Hey Product Hunt 👋

I built bugbounty.fyi because finding a good bug bounty program meant hopping between HackerOne, Bugcrowd, Intigriti, Immunefi, YesWeHack and dozens of self-hosted security pages, each laid out differently, and never knowing when a program quietly raised its rewards or added new scope.

So it pulls them all into one place:

• 6,487 public programs across 28 platforms, including self-hosted ones found through security.txt

• What each one pays per severity, what's in scope, and its safe harbor, KYC and disclosure rules

• A live change feed: new programs, reward raises and cuts, scope added or removed. About 2,000 changes a week, and cuts and closures are confirmed on a second check before they show

• Paste any domain to see whether that company pays for bugs

• Follow along by RSS, Telegram or X (@BugBountyFYI)

It's free and there's no sign-up.

New scope is where the easy bugs are, so the "Fresh to hunt" list on the homepage is probably the most useful place to start.

I'd love your feedback: which platform or program is missing, and what kind of alert would actually get you hunting