/hacktivity
Huoxianhuoxian.cnChinaPrivate + PublicYeshuoxian.cn/project
Immunefiimmunefi.comimmunefiPublicYesimmunefi.com/leaderboard/immunefi.com/explore/
Inspectivinspectiv.comUSAinspectivPrivate + PublicYes
Intigritiintigriti.comBelgiumintigritiPrivate + PublicYesintigriti.com/leaderboardintigriti.com/programs
IssueHuntissuehunt.ioJapanIssueHuntPrivate + PublicYesissuehunt.io/programs
Japan Vulnerability Notes (JVN)jvn.jp/en/Japanjpcert_enPublicNojvn.jp/en/nav/
Kolahsefidkolahsefid.orgIranPrivate + PublicNo
LRQA Nettitudebugbounty.nettitude.comUKNettitudeGroupPrivate
NCIIPC RVDPnciipc.gov.in/RVDP.htmlIndiaNCIIPCPublicNo
NCSA Bug Bounty Programmehub.ncsa.gov.mv/resources/bug-bounty-programMaldivesPublicYes
Nordic Defendernordicdefender.comSwedennordicdefenderPrivate
ødin0din.aiUSA0dinaiPublicYes0din.ai/leaderboard0din.ai/scope
Open Bug Bountyopenbugbounty.orgGlobalopenbugbountyPublicYesopenbugbounty.org/bugbounty-list/
PatchDaypatchday.ioSouth Koreapatchday_ioPrivate + PublicYes
Patchstackpatchstack.comEstoniapaborzaPublicYespatchstack.com/database/leaderboardpatchstack.com/database/vdp
Pentabugpentabug.comIndiapentabugPrivateYes
Qatar Bug Bountybugbounty.qaQatarPrivate + PublicNo
Ravroravro.irIranRavro_irPrivate + PublicYesravro.ir/reportsravro.ir/companies
RedStormredstorm.ioIndonesiaredstorm_ioPrivate + PublicYesredstorm.io/program
Remedyr.xyzGlobalxyz_remedyPrivate + PublicNohunt.r.xyz
safehatssafehats.comIndiaPrivate + PublicYesapp.safehats.com/member/leaderboard
Safevulnsafevuln.comVietnamPublicYessafevuln.com/leaderboardsafevuln.com/programs
Secunasecuna.ioPhilippinesSecunaSecurityPrivate + PublicYes
Secur0secur0.comEurope & LatamSecur00Private + PublicYesapp.secur0.com/leaderboardsapp.secur0.com/programs
Secure3secure3.ioUSASecure3ioPrivate + Public
Sherlocksherlock.xyzGlobalsherlockdefiPublicYesapp.sherlock.xyz/audits/leaderboardapp.sherlock.xyz/audits/contests
Singapore GovTech VDPtech.gov.sg/report-vulnerability/SingaporeGovTechSGPublicNo
SlowMistslowmist.comChinaSlowMist_TeamPublicYes
Standoff 365 Bug Bountybugbounty.standoff365.comRussiastandoff365Private + PublicYesbugbounty.standoff365.com/en-US/
Swarmneticsswarmnetics.comSingaporeswarmneticsPrivateYes
Swiss NCSC Bug Bountyncsc.admin.chSwitzerlandPublicNo
Synacksynack.comUSAsynackPrivateYes
Teklabspaceteklabspace.comNigeriateklabspacePublicYes
Testbirdstestbirds.comGermanyTestbirdsQA + Bug BountyNo
thebugbountythebugbounty.comMalaysiathebugbountyPrivateYes
Topcodertopcoder.comUSAtopcoderDev + Bug BountyYestopcoder.com/challenges
TrustLinetrustline.saSaudi ArabiatrustlineSecPrivate + Public
UK NCSC VDPncsc.gov.ukUKNCSCPublicNo
Vulboxvulbox.comChinaPrivate + PublicYesvulbox.com/top/seasonvulbox.com/projects/list
Vulnerability Labvulnerability-lab.comGermanyPrivate + PublicYesvulnerability-lab.com/hacktivity.php
Vulnscopevulnscope.comChilevulnscopePrivate + PublicYesvulnscope.com/hacker-rankingvulnscope.com/programas
WhiteHubwhitehub.netVietnamCyStackSecurityPrivate + PublicYeswhitehub.net/leaderboardwhitehub.net/programs
Wordfence Bug Bountywordfence.com/threat-intel/bug-bounty-program/USAwordfencePublicNo
YesWeHackyeswehack.comFranceyeswehackPrivate + PublicYesyeswehack.com/rankingyeswehack.com/programs
Yogoshayogosha.comFranceyogoshaofficialPrivateYesyogosha.com/hackers/leaderboard/
Zero Day Initiativezerodayinitiative.comUSAthezdiPublicYeszerodayinitiative.com/advisories/published/
Zerocopterzerocopter.comNetherlandszerocopterPrivateYes

Stay in the loop

Weekly cybersecurity-policy news in Policy Pulse, plus disclose.io community updates and safe-harbor developments.

Subscribe to the newsletter