Top 20 Public Bug Bounty Programs

1. Top 20 Public Bug Bounty Programs The biggest, fastest, and most lucrative bounty programs on the HackerOne platform.

2. The Top 20 Public Bug Bounty Programs! Welcome to HackerOne’s 2019 list of the top bug bounty programs on the HackerOne platform. The list was curated using public details available in the HackerOne directory of programs, with rankings based on the total amount of each organization’s cumulative bounties awarded to hackers over the life of their program*. It also includes accolades for those programs who placed in the top 5 for fastest response time, fastest time to bounties paid, most hackers thanked, most vulnerability reports resolved, and more. Hackers are attracted to programs that are responsive, pay well, and pay quickly. So the most popular programs are also, unsurprisingly, the ones listed here. Now, on to the list! *Note: Bounty ﬁgures do not necessarily include bounties from Live Hacking Events, Private programs, or other engagements.

3. Verizon Media Creating what’s next in content, advertising and technology. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$4,000,000 Average First Response 9 HOURS Thanked 1,124 Top Bounty $6,000 Average Time to Bounty 24 DAYS Reports Resolved 5,269 Program launched February 2014 ACCOLADES #1 in All-Time Bounties Paid #1 Most Hackers Thanked #1 Most Reports Resolved Top 5 Largest Top Bounty 5 Year Club

4. Uber We ignite opportunity by setting the world in motion. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$1,795,000 Average First Response 8 HOURS Thanked 635 Top Bounty $15,000 Average Time to Bounty 2 MONTHS Reports Resolved 1,172 Program launched March 2016 ACCOLADES Top 5 Most Hackers Thanked Top 5 Most Reports Resolved Top 5 Fastest Response Time

5. PayPal Send money, pay online. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$1,170,000 Average First Response 5 HOURS Thanked 212 Top Bounty $30,000 Average Time to Bounty 17 DAYS Reports Resolved 430 Program launched September 2018 ACCOLADES #1 Largest Top Bounty Top 5 Fastest Response Time

6. Shopify Build your business. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$1,100,000 Average First Response 8 HOURS Thanked 427 Top Bounty $25,000 Average Time to Bounty 2 DAYS Reports Resolved 996 Program launched April 2015 ACCOLADES #1 Fastest Time to Bounty Top 5 Most Reports Resolved Top 5 Largest Top Bounty

7. Twitter See what’s happening. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$1,100,000 Average First Response 1 DAY Thanked 695 Top Bounty $15,120 Average Time to Bounty 12 DAYS Reports Resolved 995 Program launched May 2014 ACCOLADES Top 5 Most Hackers Thanked Top 5 Most Reports Resolved 5 Year Club

8. Intel Making possible the most amazing experiences of the future. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$800,000 Average First Response -- Thanked 69 Top Bounty -- Average Time to Bounty -- Reports Resolved -- Program launched February 2018

9. Airbnb Book unique homes and experiences. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$600,000 Average First Response 3 HOURS Thanked 257 Top Bounty $15,000 Average Time to Bounty 5 DAYS Reports Resolved 508 Program launched February 2015 ACCOLADES Top 5 Fastest Response Time Top 5 Fastest Time to Bounty

10. Ubiquiti Networks Democratizing professional network technology. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$600,000 Average First Response -- Thanked 511 Top Bounty -- Average Time to Bounty -- Reports Resolved 765 Program launched March 2015

11. Valve We make games, Steam, and hardware. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$570,000 Average First Response 17 HOURS Thanked 237 Top Bounty $20,000 Average Time to Bounty 30 DAYS Reports Resolved 470 Program launched May 2018 ACCOLADES Top 5 Largest Top Bounty

12. GitLab A single application for the entire software development lifecycle. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$570,000 Average First Response 3 HOURS Thanked 162 Top Bounty $12,000 Average Time to Bounty 3 MONTHS Reports Resolved 318 Program launched February 2016 ACCOLADES Top 5 Fastest Response Time

13. GitHub A development platform inspired by the way you work. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$520,000 Average First Response 17 HOURS Thanked 225 Top Bounty $20,000 Average Time to Bounty 7 DAYS Reports Resolved 348 Program launched April 2016 ACCOLADES Top 5 Largest Top Bounty Top 5 Fastest Time to Bounty

14. Slack Imagine what you’ll accomplish together. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$420,000 Average First Response -- Thanked 420 Top Bounty $10,000 Average Time to Bounty -- Reports Resolved 838 Program launched February 2014 ACCOLADES 5 Year Club

15. Starbucks The best coﬀee and espresso drinks. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$300,000 Average First Response 1 HOUR Thanked 560 Top Bounty $8,000 Average Time to Bounty 8 DAYS Reports Resolved 628 Program launched November 2016 ACCOLADES #1 Fastest Response Time Top 5 Most Hackers Thanked

16. Mail.ru Making technologies simple and accessible. Top 5 Fastest Response Time Top 5 Most Hackers Thanked Top 5 Fastest Time to Bounty Top 5 Most Reports Resolved 5 Year Club ACCOLADES Program launched April 2014 BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$300,000 Average First Response 5 HOURS Thanked 581 Top Bounty $10,000 Average Time to Bounty 7 DAYS Reports Resolved 2284

17. Grab Rides for everyone. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$300,000 Average First Response 14 HOURS Thanked 200 Top Bounty $10,000 Average Time to Bounty 5 DAYS Reports Resolved 328 Program launched July 2014 ACCOLADES Top 5 Fastest Time to Bounty

18. Coinbase Buy and sell cryptocurrency. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$300,000 Average First Response -- Thanked 298 Top Bounty $20,000 Average Time to Bounty -- Reports Resolved 411 Program launched March 2014 ACCOLADES Top 5 Largest Top Bounty 5 Year Club

19. Snapchat The fastest way to share a moment. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$295,000 Average First Response 1 DAY Thanked 229 Top Bounty $25,000 Average Time to Bounty 7 DAYS Reports Resolved 289 Program launched April 2015 ACCOLADES Top 5 Largest Top Bounty Top 5 Fastest Time to Bounty

20. HackerOne Who? Us? Program launched November 2013 BOUNTIES RESPONSE HACKERS All-Time Total Paid TOP 25 Average First Response 7 DAYS Thanked 317 Top Bounty $20,000 Average Time to Triage 20 HOURS Reports Resolved 341 Average Bounty $500 Average Time to Bounty 11 DAYS Top Bounties Paid >$280,000

21. DropBox Put your creative energy to work. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$275,000 Average First Response 19 HOURS Thanked 195 Top Bounty $23,058 Average Time to Bounty 7 DAYS Reports Resolved 261 Program launched January 2015 ACCOLADES Top 5 Largest Top Bounty Top 5 Fastest Time to Bounty

22. VK The largest European social network. BOUNTY RANKINGS RESPONSE HACKERS Total Bounties Paid >$265,000 Average First Response -- Thanked 379 Top Bounty -- Average Time to Bounty -- Reports Resolved 630 Program launched May 2015

23. Improve your security today, with help from HackerOne HackerOne not only gives you access to community of 400,000 white hat hackers, we give you the platform, support, and expertise to make your security program one of the best in the world. These Top 20 programs are just a fraction of the more than 1,400 customers we work with everyday and who we’ve helped resolve over 120,000 vulnerability reports. When you put it all together, it’s no wonder we’re the #1 bug bounty platform in the world. To learn how we can help you, visit hackerone.com.