Bug Bounties

The open source directory of bug bounty and responsible disclosure programs ...

Find Reporting Method

Discovered a security vulnerability on a website, and not sure where to report it? Enter the URL to a website, repo, app or software package, and we'll search all VDPs, bounties and security contact methods to find you the best channel to securely disclose the vulnerability.

Query From Your Tools

Query the bug-bounty database from your AI agent, pen-test toolchain or scripts

MCP
For Claude Desktop, Cursor, Cline and other MCP clients Docs →
npx bug-bounties-mcp
API
JSON endpoints for programmatically searching VDPs Docs →
bug-bounties.as93.net/api

Fetching latest bounty programs