We protect
open source software.
Get paid to find & fix security vulnerabilities in open source software and be recognised for protecting the world.
90% of users
Got their first CVE
1.7 CVEs
Avg. per user
3.6 bounties per user
Avg. monthly winnings
Protecting 1000+ repos
Protecting open source software
The world's largest bug bounty programme
Reverse Bounties
Supporting those who find vulnerabilities, as well as those who fix them.
Submit a vulnerability
Global Recognition
All valid reports are eligible for a CVE and are made into public write-ups.
Browse the community’s latest finds
Millions of targets
With an almost unlimited scope, you won't have to worry about duplicates again!
Find a target
Funding open source security
Working with maintainers to support their projects
Universal
For all open source software
$250 monthly prize pot
Paid by huntr
Reverse bounties
Promoted repo
Partner
For registered maintainers
$500 monthly prize pot
Paid by huntr
Reverse bounties
Promoted repo
Commercial
For enterprise backed OSS
Unlimited prize pot
Paid by enterprise
Triage support
Promoted repo