Cobalt in 9 slides

A pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties.
- Vetted pentest platform
- Bug bounty platforms
- Based in San Francisco, United States
- Vetted: providers are screened
What you do on Cobalt
How the money is made: prizes and bounties
- Join a challenge
- Submit your work
- It gets judged
- Win the prize
A pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties.
Founded 2013 · next to 9 other bug bounty platforms
Work and topics
Good for
What Cobalt takes
Pentesters paid per project
How the money reaches you
From sign-up to payout
- Sign upFree
- Application and vettingIncludes an ID check
- Do the work
- Withdraw1 way to withdraw
1 way to withdraw
- Bank transfer
Can you join?
Yes, if you pass its application.
You need a computer, reliable internet, a background check and a skills test. You have to verify your ID.
What you need
- A computer
- Reliable internet
- A background check
- A skills test
- An ID checkBefore you can work or withdraw
- Free to joinSign-up cost
- Application and vettingHow sign-up works
What people actually earn
Cobalt said in a December 2025 press release that its Cobalt Core freelance pentester community grew from 450 to 500 during 2025.
Source: businesswire.com ↗How it scores
Strong on access. Weaker on getting paid.
- FeesNot enough facts
- Getting paid2.3
- Access4.5
- Track record3.5
- Proof of earnings3.0
- Verified earnings
- Open worldwide
- Free to join
- 10 years running
How much we know
We have 8 of the 17 things we track for every platform. Fees, payouts, join rules, countries and real earnings count most.
What we have
- What kind of platform it is
- Year founded
- Headquarters
- Fees
- Withdrawal methods
- Join requirements
- Countries it accepts
- Real earnings figures
Still missing
- Plain-English overview
- Minimum payout
- How fast you get paid
- Payment protection
- Review ratings
- Wikipedia or reference page
- Support channels
- Mobile apps
- Social accounts