HackerOne Programs Scraper

Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd

getascraper/bug-bounty-finder

Find every public bug bounty and VDP program in one run. Queries HackerOne directory, Bugcrowd engagements, and security.txt files. 22 fields per program: min/max bounty, currency, resolved reports, policy snippet, contacts, expiry. $3.99 per 1,000 results.

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

anshumanatrey/bug-bounty-finder

Find every public bug bounty / responsible disclosure program for a target. Aggregates HackerOne directory + Bugcrowd engagements + target /.well-known/security.txt. Daily-use lookup for bug bounty hunters — know if a target has a program before hunting.

This Actor scrapes publicly disclosed vulnerability reports from the HackerOne Hacktivity feed - the industry's largest collection of real-world bug bounty disclosures.

Bug Bounty Program Finder

thescrapelab/bug-bounty-program-finder

Find public bug bounty programs, vulnerability disclosure programs, security.txt contacts, rewards, scope, safe harbor notes, and disclosure policy URLs.

Bugcrowd Bug Bounty Programs Scraper

parseforge/bugcrowd-programs-scraper

Track public bug bounty programs listed on Bugcrowd. Each program returns the name, tagline, reward summary, industry, access status, scope rank, logo, and program link. Useful for security researchers picking targets, watching new programs, and mapping the bounty market.

Scans GitHub for open developer bounties from Algora and bounty-labeled issues. Returns structured results with dollar amounts, repos, and required skills. Priced at $0.05 per bounty found.

Bug Bounty Recon Scanner

p4ck37pun5/Bug-Bounty-Recon-Scanner

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Automated reconnaissance actor for bug bounty hunters

wonderful_beluga/automated-reconnaissance-actor-for-bug-bounty-hunters

This Apify actor automates bug bounty recon by scraping the Wayback Machine and GitHub for legacy attack surfaces. It extracts historical URLs, public code, and deprecated files, parsing them to uncover hidden subdomains and forgotten API endpoints. The findings are saved into structured JSON files.

Find actionable GitHub bounty and paid issue leads before they get buried in noisy search results.

Finds legitimate OSS bounty and agent-market opportunities, filters payout blockers, and ranks next actions.