CobaltA pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties.
Fees Pentesters paid per projectcobalt.io
BugcrowdA crowdsourced security platform running bug bounty and vulnerability disclosure programs. Researchers earn cash for valid findings, ranked by a points system.
Fees Bounties set by each programbugcrowd.com
HackenProofA bug bounty platform from the Hacken security ecosystem, focused on web3 and crypto projects with public and private programs.
Fees Severity-based bounties per programhackenproof.com
HackerOneThe largest bug bounty platform, where security researchers report vulnerabilities to companies and earn bounties. Open sign-up, with invitations to private programs as reputation grows.
Fees Bounties set by each programhackerone.com
ImmunefiThe leading bug bounty platform for web3 and smart contracts, known for some of the largest payouts in security - top bounties run into the millions.
Fees Severity-based bounties up to $10Mimmunefi.com
IntigritiA European bug bounty platform connecting ethical hackers with companies across the continent and beyond. Known for community events and fast triage.
Fees Bounties set by each programintigriti.com
Open Bug BountyA non-profit, open platform for responsible disclosure of website vulnerabilities. Researchers report issues and site owners may reward them voluntarily.
Fees Voluntary rewards from site owners, free non-profitopenbugbounty.org
YesWeHackA French bug bounty platform serving European enterprises and public institutions. Researchers worldwide hunt on public and private programs.
Fees Bounties set by each programyeswehack.com
ZerocopterA Dutch security platform running bug bounty and coordinated vulnerability disclosure programs with a community of invited researchers.
Fees Severity-based bounty rewardszerocopter.com