🐛 Bug Bounty Programs

Apple doubled its top reward to $2 million for zero-click exploit chains capable of achieving goals similar to sophisticated mercenary spyware. Bonus categories…

Google's Android and Devices Vulnerability Reward Program pays up to $1.5 million for zero-click exploit chains targeting the Titan M security chip on Pixel dev…

Rewards for critical vulnerabilities in Samsung Galaxy devices and services.

Microsoft's Security Response Center runs bounty programs across Azure, Microsoft 365, Hyper-V, Windows, and Dynamics, with top awards around $250,000 for criti…

Google's Cloud Vulnerability Reward Program offers a top award of $101,010 for the highest-impact vulnerabilities in Google Cloud products. The program covers a…

Bounties for hardware, firmware, and software vulnerabilities in Intel products.

Sony's PlayStation bug bounty (via HackerOne) rewards researchers for vulnerabilities in PlayStation systems, with top rewards exceeding $50,000.

PayPal's bug bounty (via HackerOne) rewards researchers for security vulnerabilities across its payment platforms.

Bounties for vulnerabilities in GitHub products and infrastructure.

GitLab runs a public bug bounty (via HackerOne) rewarding researchers for vulnerabilities in GitLab products.

Mozilla pays bounties for security vulnerabilities in Firefox and its services, with high-impact bugs earning the top rewards.

Tesla's bug bounty (via Bugcrowd) rewards researchers for vulnerabilities in its vehicles, apps, and infrastructure.

Halodoc runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; p…

zkSync runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; pa…

web3 foundation runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash r…

szns runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; payo…

rockset runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; p…

reportgarden runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash rewa…

ownCloud runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward;

inDrive runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; p…

iRobot runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; pa…

dropbox runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; p…

dfuse Platform runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash re…

cPanel runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; pa…

bluesnap runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward;

Zoom runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; payo…

Zomato runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; pa…

Zoho runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; payo…

Zilliqa runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; p…

Zendesk runs a public bug bounty program. Report qualifying security vulnerabilities through their published security policy or contact to earn a cash reward; p…