Terms · effective November 2, 2026
Terms of use
The short, honest contract for using bounty.index. By using the site, the API, or the MCP endpoint, you agree to these. I’ve kept them plain on purpose.
What this is
bounty.index is a free index of public bug bounty programs, pulled together across seven platforms. Browsing is free and needs no account. Signing in with GitHub unlocks saved features like your watchlist, notes, and alerts. I build and run it solo.
The data, and a real caveat
The program data is aggregated from public sources and refreshed daily, so it can lag or carry a mistake from upstream. Before you test anything, treat the official program page on the platform as the source of truth for scope, rules, and safe-harbor status. I do my best to keep this accurate, but I can’t promise it is complete or current, and you are responsible for staying inside a program’s actual rules. bounty.index is not permission to test anything.
The API and MCP endpoint
The export endpoints and the MCP server are open for you to build on. Please be a good neighbor: don’t hammer them hard enough to degrade the site for everyone else, and don’t pass off the data as if it were your own original collection. The underlying program data mostly comes from the public bounty-targets-data project and each platform; credit flows there. If your usage starts to threaten the site’s stability, I may rate-limit or block it.
Your account
You’re responsible for what happens under your GitHub sign-in. Keep it to one person, don’t use the site to break the law or abuse the platforms it lists, and don’t try to attack or overload the service itself. You can delete your account at any time, which removes your data (see the privacy page). I can suspend an account that abuses the service.
Not affiliated with the platforms
bounty.index is an independent project. It is not affiliated with, endorsed by, or operated by HackerOne, Bugcrowd, Intigriti, YesWeHack, Federacy, Immunefi, HackenProof, or any program listed. Their names and marks belong to them.
No warranty, and the liability part
The site is provided as is, with no warranty of any kind. It’s a free tool run by one person; it can go down, lag, or be wrong. To the extent the law allows, I’m not liable for losses that come from using it or relying on its data, including anything that happens from testing a program. Verify on the platform, and test responsibly.
Changes
If these terms change, I’ll update this page and move the effective date at the top. Keep using the site after a change and you’re agreeing to the new version.
Questions? Email varunshukla747@gmail.com.
privacy →
