← All lists
Curated list

Best bug bounty platforms

A shortlist of platforms in the "Bug bounty platforms like HackerOne" category - where to earn in this space. The type page lists every option.

BugcrowdDevelopment & IT

A crowdsourced security platform running bug bounty and vulnerability disclosure programs. Researchers earn cash for valid findings, ranked…

bugcrowd.comBounties set by each program
CobaltVettedDevelopment & IT

A pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties…

cobalt.io
HackenProofDevelopment & IT

A bug bounty platform from the Hacken security ecosystem, focused on web3 and crypto projects with public and private programs.

hackenproof.com
HackerOneDevelopment & IT

The largest bug bounty platform, where security researchers report vulnerabilities to companies and earn bounties. Open sign-up, with invita…

hackerone.comBounties set by each program
ImmunefiDevelopment & IT

The leading bug bounty platform for web3 and smart contracts, known for some of the largest payouts in security - top bounties run into the…

immunefi.com
IntigritiDevelopment & IT

A European bug bounty platform connecting ethical hackers with companies across the continent and beyond. Known for community events and fas…

intigriti.comBounties set by each program
Open Bug BountyDevelopment & IT

A non-profit, open platform for responsible disclosure of website vulnerabilities. Researchers report issues and site owners may reward them…

openbugbounty.org
SynackVettedDevelopment & IT

A vetted security testing platform whose Red Team accepts researchers only after skills assessment and background checks. Members get steady…

synack.com
YesWeHackDevelopment & IT

A French bug bounty platform serving European enterprises and public institutions. Researchers worldwide hunt on public and private programs…

yeswehack.comBounties set by each program
ZerocopterDevelopment & IT

A Dutch security platform running bug bounty and coordinated vulnerability disclosure programs with a community of invited researchers.

zerocopter.com