Bug bounty platforms like HackerOne
Ethical hacking with payouts - find vulnerabilities, earn bounties. Vetted platforms are marked.
Updated
Is this for you?
Typical earnings: Varies widely
Best for: Security researchers and ethical hackers who can find real vulnerabilities
Start here if: I live outside the US or EU and want to earn in dollars · I'm a developer, designer, consultant or expert · What do people actually get paid for online?
Compare the top 10 bug bounty platforms
| Platform | Fees | Minimum payout | Payout speed | Pays via | Who can join |
|---|---|---|---|---|---|
 HackerOne
|
Bounties set by each program | No minimum for PayPal, $50 local bank, $100 SWIFT, $15 crypto | — | PayPal, Bank transfer, Bitcoin, USDC | Worldwide except Cuba, Iran, North Korea and Syria |
 Synack
|
Vetted researchers earn per vulnerability | — | — | Bank transfer | Worldwide |
 Bugcrowd
|
Bounties set by each program | — | — | PayPal, Bank transfer | Worldwide except Cuba, Iran, North Korea and Syria |
 Zerocopter
|
Severity-based bounty rewards | — | — | Bank transfer | Worldwide |
 Cobalt
|
Pentesters paid per project | — | — | Bank transfer | Worldwide |
 HackenProof
|
Severity-based bounties per program | — | — | Crypto, Bank transfer | Worldwide |
 Intigriti
|
Bounties set by each program | — | — | Bank transfer | Worldwide |
 Open Bug Bounty
|
Voluntary rewards from site owners, free non-profit | — | — | Direct from site owner | Worldwide |
 YesWeHack
|
Bounties set by each program | — | — | Bank transfer | Worldwide |
 Immunefi
|
Severity-based bounties up to $10M | — | — | Crypto, Bank transfer | Worldwide |
A dash means we haven't verified that detail yet.
All 10 bug bounty platforms
Vetted platforms screen people before they can join
CobaltA pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties…
cobalt.io53 viewsSynackA vetted security testing platform whose Red Team accepts researchers only after skills assessment and background checks. Members get steady…
synack.com51 viewsBugcrowdA crowdsourced security platform running bug bounty and vulnerability disclosure programs. Researchers earn cash for valid findings, ranked…
bugcrowd.com47 viewsHackenProofA bug bounty platform from the Hacken security ecosystem, focused on web3 and crypto projects with public and private programs.
hackenproof.com48 viewsHackerOneThe largest bug bounty platform, where security researchers report vulnerabilities to companies and earn bounties. Open sign-up, with invita…
hackerone.com62 viewsImmunefiThe leading bug bounty platform for web3 and smart contracts, known for some of the largest payouts in security - top bounties run into the…
immunefi.com38 viewsIntigritiA European bug bounty platform connecting ethical hackers with companies across the continent and beyond. Known for community events and fas…
intigriti.com47 viewsOpen Bug BountyA non-profit, open platform for responsible disclosure of website vulnerabilities. Researchers report issues and site owners may reward them…
openbugbounty.org44 viewsYesWeHackA French bug bounty platform serving European enterprises and public institutions. Researchers worldwide hunt on public and private programs…
yeswehack.com40 viewsZerocopterA Dutch security platform running bug bounty and coordinated vulnerability disclosure programs with a community of invited researchers.
zerocopter.com90 views