{"id":13842192,"url":"https://github.com/projectdiscovery/public-bugbounty-programs","last_synced_at":"2025-05-14T09:09:04.881Z","repository":{"id":37816398,"uuid":"261930197","full_name":"projectdiscovery/public-bugbounty-programs","owner":"projectdiscovery","description":"Community curated list of public bug bounty and responsible disclosure programs.  ","archived":false,"fork":false,"pushed_at":"2025-03-31T07:39:46.000Z","size":2600,"stargazers_count":1129,"open_issues_count":7,"forks_count":374,"subscribers_count":52,"default_branch":"main","last_synced_at":"2025-04-13T03:59:10.746Z","etag":null,"topics":["bugbounty","bugbounty-program","chaos","hacktoberfest","reconnaissance"],"latest_commit_sha":null,"homepage":"https://chaos.projectdiscovery.io","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/projectdiscovery.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-05-07T02:28:45.000Z","updated_at":"2025-04-12T06:40:23.000Z","dependencies_parsed_at":"2023-11-27T09:56:34.912Z","dependency_job_id":"cc143d37-e2cb-49d8-ac5d-8642919a4392","html_url":"https://github.com/projectdiscovery/public-bugbounty-programs","commit_stats":{"total_commits":1183,"total_committers":245,"mean_commits":4.828571428571428,"dds":0.6863905325443787,"last_synced_commit":"b5290affe092de9631b6f15b4d878c80716c752c"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/projectdiscovery%2Fpublic-bugbounty-programs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/projectdiscovery%2Fpublic-bugbounty-programs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/projectdiscovery%2Fpublic-bugbounty-programs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/projectdiscovery%2Fpublic-bugbounty-programs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/projectdiscovery","download_url":"https://codeload.github.com/projectdiscovery/public-bugbounty-programs/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248661706,"owners_count":21141450,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bugbounty","bugbounty-program","chaos","hacktoberfest","reconnaissance"],"created_at":"2024-08-04T17:01:29.069Z","updated_at":"2025-04-13T03:59:15.891Z","avatar_url":"https://github.com/projectdiscovery.png","language":"Go","funding_links":[],"categories":["Go","Others (1002)","Others","bugbounty"],"sub_categories":[],"readme":"\u003ch1 align=\"center\"\u003e Public BugBounty Programs \u003c/h1\u003e\n\n\n\u003ch4 align=\"center\"\u003e Community curated list of public bug bounty and responsible disclosure programs. \u003c/h4\u003e\n\n\u003cp align=\"center\"\u003e\n\u003ca href=\"https://opensource.org/licenses/MIT\"\u003e\u003cimg src=\"https://img.shields.io/badge/license-MIT-_red.svg\"\u003e\u003c/a\u003e\n\u003ca href=\"https://github.com/projectdiscovery/public-bugbounty-programs/issues\"\u003e\u003cimg src=\"https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat\"\u003e\u003c/a\u003e\n\u003ca href=\"https://twitter.com/pdiscoveryio\"\u003e\u003cimg src=\"https://img.shields.io/twitter/follow/pdiscoveryio.svg?logo=twitter\"\u003e\u003c/a\u003e\n\u003ca href=\"https://discord.gg/projectdiscovery\"\u003e\u003cimg src=\"https://img.shields.io/discord/695645237418131507.svg?logo=discord\"\u003e\u003c/a\u003e\n\u003c/p\u003e\n\nThe [chaos-bugbounty-list.json](chaos-bugbounty-list.json) file serves as the central management system for the public bug bounty programs displayed on [chaos.projectdiscovery.io](https://chaos.projectdiscovery.io/). We welcome your contributions to this list. If there are specific programs for which you'd like to see reconnaissance data, please submit a pull request.\n\nWe are currently accepting submissions in JSON format. Here's an example of the structure we require:\n\n```json\n{\n   \"name\":\"HackerOne\",\n   \"url\":\"https://hackerone.com/security\",\n   \"bounty\": true,\n   \"swag\": true,\n   \"domains\":[\n      \"hackerone.com\",\n      \"hackerone.net\",\n      \"hacker101.com\",\n      \"hackerone-ext-content.com\"\n   ]\n}\n```\n\nYour contributions will help us to continually improve and expand the range of public bug bounty programs we feature.\n\n\n💬 Discussions\n-----\n\nFor any inquiries, suggestions, or topics you'd like to discuss, we encourage you to initiate a \"Discussion\" using our [GitHub Discussions](https://github.com/projectdiscovery/public-bugbounty-programs/discussions) platform.\n\n👨‍💻 Community\n-----\n\nWe invite you to join our [Discord Community](https://discord.gg/projectdiscovery) for more interactive discussions.  \nStay updated with our latest news and activities by following [ProjectDiscovery](https://twitter.com/pdiscoveryio) on Twitter.  \nFor direct communication, feel free to reach us at [contact@projectdiscovery.io](mailto:contact@projectdiscovery.io).\n\n📋 Guidelines\n-----\n- Please note that only domain name values are accepted in the `domains` field.\n- We do not support wildcard inputs such as `*.tld` or `*.tld.*`.\n- The **domains** field should include TLD names associated with the target program, not necessarily based on the scope of the program.\n- Subdomains are populated using our dataset **Passive API**\n\n📌 References\n-----\n\n- https://github.com/arkadiyt/bounty-targets-data\n- https://github.com/disclose/diodb/blob/master/program-list.json\n- https://firebounty.com\n\nWe greatly appreciate your contributions and your efforts in keeping our community dynamic and engaging. :heart:","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fprojectdiscovery%2Fpublic-bugbounty-programs","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fprojectdiscovery%2Fpublic-bugbounty-programs","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fprojectdiscovery%2Fpublic-bugbounty-programs/lists"}