All tours Platform tour Cobalt 1 / 9
A tour of Cobalt1 / 9

Cobalt in 9 slides

A pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties.

  • Vetted pentest platform
  • Bug bounty platforms
  • Based in San Francisco, United States
  • Vetted: providers are screened
2013founded
3.3our rating out of 5
30achievement points, Bronze
How it works2 / 9

What you do on Cobalt

How the money is made: prizes and bounties

  1. Join a challenge
  2. Submit your work
  3. It gets judged
  4. Win the prize

A pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties.

Founded 2013 · next to 9 other bug bounty platforms

2010201520202025HackerOne: 2012Bugcrowd: 2012Synack: 2013Open Bug Bounty: 2014YesWeHack: 2015Zerocopter: 2015Intigriti: 2016HackenProof: 2017Immunefi: 2020Cobalt, 2013
Each dot is a platform of the same type, placed at its founding year.

Work and topics

Good for

Fees3 / 9

What Cobalt takes

Pentesters paid per projectwhat it costs you

Pentesters paid per project

Getting paid4 / 9

How the money reaches you

From sign-up to payout

  1. Sign upFree
  2. Application and vettingIncludes an ID check
  3. Do the work
  4. Withdraw1 way to withdraw

1 way to withdraw

  • Bank transfer
Who can join5 / 9

Can you join?

Yes, if you pass its application.

You need a computer, reliable internet, a background check and a skills test. You have to verify your ID.

What you need

  • A computer
  • Reliable internet
  • A background check
  • A skills test
  • An ID checkBefore you can work or withdraw
  • Free to joinSign-up cost
  • Application and vettingHow sign-up works

Check it with your country →

Real earnings6 / 9

What people actually earn

People earning · 2025500 vetted pentesters

Cobalt said in a December 2025 press release that its Cobalt Core freelance pentester community grew from 450 to 500 during 2025.

Source: businesswire.com ↗
Rating and achievements7 / 9

How it scores

3.3out of 5

Strong on access. Weaker on getting paid.

FeesGetting paidAccessTrack recordProof of earnings
  • FeesNot enough facts
  • Getting paid2.3
  • Access4.5
  • Track record3.5
  • Proof of earnings3.0
30/100 ptsBronze
  • Verified earnings
  • Open worldwide
  • Free to join
  • 10 years running
Profile completeness8 / 9

How much we know

57%

We have 8 of the 17 things we track for every platform. Fees, payouts, join rules, countries and real earnings count most.

What we have

  • What kind of platform it is
  • Year founded
  • Headquarters
  • Fees
  • Withdrawal methods
  • Join requirements
  • Countries it accepts
  • Real earnings figures

Still missing

  • Plain-English overview
  • Minimum payout
  • How fast you get paid
  • Payment protection
  • Review ratings
  • Wikipedia or reference page
  • Support channels
  • Mobile apps
  • Social accounts

Know one of these? Tell us →

Arrow keys or swipe