About

Bug Bounty Directory is a list of bug bounty programs that are not listed HackerOne or Bugcrowd. The goal is to make it easier for ethical hackers to discover new opportunities by consolidating lesser-known bug bounty programs in one place.

Why Bug Bounty Directory?

The main reason for creating this directory is that platforms like HackerOne, Bugcrowd, and Intigriti are crowded with hackers, making competition intense. Meanwhile, there are bug bounty programs that operate outside these platforms, but finding them requires extensive searching—often using Google dorks. However, Google sometimes blocks users or presents CAPTCHAs, making the process frustrating.

To solve this problem, we gathered all these programs by manually searching for them using Google dorks and compiled them into a single, easily accessible directory. This saves time for security researchers and ensures they have access to new and unique opportunities without the hassle of extensive searching.

Contributing to Our Blog

We showcase blogs from bug bounty hunters who share insights, tips, and experiences. If you would like your blog to be on the website, please email the blog or its link to [email protected]

Submitting or Removing a Program

If you are the owner of a bug bounty program and would like it removed from our directory, please email us at [email protected] and If you would like to have your bug bounty program listed, simply reach out to us at the same email address, and we will be happy to add it.

About the creator

I myself am a Bug Bounty Hunter and have been doing it full-time for couple of years, with occasional involvement over the years as well. BugBounty Directory was created out of my passion for cybersecurity and a desire to help fellow bounty hunters easily discover and engage with bug bounty programs.