Top 31 Bug Bounty Projects list in 2019


 The following is a curated rundown of Bounty Programs by respectable organizations

1) Intel

Intel's abundance program for the most part focuses on the organization's equipment, firmware, and programming.
Restrictions: It does exclude late acquisitions, the organization's web foundation, outsider items, or anything identifying with McAfee.
Least Payout: Intel offers a base measure of $500 for discovering bugs in their framework.
Most extreme Payout: The Company pays $100,000 greatest for recognizing basic bugs.
Abundance Link: https://security-center.intel.com/BugBountyProgram.aspx

2) Yahoo

Yahoo has its devoted group that acknowledges powerlessness reports from security specialists and moral programmers.
Restrictions: The Company does not offer any reward for discovering bugs in yahoo.net, Yahoo 7 Yahoo Japan, Onwander and Yahoo worked Word press web journals.
Least Payout: There is no set farthest point on Yahoo for least payout.
Most extreme Payout: Yahoo can pay $15,000 for identifying essential bugs in their framework.
Abundance Link:  https://safety.yahoo.com/Security/REPORTING-ISSUES.html

3) Snapchat

Snapchat security group surveys all defenselessness reports and follows up on them by mindful revelation. The organization, we will recognize your accommodation inside 30 days.
Least Payout: Snapchat will pay least $2,000.
Greatest Payout: Maximum they will pay is $15,000.
Abundance Link: https://hackerone.com/snapchat

4) Cisco

Cisco energizes people or association that are encountering an item security issue to report them to the organization.
Least Payout: Cisco's base payout sum is $100.
Most extreme Payout: Company will give greatest $2,500 to finding genuine vulnerabilities.
Abundance Link: https://tools.cisco.com/security/center/resources/security_vulnerability_policy.html

5) Dropbox

Dropbox abundance program enables security specialists to report bugs and vulnerabilities on the outsider administration HackerOne.
Least Payout: The base sum paid is $12,167.
Most extreme Payout: The greatest sum offered is $32,768.
Abundance Link: https://hackerone.com/dropbox

6) Apple

At the point when Apple originally propelled its bug abundance program it permitted only 24 security scientists. The structure at that point extended to incorporate more bug abundance seekers.

The organization will pay $100,000 to the individuals who can separate information ensured by Apple's Secure Enclave innovation.
Least Payout: There is no restricted sum fixed by Apple Inc.
Most extreme payout: The most noteworthy abundance given by Apple is $200,000 for security issues influencing its firmware.
Abundance Link: https://support.apple.com/en-au/HT201220

7) Facebook

Under Facebook's bug abundance program clients can report a security issue on Facebook, Instagram, Atlas, WhatsApp, and so on.
Impediments: There are a couple of security issues that the interpersonal interaction stage considers outside the field of play.
Least Payout: Facebook will pay at least $500 for an uncovered defenselessness.
Most extreme Payout: There is no maximum cutoff fixed by Facebook for the Payout.
Abundance Link: https://www.facebook.com/whitehat/

8) Google

Each substance in the .google.com, .blogger, youtube.com are open for Google's defenselessness rewards program.
Restrictions: This abundance program just covers plan and usage issues.
Least Payout: Google will pay least $300 for discovering security strings.
Greatest Payout: Google will pay the most elevated abundance of $31,337 for typical Google applications.
Abundance Link: https://www.google.com/about/appsecurity/compensate program/

9) Quora

Quora offers Bug Bounty program to all clients and analysts to discover and report security vulnerabilities.
Least Payout: Quora will pay least $100 for discovering vulnerabilities on their site.
Most extreme Payout: Maximum payout offered by this site is $7,000.
Abundance Link: https://engineering.quora.com/Security-Bug-Bounty-Program

10) Mozilla

Mozilla rewards for helplessness disclosures by moral programmers and security specialists.
Impediments: The abundance is offered just for bugs in Mozilla administrations, for example, Firefox, Thunderbird and other related applications and administrations.
Least Payout: Minium sum given by Firefox is $500.
Most extreme Payout: The Company is paying a limit of $5,000.
Abundance Link: https://bugzilla.mozilla.org/page.cgi?id=etiquette.html

11) Microsoft

Microsoft's present bug abundance program was authoritatively propelled on 23rd September 2014 and manages Online Services.
Constraints: The abundance compensate is given for the basic and vital vulnerabilities.
Least Payout: Microsoft prepared to pay $15,000 for finding basic bugs.
Most extreme Payout: Maximum sum can be $250,000.
Abundance Link: https://technet.microsoft.com/en-us/library/dn425036.aspx

12) OpenSSL

OpenSSL abundance enables you to report vulnerabilities utilizing secure email (PGP Key). You can likewise report vulnerabilities to the OpenSSL Management Committee.
Least Payout: The Company pays least abundance prizes of $500.
Greatest Payout: The most noteworthy sum given by the organization is $5,000.
Abundance Link: https://www.openssl.org/news/vulnerabilities.html

13) Vimeo

Vimeo respects any security defenselessness revealing in their items as the organization pays great rewards to that individual.
Least payout: The Company will pay least $500
Greatest Payout: The most extreme sum paid by this organization is $5,000.
Abundance Link: https://vimeo.com/about/security

14) Apache

Apache urges moral programmers to report security vulnerabilities to one of their private security mailing records.
Least payout: The base pay out sum given by Apache is $500.
Greatest Payout: This Company would maximum be able to give a reward of $3,000.
Abundance Link: https://www.apache.org/security/

15) Twitter

Twitter permits security scientists and specialists about conceivable security vulnerabilities in their administrations. The organization urges individuals to discover bugs.
Least Payout: Twitter is paying least $140 sum.
Most extreme Payout: Maximum sum pay by the organization is $15,000.
Abundance Link: https://help.twitter.com/en/rules-and-policies/reporting-security-vulnerabilities

16) Avast

Avast abundance program rewards moral programmers and security scientists to report Remote code execution, Local benefit acceleration, DOS, scanner sidestep among different issues.
Least Payout: Avast can pay you the base measure of $400.
Greatest Payout: The most extreme sum offered by the organization is $10,000.
Abundance Link: https://www.avast.com/bug-abundance

17) Paypal

Installment door administration Paypal likewise offers bug abundance programs for security scientists.
Restrictions:
Vulnerabilities subordinate upon social building procedures, Host Header
Forswearing of administration (DOS), User characterized payload, Content caricaturing without installed joins/HTM and Vulnerabilities which require a jailbroken cell phone, and so on.
Least Payout: Paypal can pay least $50 for discovering security vulnerabilities in their framework.
Most extreme Payout: Maximum payout sum given by Paypal is $10,000.
Abundance Link: https://www.paypal.com/us/webapps/mpp/security-tools/reporting-security-issues

18) GitHub

GitHub's runs bug abundance program since 2013. Each effective member earned focuses for their helplessness entries relying upon the seriousness.
Constraint: The security scientist will get that abundance just in the event that they regard clients' information and don't abuse any issue to create an assault that could hurt the honesty of GitHub's administrations or data.
Least Payout: Github pays a base measure of $200 for discovering bugs.
Greatest Payout: Github can pay $10,000 for finding basic bugs.
Abundance Link: https://bounty.github.com/

19) Uber

The helplessness rewards program of Uber fundamentally centered around ensuring the information of clients and its representatives.
Least Payout: There is no foreordained least sum.
Most extreme Payout: Uber will pay you $10,000 for finding basic bug issues.
Abundance Link: https://www.uber.com/newsroom/bug-bounty-program/

20) Magento

Magneto abundance program enables you to report security vulnerabilities in Magneto programming or sites.
Impediments: Following security inquire about isn't qualified for the abundance
i) Potential or genuine refusal of administration of Magento applications and frameworks.
ii) Utilization of an adventure to see information without approval.
iii) Robotized/scripted testing of web shapes.
Least Payout: Minimum payout sum for this is abundance program is $100.
Most extreme Payout: Magento is paying greatest $10,000 for finding basic bugs.
Abundance Link: https://magento.com/security

21) Perl

Perl is likewise running bug abundance programs. On the off chance that somebody found a security weakness in Perl, they can contact the organization.
Least Payout: The Company pays a base measure of $500.
Most extreme Payout: The most astounding sum given by Perl is $1,500.
Abundance Link: http://perldoc.perl.org/perlsec.html#SECURITY-VULNERABILITY-CONTACT-INFORMATION

22) PHP

PHP enables moral programmers to discover a bug in their site.
Confinements: You have to check the rundown of previously discovering bugs. In the event that you not adhere to this guidance your bug isn't considered.
Most extreme Payout: Minimum Payout sum is $500.
Least Payout: Maximum $1,500 is given by PHP for seeking vital bugs.
Abundance Link: https://bugs.php.net/report.php?bug_type=Security

23) Starbucks

Starbucks runs bug Bounty program to secure their clients. They urge to discover vindictive movement in their systems, web and versatile applications arrangements.
Least Payout: The base sum paid by Starbucks $100.
Greatest Payout: The most extreme sum goes up to $4,000.
Abundance Link: https://www.starbucks.com/whitehat

24) AT&T

AT&T likewise has its bug chasing channel. Engineers and security specialists can investigate the different stages like sites, APIs, and portable applications.
Least Payout: Minimum Amount Paid by them is $500.
Most extreme Payout: There is no such maximum point of confinement for payout.
Abundance Link: https://bugbounty.att.com/home.php

25) LinkedIn

The LinkedIn invites Individual analysts who contribute their skill and time to discover bugs.
The organization will compensate you, however neither least nor most extreme sum is a fix for this reason.
Abundance Link: https://security.linkedin.com/

26) Paytm

Paytm welcomes free security gatherings or individual scientists to think about it over all stages
Impediments:
Reports that express that product is obsolete/powerless without a 'Proof of Concept.'
XSS issues that influence just obsolete programs.
Stack follows that unveil data.
Any extortion issues
Least Payout: The Company will pay least $15 for discovering bugs.
Greatest Payout: This organization does not fix as far as possible.
Abundance Link: https://paytm.com/offer/bug-abundance/

27) Shopify

Shopify's Whitehat program rewards security specialists for finding serious security vulnerabilities
Least Payout: The base sum paid by the Shopify is $500.
Most extreme Payout: There is no fix maximum farthest point for paying the abundance.
Abundance Link: https://www.shopify.in/whitehat

28) Word Press

WordPress additionally invites security specialists to report about the bugs that they have found.
Least Payout: WordPress Pays $150 least for detailing bugs on their site.
Most extreme Payout: The Company does not fix a greatest farthest point to pay as abundance.
Abundance Link: https://make.wordpress.org/core/handbook/testing/reporting-bugs/

29) Zomato

Zomato encourages security scientist to recognized security-related issues with organization's site or applications.
Least Payout: Zomato will pay least $1,000 for finding imperative bugs.
Most extreme Payout: There is no greatest fix sum.
Abundance Link: https://www.zomato.com/security

30) Tor Project

Tor Project's bug abundance program covers two of its center administrations: its system daemon and program.
Confinement: OpenSSL applications are avoided from this extension.
Least Payout: The base sum paid by them is $100.
Greatest Payout: The Company will pay you most extreme $4,000.
(No connection accessible) Bounty Link: security@lists.torproject.org

31) Pornhub

Last pornhub declare that they will give out bounty for bug hunter, it was kick off with maximum $20,000 now it has been rised.
Confinement: submit but in website or there app
Least Payout: The base sum paid by them is $50.
Greatest Payout: The Company will pay you most extreme $25,000.

Bug chasing stage who run this above site for helping hacker and the organization to get collaboration for one another.

 1) Hackerone

HackerOne is one of the greatest defenselessness coordination and bug abundance stage. It encourages organizations to ensure their customer information by working with the worldwide research network for finding most applicable security issues. Many realized organizations like Yahoo, Shopify, PHP, Google, Snapchat, and Wink are taking the administration of this site to give a reward to security analysts and moral programmers.
Abundance Link: https://hackerone.com/bug-abundance programs

2) Bugcrowd

A ground-breaking stage interfacing the worldwide security specialist network to the security showcase. This webpage expects to give right blend and kind of scientist fit by the particular site to their overall customers. The programmers simply need to choose their reports on this site, and on the off chance that they can distinguish right bugs, the particular organization will pay the sum to that individual.
Abundance Link: https://www.bugcrowd.com/bug-abundance list/

3) BountyFactory

4) Intigriti

5) Bugbountyjp

Abundance Link: https://bugbounty.jp/

6) Safehats

Abundance Link: https://safehats.com/

7)  BugbountyHQ

8) Hackenproof

Abundance Link: https://hackenproof.com/

That's is all for now. If I miss anything just let me know.

Comments