Report a Vulnerability
Submit, help fixing, get kudos.
Start a Bug Bounty
Run your bounty program for free.
533,019 coordinated disclosures
333,390 fixed vulnerabilities
783 bug bounties with 1,549 websites
15,904 researchers, 1098 honor badges

API for CERTs

To promote coordinated and responsible disclosure enabled by Open Bug Bounty non-profit project, we provide national and private (subject to qualification) CERTs with a free API to search our databases and get alerts on new submissions affecting any domain.

We do not provide any vulnerability details (that belong to the security researchers) unless they are publicly disclosed via the API.

Upon request, we can also try to put your in contact with a researcher to facilitate coordinate disclosure and vulnerability remediation.

Request API access

  Your Name:
* Your Email:
  Subject:
* Message:
 

  Latest Patched

 26.05.2020 arise.com
 26.05.2020 plantronics.com
 26.05.2020 benditofutbol.com
 25.05.2020 alaneesqatar.qa
 25.05.2020 shorturl.at
 25.05.2020 torrentoon.com
 25.05.2020 www1.eeoc.gov
 25.05.2020 fcrs.treas.gov
 25.05.2020 bankiros.ru
 25.05.2020 eichberg.ws

  Latest Blog Posts

04.04.2020 by Rando02355205
(Alibaba) message.alibaba.com [IDOR] - [Bug Bounty]
12.03.2020 by Rando02355205
(Paypal) www.paypal.com [CSP High Level] - [XSS Reflected] - [Bug Bounty] - [Write Up]
08.03.2020 by CybeReports
JDECO.net XSS Vulnerability| CybeReports
29.02.2020 by Rando02355205
(Google) groups.google.com - [Stored XSS] - [Bug Bounty] - [WriteUp] - [24/02/2020]
10.02.2020 by 0xrocky
Stored XSS on h2biz.net

  Recent Recommendations

    26 May, 2020
     redicius:
Tested my site a lot (according to log :) and found an hidden XSS issue in our site.
Thank you!
    26 May, 2020
     chrisjimallen:
Very helpful insights, spotted something I'd overlooked.
    25 May, 2020
     thisismeraul:
Thanks for finding this vulnerability for us. The corporate website is more secure now. Good job!
    25 May, 2020
     VICTOR__Europe:
Thank you for helping us to fix the critical SQL injection.
Friendly contact, thanks for the effort.
    25 May, 2020
     vovsoft:
Thank you very much for finding the bug on our website and your responsible disclosure. Absolutely appreciated. You make the web a better place!