Real targets. Fair calls. Reputation that travels.
Hunt authorized programs with clear scope, submit evidence-backed reports, and get transparent severity and bounty decisions. From your first lab to your first critical and every bounty after.
Illustrative replay of a hunt: confirm the program is in scope, run recon, find an access-control flaw, submit a report, get it validated and paid, and get credited in the program's Hall of Fame.
- Live programs
- 8
- Ranked researchers
- 12
- Top critical bounty
- $15,000
- Fees to researchers
- $0
- @r00tcause$248,900
- @nullbyte$212,400
- @shibateam$190,050
- @parseltongue$164,300
- @ghostpackets$148,700
- @hexhunter$131,200
- @sigsegv$127,500
- @quietloop$104,900
- @zerofox$98,300
- @saltcrash$89,600
Built as a growth engine for legitimate researchers.
Six things the platform does so your time goes into finding bugs — not arguing about scope, chasing payouts or starting your reputation over on every program.
Real, clear targets
Search by company, technology and vulnerability type. Know exactly what is authorized before you send a request.
Structured reports
A guided form for title, asset, type, steps, impact and evidence — simple for first-timers, ready for triage.
Fair rewards
Transparent severity and bounty decisions, visible payout status, and a two-sided rating that holds companies accountable too.
Verified reputation
Valid findings, severity mix, acceptance rate and skill badges build a profile you carry across every program.
Learn & labs
Progressive labs and CTF challenges build verified skills, then move you straight into live programs.
Appeals & disputes
Every decision is explained and appealable, with a clear dispute workflow when you disagree.
From first lab to Hall of Fame.
Learn
Build skills with hands-on labs across web, API, auth and cloud. Unlocks: Verified skill badge.
Open the labsHunt
Pick an in-scope program and test authorized targets. Unlocks: Authorized scope.
Browse programsReport
Submit a clear, evidence-backed report through the guided form. Unlocks: First Blood.
Submit a reportEarn
Get paid by severity and grow portable reputation. Unlocks: Hall of Fame.
See the Hall of Fame
What a finding is worth.
Every program publishes its table before you test. Severity sets the bounty and the reputation — a critical is worth twenty lows on the board.
Critical
RCE, auth bypass, mass data exposure
High
SSRF, stored XSS, privilege escalation
Medium
IDOR, CSRF on sensitive actions
Low
Reflected XSS, minor info disclosure
Climb the board.
Standings earned from valid findings, severity mix and acceptance rate. Every name below is a public profile you can open.
- Rank 1: @r00tcauseAPI & GraphQL183 valid · 27 critical
100% accepted · 9,801 rep$248,900 - Rank 2: @nullbyteAuthentication & sessions161 valid · 22 critical
100% accepted · 8,860 rep$212,400 - Rank 3: @shibateamMobile — Android143 valid · 19 critical
100% accepted · 8,180 rep$190,050 - Rank 4: @parseltongueCloud & infrastructure128 valid · 15 critical
100% accepted · 7,855 rep$164,300 - Rank 5: @ghostpacketsNetwork & protocols119 valid · 12 critical
100% accepted · 7,100 rep$148,700
Keep learning. Keep sharing. Keep hunting together.
Blog
All postsBug bounty talks
All talksNewsletter
The Zerohunt Dispatch — new programs, write-ups and payouts, every two weeks. No noise.
Community
Trade techniques, find collaborators and get help with a stuck target. Daily AMAs and help threads — real researchers, no gatekeeping.
Join the forumStarthunting.
Your reputation starts with your first valid finding.