Best bug bounty platforms
A shortlist of platforms in the "Bug bounty platforms like HackerOne" category - where to earn in this space. The type page lists every option.
Updated · how we verify platforms
Compare at a glance
| Platform | Type | Fees / commission | Pays via | Founded |
|---|---|---|---|---|
Bugcrowd
|
Bug bounty platform | Bounties set by each program | PayPal, Bank transfer | 2012 |
Cobalt
|
Vetted pentest platform | Pentesters paid per project | Bank transfer | 2013 |
HackenProof
|
Web3 bug bounty platform | Severity-based bounties per program | Crypto, Bank transfer | 2017 |
HackerOne
|
Bug bounty platform | Bounties set by each program | PayPal, Bank transfer, Bitcoin, USDC | 2012 |
Immunefi
|
Web3 bug bounty platform | Severity-based bounties up to $10M | Crypto, Bank transfer | 2020 |
Intigriti
|
Bug bounty platform | Bounties set by each program | Bank transfer | 2016 |
Open Bug Bounty
|
Vulnerability disclosure platform | Voluntary rewards from site owners, free non-profit | Direct from site owner | 2014 |
Synack
|
Vetted security platform | Vetted researchers earn per vulnerability | Bank transfer | 2013 |
YesWeHack
|
Bug bounty platform | Bounties set by each program | Bank transfer | 2015 |
Zerocopter
|
Bug bounty platform | Severity-based bounty rewards | Bank transfer | 2015 |
BugcrowdA crowdsourced security platform running bug bounty and vulnerability disclosure programs. Researchers earn cash for valid findings, ranked…
bugcrowd.com42 viewsCobaltA pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties…
cobalt.io51 viewsHackenProofA bug bounty platform from the Hacken security ecosystem, focused on web3 and crypto projects with public and private programs.
hackenproof.com48 viewsHackerOneThe largest bug bounty platform, where security researchers report vulnerabilities to companies and earn bounties. Open sign-up, with invita…
hackerone.com57 viewsImmunefiThe leading bug bounty platform for web3 and smart contracts, known for some of the largest payouts in security - top bounties run into the…
immunefi.com37 viewsIntigritiA European bug bounty platform connecting ethical hackers with companies across the continent and beyond. Known for community events and fas…
intigriti.com47 viewsOpen Bug BountyA non-profit, open platform for responsible disclosure of website vulnerabilities. Researchers report issues and site owners may reward them…
openbugbounty.org43 viewsSynackA vetted security testing platform whose Red Team accepts researchers only after skills assessment and background checks. Members get steady…
synack.com45 viewsYesWeHackA French bug bounty platform serving European enterprises and public institutions. Researchers worldwide hunt on public and private programs…
yeswehack.com40 viewsZerocopterA Dutch security platform running bug bounty and coordinated vulnerability disclosure programs with a community of invited researchers.
zerocopter.com90 views