Bug bounty · Vulnerability disclosure

Hack on live programs. Get paid.

Bounties and disclosure programs from verified organizations. Every program publishes scope, rewards, and real response stats — pick targets by evidence. Valid bugs pay in mobile money.

No programs match right now — be the first to know when one opens, or run your own and set the standard.

01

Find a program to hack on

Search by name, filter by bounty size, sort by top bounty, resolved count, or response speed.

ProgramAction
No programs match these filters.

0 of 0 programs · sorted by bounty ↓

02

Report privately. Get triaged in the open.

Every report moves through SUBMITTED, TRIAGED, AWAITING_INPUT, RESOLVED, WONTFIX, CLOSED — each move recorded with who did it and why.

01

Pick a target

Read the scope and reward table first. Outside published scope is out of contract.

02

Submit privately

Bug, reach, text proof. Evidence URLs are never fetched or executed.

03

Watch triage

Severity LOW to CRITICAL with a reason. Response times are public.

04

Get paid

Awards lock from a funded pool. Net lands on mobile money.

03

New to BugHunt?

Hunt for money, disclose for credit, or run your own program. All three start with a free account.