1 game
Games: Bug bounty platforms
Work a stint on one of the real bug bounty platforms below, then replay on another and compare what you kept. Or test your sense of who takes the bigger cut.
Each platform plays with its own published fees and payout rules; anything missing uses the typical value for bug bounty platforms and is labelled.
How this simulation works (HackerOne)
Every platform has its own table on its simulator page; this is the first one. Demand, job volume and luck are simulated.
| What | Value | Source |
|---|---|---|
| Platform cutNo published percentage for HackerOne or its type, so the game assumes 0%. | 0% | Assumed |
| Days before money can be withdrawnPublished: "Typically 7-10 days after award, processing and delivery depend on payout method" | 10 d | Platform data |
| Minimum payoutPublished: "No minimum for PayPal, $50 local bank, $100 SWIFT, $15 crypto" | None | Platform data |
| Typical bounty for a valid medium bug | $500 | Assumed |
| Valid reports that turn out to be duplicates (unpaid) | 30% | Assumed |
| Chance an 8-hour hunt finds something | 18% | Assumed |
| Real-world benchmark (for comparison only)Varies widely | — | Typical for type |
Simulators are simplified simulations based on each platform’s published rules, for learning only, not earnings promises. Questions are built from the directory’s verified data and each answer links to its source. Rules change, so check the platform before you sign up.