Pricing

$5.00 / 1,000 bounty records

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

Find every public bug bounty / responsible disclosure program for a target. Aggregates HackerOne directory + Bugcrowd engagements + target /.well-known/security.txt. Daily-use lookup for bug bounty hunters — know if a target has a program before hunting.

Pricing

$5.00 / 1,000 bounty records

Rating

0.0

(0)

Developer

Anshuman Atrey

Actor stats

Bookmarked

Total users

Monthly active users

a day ago

Last modified

Categories

Developer tools

Automation

You can access the Bug Bounty Finder - HackerOne + Bugcrowd + security.txt programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = {
9    "query": "shopify",
10    "sources": [
11        "hackerone",
12        "bugcrowd",
13        "security_txt",
14    ],
15}
16
17# Run the Actor and wait for it to finish
18run = client.actor("anshumanatrey/bug-bounty-finder").call(run_input=run_input)
19
20# Fetch and print Actor results from the run's dataset (if there are any)
21print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
22for item in client.dataset(run["defaultDatasetId"]).iterate_items():
23    print(item)
24
25# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

Bug Bounty Finder — HackerOne, Bugcrowd, security.txt API in Python

The Apify API client for Python is the official library that allows you to use Bug Bounty Finder - HackerOne + Bugcrowd + security.txt API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt API in JavaScript

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt API through CLI

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt OpenAPI definition

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt API

Bug Bounty Recon Scanner

iamuendo/Bug-Bounty-Recon-Scanner

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Isaac Muendo

Hackerone Scraper

filakovsky/hackerone-scraper

This Actor scrapes publicly disclosed vulnerability reports from the HackerOne Hacktivity feed - the industry's largest collection of real-world bug bounty disclosures.

Daniel Filakovsky

Subdomain Finder

happitap/subdomain-finder

Subdomain Finder is a high-speed intelligence tool that uncovers subdomains for any target domain using Certificate Transparency (CT) logs. Unlike traditional brute-force tools, it requires no heavy traffic and provides results in seconds.

HappiTap

Real Subdomain Finder

onescales/real-subdomain-finder

Discover every subdomain for any domain. Queries 40+ OSINT sources including cert transparency, DNS archives & web scanners. Results enriched with DNS validation, HTTP probing, and subdomain takeover detection. Simple Subdomain Lookup that works!

One Scales

5.0

(2)

Subdomain Finder & Recon Tool

andok/subdomain-finder

Discover subdomains for any target via passive OSINT sources. Ideal for security bug bounties and attack surface mapping.

Andok

🔍 Subdomain Finder & CT Log Scraper

taroyamada/subdomain-finder

Map website architectures by extracting subdomains from public Certificate Transparency logs to find unlinked staging sites.

太郎山田

Subdomain Finder - Discover Every Subdomain Of A Domain

thirdwatch/subdomain-finder

Discover every subdomain for any apex domain. Merges 4 sources: certificate transparency (crt.sh), HackerTarget, RapidDNS, plus DNS bruteforcing of common names. Verifies each is live via DNS + HTTP probe.

Thirdwatch

Stack Overflow & StackExchange Search

ryanclinton/stackexchange-search

Search Stack Overflow and the StackExchange network for questions using the official StackExchange API v2.3. Extract questions with scores, answer counts, view counts, tags, and author details from nine popular Q&A communities.

Ryan Clinton

Airbnb Address Finder

kawsar/airbnb-address-finder

Airbnb address finder that looks up the real street address of any listing URL. Returns house number, road, city, postcode, and country as clean, separate fields. Works in bulk across any country.

Kawsar

Real Estate Aggregator

tri_angle/real-estate-aggregator

Multi-source scraper for real estate data. Supports rent and sale listings, deduplication, and consistent output from Zillow, Realtor, Zumper, Apartments.com, and Rightmove.