Infosec Institute

Open Bug Bounty mentioned in the
Top 6 Bug Bounty programs of
2022 by the InfoSec Institute

The Hacker News

Open Bug Bounty named among the
Top 5 Bug Bounty programs of 2021
by The Hacker News

For security researchers
Report a Vulnerability
Submit, help fixing, get kudos.
For website owners
Start a Bug Bounty
Run your bounty program for free.
1,753,382 coordinated disclosures
1,440,354 fixed vulnerabilities
2,054 bug bounty programs, 3,989 websites
52,795 researchers, 1,710 honor badges

Don't have account? Register now. It's free and easy.

* Your Email:

* Users of the platform who registered before 07.03.2023 can authenticate via the email address they've specified in their profile as the contact address.

  Latest Patched

 09.10.2024 rolexgrade.me
 09.10.2024 contracostavote.gov
 08.10.2024 activecampaign.com
 08.10.2024 juazeiro.ba.gov.br
 08.10.2024 vdo.ai
 04.10.2024 brk.im
 03.10.2024 dorfy.ai
 03.10.2024 academy-mind2.me
 03.10.2024 hp.com

  Latest Blog Posts

04.12.2023 by BAx99x
Unmasking the Power of Cross-Site Scripting (XSS): Types, Exploitation, Detection, and Tools
04.12.2023 by a13h1_
$1120: ATO Bug in Twitter’s
04.12.2023 by ClumsyLulz
How I found a Zero Day in W3 Schools
04.12.2023 by 24bkdoor
Hack the Web like a Pirate: Identifying Vulnerabilities with Style
04.12.2023 by 24bkdoor
Navigating the Bounty Seas with Open Bug Bounty

  Recent Recommendations

    4 October, 2024
    mods4cars:
A big THANK YOU to Dipu1a for bringing several XSS vulnerabilities on our website to our attention and giving helpful pointers how to fix. Greatly appreciated and highly recommended!
    23 September, 2024
    ajk99:
Found a valid issue. Clear and rapid communication.
    21 September, 2024
    ironblack:
Andrea found an XSS bug in one of our forms which was left over after some security fixes we did. Although the openbugbounty staff was not able to reproduce the issue, the issue was there and he promptly contacted us to tell the issue and have us fixed, in a pure collaborative and responsible disclosure fashion. Thank you again for your precious input!
    19 September, 2024
    hardg:
The researcher gave a very clear report, including steps to reproduce, and also communicated clearly and promptly. Many thanks for your research and coordinated disclosure!
    18 September, 2024
    jk22095:
I strongly recommend AsiB_ug for their excellent work in finding critical vulnerabilities in publicly accessible database and backup files on several websites.Thanks to his quick actions, we were able to implement necessary security measures promptly.