A curated list of bug bounty programs, write-ups, and resources for security researchers and ethical hackers.
Awesome Bug Bounty is a curated open-source list of bug bounty programs, security write-ups, and educational resources for ethical hackers. It aggregates hundreds of programs from companies and platforms, along with blogs from top researchers, to help security professionals find opportunities and learn from real-world exploits.
Security researchers, ethical hackers, penetration testers, and developers interested in bug bounty hunting and vulnerability disclosure programs.
It saves time by centralizing scattered bug bounty information into a single, community-maintained resource, making it easier to discover programs and learn from experienced hunters' write-ups.
A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Lists hundreds of active bug bounty programs from major companies like Google, Facebook, and GitHub, as detailed in the 'Available Programs' section, saving researchers time in discovery.
Aggregates blogs and articles from top bug bounty hunters, such as Egor Homakov and Frans Rosén, providing real-world examples and methodologies for learning, as seen in the 'Write Ups & Authors' list.
Open-source and regularly updated through contributions, ensuring the list evolves with new programs and resources, mentioned in the project philosophy.
Links to major bug bounty platforms like HackerOne, Bugcrowd, and Intigriti, helping users quickly access where to participate, as listed under 'Platforms'.
The list is static and community-curated without automated checks, so programs might be inactive or links broken, requiring users to verify statuses independently.
Provides only links to external articles and guides without structured learning paths or original content, making it a starting point rather than a comprehensive educational tool.
Relies on manual pull requests for updates, which can lead to delays and inconsistencies compared to automated data aggregation services, as implied by the open-source nature.