Community curated list of public bug bounty and responsible disclosure programs.
-
Updated
Sep 7, 2026 - Go
Community curated list of public bug bounty and responsible disclosure programs.
60+ detectors for web, plus mobile apps and smart contracts. Every finding is mapped to the OWASP Top 10, marked Confirmed when we have proof, and comes with AI fix guidance — plus scheduled scans, the Red vs Blue Arena, branded PDF reports and CI/CD gating. Free, open-source and self-hostable.
Asset inventory of over 1 million public bug bounty & Vulnerability disclosure Program.
A structured, auto-updating directory of self-hosted bug bounty and vulnerability disclosure programs. Filter by self-hosted or platform, and by country - ideal for security researchers and bug bounty hunters.
To associate your repository with the bugbounty-program topic, visit your repo's landing page and select "manage topics."