Bug bounty platforms

Crowdsourced bug bounty pioneer founded in 2012 by Casey Ellis, offering managed programs and crowd-powered penetration testing from hundreds of thousands of ethical hackers.

World's largest ethical hacker platform with over one million researchers, offering bug bounties and structured penetration testing to the US DoD and Fortune 500.

Hackrate runs crowdsourced security testing and bug bounty programmes for companies.

Immunefi runs bug bounty programmes and security services for cryptocurrency and smart contract projects.

Intigriti runs a crowdsourced security platform connecting organisations with ethical hackers for bug bounties and testing.

Sherlock provides security audits and bug bounties for onchain systems and Web3 protocols.

Zerocopter provides security testing services including pentesting, bug bounty, and vulnerability disclosure.

HackenProof runs a bug bounty and crowdsourced audit platform for blockchain and crypto projects.

Standoff 365 runs bug bounty and cyber stress testing programmes with ethical hackers.

YesWeHack runs a bug bounty platform connecting organisations with ethical hackers.

FedRAMP-authorized crowdsourced penetration testing platform combining the vetted SRT researcher community with AI-powered Hydra technology for continuous security testing.

Hexens audits smart contracts and provides offensive security for blockchain and Web3 projects.

ProjectDiscovery builds open-source security tools and infrastructure for mapping, probing, crawling, and detecting vulnerabilities.

Cantina provides an agentic security platform that uses autonomous AI agents to detect, respond to, and fix security issues.