Infosec Institute

Open Bug Bounty mentioned in the
Top 6 Bug Bounty programs of
2022 by the InfoSec Institute

The Hacker News

Open Bug Bounty named among the
Top 5 Bug Bounty programs of 2021
by The Hacker News

Platform update: please use our new authentication mechanism to securely use the Open Bug Bounty Platform.
For security researchers
Report a Vulnerability
Submit, help fixing, get kudos.
For website owners
Start a Bug Bounty
Run your bounty program for free.
1,706,094 coordinated disclosures
1,383,965 fixed vulnerabilities
1,992 bug bounty programs, 3,887 websites
47,226 researchers, 1,653 honor badges

Frequently Asked Questions

Please kindly refer to the Frequently Asked Questions before submitting your question via the contact form below. Being a non-profit project, we have limited resources to respond on redundant questions that can be found in the FAQ.

We Are Listening to You

Being totally open, non-profit community of security professionals, we are always open for any suggestions and proposals. Feel free to submit any ideas, suggestions or critique to our community forum - we always reply to everyone.

Online Contact Form

If you have something confidential or personal to tell us - please use the form below. All your personal and contact details will stay private and will never be shared with anyone.

* Your Name:
* Your Email:
  Subject:
* Message:
 

Privacy: your data will be (i) used solely for the purpose of handling your request, (ii) will not
be shared with third parties, and (iii) will be deleted after your request is processed.

  Latest Patched

 01.05.2024 siat-sz.edu.cn
 01.05.2024 tmsteam.me
 28.04.2024 pedralva.mg.gov.br
 28.04.2024 novaubirata.mt.gov.br
 28.04.2024 thurrock.gov.uk

  Latest Blog Posts

04.12.2023 by BAx99x
Unmasking the Power of Cross-Site Scripting (XSS): Types, Exploitation, Detection, and Tools
04.12.2023 by a13h1_
$1120: ATO Bug in Twitter’s
04.12.2023 by ClumsyLulz
How I found a Zero Day in W3 Schools
04.12.2023 by 24bkdoor
Hack the Web like a Pirate: Identifying Vulnerabilities with Style
04.12.2023 by 24bkdoor
Navigating the Bounty Seas with Open Bug Bounty

  Recent Recommendations

    1 May, 2024
    Mek:
Got a recommendation to fix an SQL injection vulnerability on my website. As I am a hobbyist and my page is a hobby project, I can't offer money, so I am recommending this researcher. Thanks again.
    22 April, 2024
    genoverband:
Thank you for your invaluable help in ensuring the security of our domain and its visitors!
    10 April, 2024
    Mars:
Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.
    8 April, 2024
    Panthermedia:
Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.
    5 April, 2024
    pubpharm:
Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.