Pricing

Pay per usage

Bug Bounty Recon Scanner

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Altuserap

Actor stats

Bookmarked

Total users

Monthly active users

a month ago

Last modified

Categories

Automation

Integrations

You can access the Bug Bounty Recon Scanner programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

{
  "openapi": "3.0.1",
  "info": {
    "version": "0.1",
    "x-build-id": "YK3OMnlRLKIY9A3fZ"
  },
  "servers": [
    {
      "url": "https://api.apify.com/v2"
    }
  ],
  "paths": {
    "/acts/altuserap~bug-bounty-recon-scanner/run-sync-get-dataset-items": {
      "post": {
        "operationId": "run-sync-get-dataset-items-altuserap-bug-bounty-recon-scanner",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    },
    "/acts/altuserap~bug-bounty-recon-scanner/runs": {
      "post": {
        "operationId": "runs-sync-altuserap-bug-bounty-recon-scanner",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor and returns information about the initiated run in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/runsResponseSchema"
                }
              }
            }
          }
        }
      }
    },
    "/acts/altuserap~bug-bounty-recon-scanner/run-sync": {
      "post": {
        "operationId": "run-sync-altuserap-bug-bounty-recon-scanner",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "inputSchema": {
        "type": "object",
        "required": [
          "startUrls"
        ],
        "properties": {
          "startUrls": {
            "title": "Start URLs / domains",
            "type": "array",
            "description": "List of starting URLs or domains to scan for vulnerabilities.",
            "items": {
              "type": "object",
              "properties": {
                "url": {
                  "title": "URL",
                  "type": "string",
                  "description": "Target URL or domain to scan"
                }
              },
              "required": [
                "url"
              ],
              "additionalProperties": false
            }
          },
          "adminPaths": {
            "title": "Admin / sensitive paths",
            "type": "array",
            "description": "Select common admin/sensitive paths to probe (multi-select).",
            "items": {
              "type": "string",
              "enumSuggestedValues": [
                "/admin",
                "/admin/login",
                "/administrator",
                "/wp-admin",
                "/wp-login.php",
                "/login",
                "/signin",
                "/auth",
                "/dashboard",
                "/panel",
                "/cpanel",
                "/controlpanel",
                "/manage",
                "/backend",
                "/.env",
                "/config",
                "/config.json",
                "/backup",
                "/backup.sql",
                "/robots.txt",
                "/sitemap.xml",
                "/.git/HEAD",
                "/db.sql"
              ]
            },
            "default": [
              "/admin",
              "/admin/login",
              "/wp-admin",
              "/login"
            ]
          },
          "maxDepth": {
            "title": "Max crawl depth",
            "minimum": 0,
            "maximum": 5,
            "type": "integer",
            "description": "Maximum link levels to follow from start URLs.",
            "default": 2
          },
          "maxRequests": {
            "title": "Max requests",
            "minimum": 1,
            "maximum": 10000,
            "type": "integer",
            "description": "Total HTTP requests limit per run.",
            "default": 500
          },
          "checkXSS": {
            "title": "Enable XSS check",
            "type": "boolean",
            "description": "Test basic XSS reflection on forms (non-intrusive).",
            "default": true
          },
          "proxyConfiguration": {
            "title": "Proxy settings",
            "type": "object",
            "description": "Proxy configuration for WAF bypass and geo-targeting."
          }
        }
      },
      "runsResponseSchema": {
        "type": "object",
        "properties": {
          "data": {
            "type": "object",
            "properties": {
              "id": {
                "type": "string"
              },
              "actId": {
                "type": "string"
              },
              "userId": {
                "type": "string"
              },
              "startedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "finishedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "status": {
                "type": "string",
                "example": "READY"
              },
              "meta": {
                "type": "object",
                "properties": {
                  "origin": {
                    "type": "string",
                    "example": "API"
                  },
                  "userAgent": {
                    "type": "string"
                  }
                }
              },
              "stats": {
                "type": "object",
                "properties": {
                  "inputBodyLen": {
                    "type": "integer",
                    "example": 2000
                  },
                  "rebootCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "restartCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "resurrectCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "computeUnits": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "options": {
                "type": "object",
                "properties": {
                  "build": {
                    "type": "string",
                    "example": "latest"
                  },
                  "timeoutSecs": {
                    "type": "integer",
                    "example": 300
                  },
                  "memoryMbytes": {
                    "type": "integer",
                    "example": 1024
                  },
                  "diskMbytes": {
                    "type": "integer",
                    "example": 2048
                  }
                }
              },
              "buildId": {
                "type": "string"
              },
              "defaultKeyValueStoreId": {
                "type": "string"
              },
              "defaultDatasetId": {
                "type": "string"
              },
              "defaultRequestQueueId": {
                "type": "string"
              },
              "buildNumber": {
                "type": "string",
                "example": "1.0.0"
              },
              "containerUrl": {
                "type": "string"
              },
              "usage": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "integer",
                    "example": 1
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "usageTotalUsd": {
                "type": "number",
                "example": 0.00005
              },
              "usageUsd": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "number",
                    "example": 0.00005
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}

Bug Bounty Recon Scanner OpenAPI definition

OpenAPI is a standard for designing and describing RESTful APIs, allowing developers to define API structure, endpoints, and data formats in a machine-readable way. It simplifies API development, integration, and documentation.

OpenAPI is effective when used with AI agents and GPTs by standardizing how these systems interact with various APIs, for reliable integrations and efficient communication.

By defining machine-readable API specifications, OpenAPI allows AI models like GPTs to understand and use varied data sources, improving accuracy. This accelerates development, reduces errors, and provides context-aware responses, making OpenAPI a core component for AI applications.

You can download the OpenAPI definitions for Bug Bounty Recon Scanner from the options below:

OpenAPI.json

If you’d like to learn more about how OpenAPI powers GPTs, read our blog post.

You can also check out our other API clients:

Bug Bounty Recon Scanner API in Python

Bug Bounty Recon Scanner API in JavaScript

Bug Bounty Recon Scanner API through CLI

Bug Bounty Recon Scanner API

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

anshumanatrey/bug-bounty-finder

Find every public bug bounty / responsible disclosure program for a target. Aggregates HackerOne directory + Bugcrowd engagements + target /.well-known/security.txt. Daily-use lookup for bug bounty hunters — know if a target has a program before hunting.

Anshuman Atrey

Bug Bounty Programs Scraper

maximedupre/bug-bounty-programs

Find public bug-bounty and vulnerability-disclosure programs from selected sources. Search by keyword, company or domain, or program handle, then save normalized records with public links and available rewards, scope, and status.

Maxime Dupré

Bugcrowd Bug Bounty Programs Scraper

parseforge/bugcrowd-programs-scraper

Collects public Bugcrowd bug bounty and vulnerability disclosure programs. Each row returns the program name, reward range, submission state, and target category.

ParseForge

Bug Bounty Program Finder

thescrapelab/bug-bounty-program-finder

Find public bug bounty programs, vulnerability disclosure programs, security.txt contacts, rewards, scope, safe harbor notes, and disclosure policy URLs, then output normalized security program records for research, lead generation, and monitoring.

Inus Grobler

Security Disclosure Finder

toronto_777/security-disclosure-finder

Find public security.txt, responsible disclosure, bug bounty, contact, and policy signals for domains.

Steven Feng

Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd

getascraper/bug-bounty-finder

Find every public bug bounty and VDP program in one run. Queries HackerOne directory, Bugcrowd engagements, and security.txt files. 22 fields per program: min/max bounty, currency, resolved reports, policy snippet, contacts, expiry. $3.99 per 1,000 results.

GetAScraper

Automated reconnaissance actor for bug bounty hunters

wonderful_beluga/automated-reconnaissance-actor-for-bug-bounty-hunters

This Apify actor automates bug bounty recon by scraping the Wayback Machine and GitHub for legacy attack surfaces. It extracts historical URLs, public code, and deprecated files, parsing them to uncover hidden subdomains and forgotten API endpoints. The findings are saved into structured JSON files.

Zaher el siddik

HackenProof Bug Bounty & Audit Program Scraper

tactful_anvil/hackenproof-bug-bounty-scraper

Scrape every HackenProof bug bounty and audit program: max bounty, total paid out to researchers (payout proof), submitted-report count (competition), triage flag, project types, languages and platforms. Paid-per-report + 0-100 opportunity score rank 300+ programs. HTTP-only, no login.

Mr Zack

GitHub Bounty Scanner

mranderson323/github-bounty-scanner

Scans GitHub for open developer bounties from Algora and bounty-labeled issues. Returns structured results with dollar amounts, repos, and required skills. Priced at $0.05 per bounty found.

Jeff

Immunefi Bug Bounty & Audit Competition Scraper

tactful_anvil/immunefi-bug-bounty-audit-competition-scraper

Scrape every Immunefi bug bounty program and audit competition: max bounty, rewards pool, vault balance, KYC / proof-of-concept / pay-to-submit friction, ecosystems and languages. Friction and opportunity scores rank 240+ programs by what is worth hunting. HTTP-only, no login.

Mr Zack