Programs Scope lookupScope New

/to search

☰menu

// sync across devices

Watchlist
Compare

Platform

Asset type

Min reward

Program

Sort

The bug bounty market, live-indexed. Every public program across five platforms, filterable in one view.

☕buy me a coffee

Product

Programs
Compare
Watchlist
Scope lookup
New programs
RSS feed

Platforms

HackerOne
Bugcrowd
Intigriti
YesWeHack
federacyFederacy

Resources

How it works
Data source
Hacktivity
Writeups
disclose.io

© 2026 bounty.index·not affiliated with any platform·built byVarun·X·GitHub

data · arkadiyt/bounty-targets-data·MIT licensed·updated daily

GitHub Bug Bounty Program on Hackerone

programs/HackerOne/github

GitHub

HackerOne·27 in-scope · 12 out·updated 1d ago

bountyswagopen

In scope

027

wildcards03

+*.github.net· critical
+*.githubapp.com· critical
+*.githubusercontent.com· critical

History

1 event

2026-08-06
first indexed
1d ago · 27 in-scope assets

// only one snapshot on record — changes appear from the next ingest onward

urls07

+api.github.com· critical
+classroom.github.com· critical
+education.github.com· critical
+gist.github.com· critical
+github.com· critical
+npmjs.com· critical
+npmjs.org· critical

hardware01

+GitHub Enterprise Server· critical

other16

+Copilot· critical
+Copilot Chat on dotcom· high
+Copilot Coding Agent· critical
+Copilot Spaces· critical
+Copilot for Business· critical
+Dependabot· critical
+GitHub CLI· high
+GitHub CSP· high
+GitHub Desktop· critical
+GitHub Enterprise Cloud· critical
+GitHub Enterprise Cloud with Data Residency (GHEC-DR)· critical
+GitHub Pages· critical
+GitHub Production Credentials· critical
+GitHub Spark· critical
+GitHub for mobile· critical
+npm CLI· high

Out of scope

012

urls09

−*.github.io
−blog.github.com
−community.github.com
−enterprise.github.com
−git.io
−github.blog
−http://education.github.com/forum
−shop.github.com
−spectrum.chat

other03

−Atom
−Electron
−GitHub Classroom Assistant