bounty.index

1,405 public programs across five platforms — filtered by scope, asset type, and payout. Top of the leaderboard: $15,000,000 .

Every public program from five platforms pulled daily into a single normalized index. HackerOne, Bugcrowd, Intigriti, YesWeHack, Federacy.

Platform, asset type (wildcard, API, mobile, hardware, source), minimum payout tier, and full-text scope search. Chip-based. URL is the state.

Open a program to see full in-scope + out-of-scope lists with severity notes. Jump straight to the platform to submit.

Each platform shows its own programs. Directories are stale or policy-only. Raw JSON is fine if you enjoy jq . And none of them speak MCP . This is the one built for scanning — by you or your agent.

One table. Five platforms. Sort by max reward, filter by asset type, jump to the highest payouts first. 825 of 1,405 pay in cash right now.

Paste a domain. Instant verdict — in-scope somewhere, or not.

New programs surface within an hour, grouped as a dated log. Subscribe by RSS or read the web view.

Filter the list, save an RSS, find the ones that fit your stack.