A pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties.
Cobalt is a vetted pentest platform where providers are screened before they can join, and the work can be done remotely. Fees are Pentesters paid per project and you can withdraw via Bank transfer. Founded in 2013, Cobalt is based in San Francisco, United States. It is available worldwide.
Last updated
What people actually earn on Cobalt
We haven't found a verified figure for what people earn on Cobalt yet. We add one here when Cobalt or an independent study publishes numbers. See what people earn on other platforms →
Can I join Cobalt?
We haven't verified Cobalt's sign-up requirements (age, countries, ID and equipment) yet. It screens people before they can join. See which platforms you can join with your details →
How Cobalt compares
- Founded in 2013, Cobalt has been running for about 13 years — longer than 6 of the 10 bug bounty platforms we track with a known launch year.
Compared with the bug bounty platforms in our directory. See them all →
Is Cobalt legit?
Cobalt is a real, operating platform. What we could verify:
- Operating since 2013 (13 years)
- Headquartered in San Francisco, United States
- Screens providers before they can join
Listing last updated June 2026 · how we verify platforms · Missing or out of date? Tell us
Guides
No step-by-step guide for Cobalt yet. Browse all guides or find the right way to earn for you.
Frequently asked questions
How much does Cobalt charge?
Cobalt fees: Pentesters paid per project.
How do you get paid on Cobalt?
Cobalt pays out via Bank transfer.
Which countries is Cobalt available in?
Worldwide.
Is Cobalt legit?
Yes, Cobalt is a real, operating platform: operating since 2013 (13 years), headquartered in San Francisco, United States and screens providers before they can join. As with any platform, check its current terms before relying on it for income.
What are the best Cobalt alternatives?
Similar platforms include Synack, HackerOne, Bugcrowd and Zerocopter. Compare their fees and payouts in the alternatives section below.
Compare Cobalt with…
Cobalt alternatives
More bug bounty platforms like HackerOne
SynackA vetted security testing platform whose Red Team accepts researchers only after skills assessment and background checks. Members get steady…
synack.com45 views
HackerOneThe largest bug bounty platform, where security researchers report vulnerabilities to companies and earn bounties. Open sign-up, with invita…
hackerone.com57 views
BugcrowdA crowdsourced security platform running bug bounty and vulnerability disclosure programs. Researchers earn cash for valid findings, ranked…
bugcrowd.com42 views
ZerocopterA Dutch security platform running bug bounty and coordinated vulnerability disclosure programs with a community of invited researchers.
zerocopter.com90 views
HackenProofA bug bounty platform from the Hacken security ecosystem, focused on web3 and crypto projects with public and private programs.
hackenproof.com48 views
IntigritiA European bug bounty platform connecting ethical hackers with companies across the continent and beyond. Known for community events and fas…
intigriti.com47 views