Every public bounty program. One index.
1,103 public programs across five platforms — filtered by scope, asset type, and payout. Top of the leaderboard: $15,000,000.
- Programs
- 1,103
- Paying bounties
- 796
- In-scope assets
- 46,647
- Platforms
- 6
- Ingest
- —
§01/Workflow
Three steps.
Zero platform-hopping.
Aggregate.
Every public program from five platforms pulled daily into a single normalized index. HackerOne, Bugcrowd, Intigriti, YesWeHack, Federacy.
// source · arkadiyt/bounty-targets-data
$ ingest --all
Σ 918
- HackerOne+448
- Bugcrowd+242
- Intigriti+131
- YesWeHack+62
- federacyFederacy+35
Filter.
Platform, asset type (wildcard, API, mobile, hardware, source), minimum payout tier, and full-text scope search. Chip-based. URL is the state.
// scan-heavy · not click-heavy
$ filter
→ 42
Hunt.
Open a program to see full in-scope + out-of-scope lists with severity notes. Jump straight to the platform to submit.
// / to search · j k ↵
$ open shopify
↗ submit§02/Why this exists
Every alternative is fragmented.
Each platform shows its own programs. Directories are stale or policy-only. Raw JSON is fine if you enjoy jq. And none of them speak MCP. This is the one built for scanning — by you or your agent.
- Coverage
- 5 of 5 · unified
- Sort by payout
- ✓ max payout
- Scope lookup
- ✓ one query
- MCP / agent access
- ✓ /mcp endpoint
- Keyboard nav
- ✓ / j k ↵
- Coverage
- 1 of 5
- Sort by payout
- severity only
- Scope lookup
- ✗
- MCP / agent access
- ✗
- Keyboard nav
- ✗
- Coverage
- 1 of 5
- Sort by payout
- ✓ max payout
- Scope lookup
- ✗
- MCP / agent access
- ✗
- Keyboard nav
- ✗
- Coverage
- VDP policies only
- Sort by payout
- ✗
- Scope lookup
- ✗
- MCP / agent access
- ✗
- Keyboard nav
- ✗
- Coverage
- 5 of 5 · raw JSON
- Sort by payout
- grep + jq
- Scope lookup
- grep + jq
- MCP / agent access
- ✗
- Keyboard nav
- n/a
§03/What it does
Four things.
Done properly.
01 · index
Unified index
One table. Five platforms. Sort by max reward, filter by asset type, jump to the highest payouts first. 796 of 1,103 pay in cash right now.
/programs02 · lookup
Scope lookup
Paste a domain. Instant verdict — in-scope somewhere, or not.
$ lookup tesla.com
→ in scope · 2 programs
/scope-lookup03 · nav
Keyboard-first
anywhere04 · feed
Log & RSS
New programs surface within an hour, grouped as a dated log. Subscribe by RSS or read the web view.
/feed§04/Start hunting
796 programs
are paying bounties
right now.
Filter the list, save an RSS, find the ones that fit your stack.
