Launch your bug bounty program in minutes, completely free. No platform fees, no contracts, no enterprise complexity. Founders: List your product, set bounties by severity, verify domain ownership, and receive vulnerability reports from ethical hackers worldwide. Researchers: Browse verified programs, submit reports, earn bounties, and build your security reputation. Free security scanner, real-time notifications, dispute resolution, and 2FA. Making the indie web safer, one patch at a time.

Intercom — Startups get 90% off Intercom + 1 year of Fin AI Agent free

Startups get 90% off Intercom + 1 year of Fin AI Agent free

Bug bounty platforms like HackerOne and Bugcrowd are built for enterprises. They charge hefty fees, require lengthy contracts, and are overkill for indie hackers shipping side projects. Meanwhile, indie SaaS founders know security matters but can't justify $10k+ programs. So they ship and hope for the best. I wanted a dead-simple way for indie founders to say "hey, if you find a bug, I'll pay you, without the enterprise BS. patchli.st is 100% free. No platform fees. No cuts from bounties. Just connect founders who care about security with researchers who want to help. How it works: 1. Founders list their product and set fair bounties ($25-$500 typical) 2. Researchers browse programs and submit vulnerability reports 3. Founders review, pay directly, done

Intercom — Startups get 90% off Intercom + 1 year of Fin AI Agent free

Startups get 90% off Intercom + 1 year of Fin AI Agent free

patchli.st

The bug bounty platform for indie SaaS founders.

The bug bounty platform for indie SaaS founders.