BugsBounty lion shieldBugsBounty.com

[ DB ] — Program directory · Pays bounties

Bug bounty programs that pay rewards.

These programs state that they pay rewards for valid vulnerability reports. Amounts, scope and eligibility differ by program — read each policy before you test.

Which companies pay bug bounties?

The programs on this page state publicly that they pay rewards for valid reports. Amounts depend on severity and on each program's own rules. 433 programs currently match.

Pays bounties · 433 programs

433 shown

Data from the disclose.io open database (CC0 public domain), snapshot November 2026. A dash means the program hasn't stated it. Policies change — always read a program's own policy and scope before testing.

[ FAQ ] — Questions people ask

How much do bug bounty programs pay?

+

It varies widely, from small amounts for low-severity issues to large rewards for critical ones. The program's policy is the only reliable source for its reward table.

Is a program that pays bounties also safe to test?

+

Not automatically. Check its safe harbor status and scope. Programs with full safe harbor promise not to take legal action against good-faith research within scope.

Browse A–Z

0–9ABCDEFGHIJKLMNOPQRSTUVWXYZ

Browse by what matters