Vulnerability Disclosure Program

.wrapper { display:none; } .footer { display:none; } body { -ms-overflow-style: scrollbar; overflow-y: scroll; overscroll-behavior-y: none; } .errorContainer { background-color: #FFF; color: #0F1419; max-width: 600px; margin: 0 auto; padding: 10%; font-family: Helvetica, sans-serif; font-size: 16px; } .errorButton { margin: 3em 0; } .errorButton a { background: #1DA1F2; border-radius: 2.5em; color: white; padding: 1em 2em; text-decoration: none; } .errorButton a:hover, .errorButton a:focus { background: rgb(26, 145, 218); } .errorFooter { color: #657786; font-size: 80%; line-height: 1.5; padding: 1em 0; } .errorFooter a, .errorFooter a:visited { color: #657786; text-decoration: none; padding-right: 1em; } .errorFooter a:hover, .errorFooter a:active { text-decoration: underline; } #placeholder, #react-root { display: none !important; } body { background-color: #FFF !important; }

JavaScript is not available.

We’ve detected that JavaScript is disabled in this browser. Please enable JavaScript or switch to a supported browser to continue using openbugbounty.org.

2023 © OpenBugBounty

Infosec Institute

Open Bug Bounty mentioned in the
Top 6 Bug Bounty programs of
2022 by the InfoSec Institute

The Hacker News

Open Bug Bounty named among the
Top 5 Bug Bounty programs of 2021
by The Hacker News

Platform update: please use our new authentication mechanism to securely use the Open Bug Bounty Platform.

For Researchers

Frequently Asked Questions Read the FAQ to get best experience with our platform	Write a Blog Post Write a blog post to share your knowledge and get kudos
Browse Bug Bounty Programs Browse active bug bounty programs run by website owners	Report a Vulnerability Report and help remediate a vulnerability found on any website

How it Works

Download presentation and learn
how our platform works

PDF, 500kb

For Website Owners

FAQ: For Website Owners Start here to ensure smooth collaboration with the security researchers	Start a Bug Bounty Start your bug bounty program at no cost and leverage crowd-security testing
FAQ: For Bug Bounty Owners Read how to maximize your ROI from crowd-security testing

How it Works

Download presentation and learn
how our platform works

PDF, 500kb

About

About the Project Read about Open Bug Bounty history, values and mission	API Request National CERTs and law enforcement agencies may request our API
Frequently Asked Questions Review the most popular questions about the project	Contact Us Get in touch

How it Works

Download presentation and learn
how our platform works

PDF, 500kb

Hall of Fame
Forum

OpenBugBounty.org > Report Vulnerability

Make web a safer place and become a cybersecurity hero.

Open Bug Bounty for Security Researchers

In order to report a vulnerability via Open Bug Bounty you should login first

Latest Patched

23.05.2024 nqheritage.jcu.edu.au

23.05.2024 idd64.titan-man.me

23.05.2024 idd34.titan-man.me

22.05.2024 cdpc.sydney.edu.au

22.05.2024 rsis.edu.sg

22.05.2024 fesc.edu.co

22.05.2024 ceza.gov.ph

22.05.2024 questionnair.csb.gov.jo

21.05.2024 expresscar.am

21.05.2024 opera.am

Latest Blog Posts

04.12.2023 by BAx99x
Unmasking the Power of Cross-Site Scripting (XSS): Types, Exploitation, Detection, and Tools

04.12.2023 by a13h1_
$1120: ATO Bug in Twitter’s

04.12.2023 by ClumsyLulz
How I found a Zero Day in W3 Schools

04.12.2023 by 24bkdoor
Hack the Web like a Pirate: Identifying Vulnerabilities with Style

04.12.2023 by 24bkdoor
Navigating the Bounty Seas with Open Bug Bounty

Recent Recommendations

22 May, 2024

AndySchmidt:

Rajesh pointed out two different important vulnerabilities and supplied the necessary details for us to reproduce the issues. We appreciate his professionalism throughout the process.

14 May, 2024

TheDevinSwan:

Thank you for reporting vulnerabilities on our site. Your prompt assistance enabled us to resolve the issue quickly.

1 May, 2024

Mek:

Got a recommendation to fix an SQL injection vulnerability on my website. As I am a hobbyist and my page is a hobby project, I can't offer money, so I am recommending this researcher. Thanks again.

26 April, 2024

I_bims_Mike:

Thank you very much for identifying the XSS vulnerability and for our friendly email exchange.

22 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

Making Web a Safer Place

Coordinated & Responsible Disclosure

Based on ISO 29147 Guidelines