Preset
431 public bug bounty programs offer wildcard scope (e.g. *.example.com), the broadest attack surface for subdomain discovery and reconnaissance.
Programs with wildcard scope (*.example.com). The broadest attack surface for reconnaissance and subdomain discovery.
| Program | Platform | Reward |
|---|---|---|
| OKX | hackenproofHackenProof | $1M |
| Phemex Web & Mobile | hackenproofHackenProof | $500K |
| Tesla | Bugcrowd | $100K |
| HTX | hackenproofHackenProof | $100K |
| Tothemoon Web | hackenproofHackenProof | $50K |
| Auth0 by Okta | Bugcrowd | $50K |
| NEAR Web | hackenproofHackenProof | $50K |
| Doctolib | YesWeHack | €50K |
| SuperEarn Web & Smart Contracts | hackenproofHackenProof | $30K |
| OpenAI | Bugcrowd | $30K |
| Bugcrowd | $25K | |
| Solv Web & Infrastructure | hackenproofHackenProof | $20K |
| Chime Managed Bug Bounty Engagement | Bugcrowd | $20K |
| Bitdefender | Bugcrowd | $15K |
| Yahoo Bug Bounty | Intigriti | $15K |
| Canva | Bugcrowd | $15K |
| Adobe Public | Intigriti | $15K |
| Capital.com | Intigriti | €15K |
| Dropbox Bug Bounty | Intigriti | $15K |
| intigriti | Intigriti | €13K |