Checked 29 Oct 2026
Cobalt 3.2Bronze 25 pts
A pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties.
Good for Security researchers
- Open worldwideWorldwide
- VettedScreens people before they join
- Pays via Bank transferHow you get paid
- Work from homeOnline, from anywhere
- Since
- 2013 13 yrs
Based in- San Francisco, United States
- Web rank
- #157,167 worldwide
Can you join Cobalt?
Answer two questions and we check them against Cobalt's sign-up rules.
Pick your country and age then press Check. Your answer shows here and in “Can I join?” below.
Cobalt is a vetted pentest platform where providers are screened before they can join, and the work can be done remotely. Fees are Pentesters paid per project and you can withdraw via Bank transfer. Founded in 2013, Cobalt is based in San Francisco, United States. It is available worldwide.
Last updated
Getting paid
What the platform takes, when you get your money and how
Not verified yet: Payment protection · Minimum payout · Payout speed Know the answer? Tell us
What people actually earn on Cobalt
Sourced figures from the platform, filings and independent studies
Figures published by Cobalt or by independent studies and surveys, as dated. Individual earnings vary widely.
Our rating
Worked out from the facts on this page, the same way for every platform
Strong on access. Weaker on getting paid.
- FeesNot enough facts yet
- Getting paid2.3
- Access4.0
- Track record3.5
- Proof of earnings3.0
Not a review of service quality: a score from verified fees, payouts, access, track record and earnings data. How the rating works
Achievements
25 of 100 points from 3 of 14 achievements, Bronze tier. Earned from verified facts, never paid for
Verified earningsA sourced figure for what people earn or are paid there+10
Why it matters You can judge the pay from a real number instead of the platform's own promises.
How we check We need a figure for what earners are paid, earn typically, or how many people earn, with a link to the filing, pay page or study it came from.
Cobalt 500 vetted pentesters (2025-12)
Every platform with this badge →Open worldwideAccepts people from almost every country+10
Why it matters Most earning platforms only take people from a handful of countries. This one lets almost anyone join.
How we check The platform's own terms or sign-up pages say it accepts people worldwide, with no more than eight countries left out.
Cobalt Worldwide
Every platform with this badge →10 years runningFounded at least 10 years ago+5
Why it matters Platforms that have lasted a decade are less likely to vanish with your balance.
How we check Its founding year, checked against company records, is at least 10 years ago.
Cobalt Founded 2013
Every platform with this badge →Free to joinNo fee to sign up5
Why it matters Paying to join is a red flag on many work sites. This one costs nothing to start.
How we check The platform's sign-up and pricing pages show no fee to register as an earner.
Not earned yet: we have not verified this for Cobalt.
Every platform with this badge →Clear feesPublishes its cut as a percentage5
Why it matters You can work out what you keep before you start.
How we check The platform publishes its cut as a percentage on its pricing or help pages, which we record as a range when it is tiered.
Cobalt Pentesters paid per project
Every platform with this badge →Low cutTakes 10% or less of what you earn10
Why it matters More of every payment reaches you. Many marketplaces take 20% or more.
How we check The highest percentage the platform names in its published fees is 10% or less.
Cobalt Pentesters paid per project
Every platform with this badge →Low payout barLets you cash out $10 or less5
Why it matters Small earnings are not left stuck in your account waiting for a high threshold.
How we check The platform's published minimum withdrawal is $10 or less, or it has no minimum.
Not earned yet: we have not verified this for Cobalt.
Every platform with this badge →Fast payoutsPays out instantly, daily or on demand5
Why it matters Money arrives when you need it, not weeks later.
How we check The platform says payouts are instant, same-day, daily or on demand.
Not earned yet: we have not verified this for Cobalt.
Every platform with this badge →Payment protectionHolds or guarantees payment before you work10
Why it matters Something stops you working for nothing, such as client money held before the work starts.
How we check The platform publishes how it protects earners' payments: escrow, guaranteed pay or a dispute process.
Not earned yet: we have not verified this for Cobalt.
Every platform with this badge →Loved appA mobile app rated 4.5 or higher5
Why it matters A well-rated app usually means smooth day-to-day work and fewer payout problems.
How we check The platform's app is rated 4.5 or higher on the Apple App Store or Google Play.
Not earned yet: we have not verified this for Cobalt.
Every platform with this badge →Top 10K websiteAmong the world's 10,000 most visited sites (Tranco)5
Why it matters Big platforms have more clients and buyers, and a lot to lose from treating earners badly.
How we check The site ranks in the world's 10,000 most visited on the Tranco list, a research-grade ranking.
Cobalt #157,167 worldwide
Every platform with this badge →20 years runningFounded at least 20 years ago5
Why it matters Two decades of paying people is a strong track record.
How we check Its founding year, checked against company records, is at least 20 years ago.
Cobalt Founded 2013
Every platform with this badge →Public companyListed on a stock exchange, with audited filings5
Why it matters Listed companies publish audited accounts, so their finances and risks are public.
How we check The company has a stock ticker on a public exchange, with filings we can read.
Not earned yet: we have not verified this for Cobalt.
Every platform with this badge →Fully documentedFees, payouts, countries and company details all verified15
Why it matters Everything you need to decide is verified here, not left as guesswork.
How we check Fees, payouts, minimum payout, who can join and the company details are all recorded from official pages.
Not earned yet: we have not verified this for Cobalt.
Every platform with this badge →
How achievements and tiers work · Open any badge for the details
Can I join Cobalt?
Age, countries, equipment and how sign-up works
We haven't verified Cobalt's sign-up requirements (age, countries, ID and equipment) yet. It screens people before they can join. See which platforms you can join with your details →
How Cobalt compares
Against similar platforms in our directory
- Founded in 2013, Cobalt has been running for about 13 years — longer than 6 of the 10 bug bounty platforms we track with a known launch year.
Compared with the bug bounty platforms in our directory. See them all →
Is Cobalt legit?
What we could verify about the company
Cobalt is a real, operating platform. What we could verify:
- Operating since 2013 (13 years)
- Headquartered in San Francisco, United States
- Screens providers before they can join
Listing last updated October 2026 · how we verify platforms · Missing or out of date? Tell us
Cobalt in public records
Company filings, web traffic and app store data
- Website rank
- #157,167 worldwideAmong the top million sites (cobalt.io)
Sources: Tranco. Retrieved October 29, 2026.
Cobalt timeline
Founding, funding, milestones and news
-
Founded
Cobalt founded
Headquarters today: San Francisco, United States
-
Milestone
500 vetted pentesters
Cobalt said in a December 2025 press release that its Cobalt Core freelance pentester community grew from 450 to 500 during 2025.
Source ↗ -
On FreelanceSites
Added to the FreelanceSites.net directory
Checked against its official pages before listing.
From the platform's own reports and press coverage we checked, plus company records on Wikidata. Know a milestone we're missing? Tell us
Guides
Step-by-step help for this platform
No step-by-step guide for Cobalt yet. Browse all guides or find the right way to earn for you.
Frequently asked questions
Quick answers about Cobalt
How much does Cobalt charge?
Cobalt fees: Pentesters paid per project.
How do you get paid on Cobalt?
Cobalt pays out via Bank transfer.
Which countries is Cobalt available in?
Worldwide.
How much do people earn on Cobalt?
Cobalt said in a December 2025 press release that its Cobalt Core freelance pentester community grew from 450 to 500 during 2025. Individual earnings vary widely.
Is Cobalt legit?
Yes, Cobalt is a real, operating platform: operating since 2013 (13 years), headquartered in San Francisco, United States and screens providers before they can join. As with any platform, check its current terms before relying on it for income.
What are the best Cobalt alternatives?
Similar platforms include Synack, HackerOne, Bugcrowd and Immunefi. Compare their fees and payouts in the alternatives section below.
Compare Cobalt with…
Cobalt alternatives
More bug bounty platforms like HackerOne
SynackA vetted security testing platform whose Red Team accepts researchers only after skills assessment and background checks. Members get steady, well-paid engagements.
Fees Vetted researchers earn per vulnerabilitysynack.com
HackerOneThe largest bug bounty platform, where security researchers report vulnerabilities to companies and earn bounties. Open sign-up, with invitations to private programs as reputation grows.
Fees Bounties set by each programhackerone.com
BugcrowdA crowdsourced security platform running bug bounty and vulnerability disclosure programs. Researchers earn cash for valid findings, ranked by a points system.
Fees Bounties set by each programbugcrowd.com
ImmunefiThe leading bug bounty platform for web3 and smart contracts, known for some of the largest payouts in security - top bounties run into the millions.
Fees Severity-based bounties up to $10Mimmunefi.com
YesWeHackA French bug bounty platform serving European enterprises and public institutions. Researchers worldwide hunt on public and private programs.
Fees Bounties set by each programyeswehack.com
HackenProofA bug bounty platform from the Hacken security ecosystem, focused on web3 and crypto projects with public and private programs.
Fees Severity-based bounties per programhackenproof.com