[2dev0]

Well ... since "Sorry, you cannot post links, videos, or images until you've made more than 50 total posts or have upgraded."

I will do it like that.

68 74 74 70 73 3A 2F 2F 77 77 77 2E 7A 73 63 61 6C 65 72 2E 63 6F 6D 2F 73 65 63 75 72 69 74 79 2F 76 75 6C 6E 65 72 61 62 69 6C 69 74 79 2D 64 69 73 63 6C 6F 73 75 72 65 2D 70 72 6F 67 72 61 6D

OP please advise and update the list if applicable (I think yes).

[Starguy]

Not bad. Thanks for the list. I use a certain/specific google dork to discover new unknown/less competitive or low tier programs sometimes.

Hey can you please share dorks using which we can also find bug bounty programs

[SIM-5381096]

Hey can you please share dorks using which we can also find bug bounty programs

Seriously man, there's lot of resources out there that you just have to search or dork it.

[REZ4R]

Thanks for posting. In my opinion HackerOne and BugCrowd are the best, but not for beginners because the competition is extremely high.From my experience,for beginners, I'd recommend starting on YesWeHack or maybe Intigriti.

[mrbumbastik11]

Hi, I'm new around here, noticed this topic and here is one that may be worth a shot: Inspectiv (can't post links, but you'll find it easy)

[AnnaCred]

Here is a list of sites to obtain Bug Bounty rewards and payments.

hackerone.com
bugcrowd.com
synack.com/red-team
cs.detectify.com
cobalt.io
opnwbugbounty.org
zerocopter.com
yeswehack.com
hackenproof.com
vulnerability-lab.com
firebounty.com
bugbounty.jp
anithack.me
intigriti.com
safehats.com
redstorm.io
cyberarmy.id
yogasha.com

If you know about more, please LMK and I can update this thread.

Thanks!

[wayx000]

Thanks 😁

[LuszSec]

thanks for share

[Clumsy]

Here is a list of sites to obtain Bug Bounty rewards and payments.

hackerone.com
bugcrowd.com
synack.com/red-team
cs.detectify.com
cobalt.io
opnwbugbounty.org
zerocopter.com
yeswehack.com
hackenproof.com
vulnerability-lab.com
firebounty.com
bugbounty.jp
anithack.me
intigriti.com
safehats.com
redstorm.io
cyberarmy.id
yogasha.com

If you know about more, please LMK and I can update this thread.

🌍 General Crowdsourced Platforms
These are the largest and most well-known platforms, hosting thousands of programs across a wide range of industries and technologies.

https://hackerone.com

https://bugcrowd.com

https://www.synack.com

https://www.intigriti.com

https://www.yeswehack.com

https://www.cobalt.io

https://www.zerocopter.com

https://www.vulnerability-lab.com

https://www.openbugbounty.org

https://federacy.com

https://www.epicbounties.com

https://bugbounter.com

https://bugbase.ai

https://hackrate.com

https://www.hacktify.eu

https://bugv.io

https://bugbounty.jp

https://bbhunt.jp

https://bugbounty.bi.zone

https://bugbounty.ru

https://bughunt.com.br

https://bugzero.io

https://whitehub.net

https://safevuln.com

https://www.secuna.io

https://www.cyberarmy.id

https://redstorm.io

https://www.ravro.ir

https://bugbounty.qa

https://bugbounty.sa

https://bugbounty.ae

https://bugbounty.ch

https://bugrakshak.com

https://thebugbounty.com

https://vulnscope.com

https://bugbounty.compass-security.com

https://app.crowdswarm.io

https://www.pentabug.com

https://swarmnetics.com

https://scantitan.com

https://www.vulbox.com

https://src.360.net

https://bountyteam.com

https://bugbank.cn

https://butian.net

https://bugloud.com

https://bugs.crowdsec.net

💎 Web3 & Smart Contract Specialists
These platforms focus exclusively on high-reward security for blockchain protocols, DeFi, and smart contracts.

https://immunefi.com

https://code4rena.com

https://sherlock.xyz

https://hackenproof.com

https://cantina.xyz

https://hats.finance

https://secure3.io

https://auditone.io

https://hashlock.com

https://r.xyz

https://slowmist.com

https://bugrap.io

https://certik.com

https://certora.com/contests

https://codehawks.cyfrin.io

https://openbounty.shentu.org

🤖 AI & LLM Security Platforms
This is a growing category dedicated to finding vulnerabilities in artificial intelligence and large language models.

https://0din.ai

https://app.grayswan.ai/arena

https://hackaprompt.com

https://huntr.com

🛡️ Vulnerability Acquisition & Brokered Disclosure
These programs and platforms operate as buyers for zero-day vulnerabilities and are a direct way to get paid for high-impact research.

https://zerodayinitiative.com

https://ssd-disclosure.com

🔧 Ecosystem-Specific Platforms
These focus on specific software ecosystems, like WordPress or open-source.

https://patchstack.com

https://www.wordfence.com

https://issuehunt.io

🏛️ Government & Public-Interest Programs
Official programs run by governments and national CERTs. Some offer monetary rewards, while others provide recognition or swag for valid reports.

https://zeroday.hitcon.org

https://www.homeaffairs.gov.au

https://ccb.belgium.be/cert/vulnerability-reporting-ccb

https://www.kyberturvallisuuskeskus.fi/en/report

https://www.tech.gov.sg/report-vulnerability/

https://www.ncsc.gov.uk

https://cert.pl/en/cvd/

https://cert-in.org.in/RVDCP.jsp

https://www.cisa.gov/resources-tools/ser...p-platform

https://divd.nl

https://jvn.jp/en/

https://knvd.krcert.or.kr

https://nciipc.gov.in/RVDP.html

https://hub.ncsa.gov.mv/resources/bug-bounty-program

https://ncsc.nl/contact/kwetsbaarheid-melden

https://nksc.lt/pranesti-spraga.html

https://twcert.org.tw/en/np-138-2.html

https://www.ncsc.admin.ch

https://www.owasp.org/www-project-bug-logging-tool