# Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd (`getascraper/bug-bounty-finder`) Actor Find every public bug bounty and VDP program in one run. Queries HackerOne directory, Bugcrowd engagements, and security.txt files. 22 fields per program: min/max bounty, currency, resolved reports, policy snippet, contacts, expiry. $3.99 per 1,000 results. - **URL**: https://apify.com/getascraper/bug-bounty-finder.md - **Developed by:** [GetAScraper](https://apify.com/getascraper) (community) - **Categories:** Automation, Developer tools, Lead generation - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks - **User rating**: No ratings yet ## Pricing from $3.99 / 1,000 programs This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/platform/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd **22 fields per program. 3 platforms in 1 run. $0.00399 per record. 100-record free trial.** Find every public bug bounty and VDP program in seconds. Queries HackerOne directory, Bugcrowd engagements, and /.well-known/security.txt files in parallel. ### What does bug bounty finder do? The bug bounty finder is a real-time, lightweight recon utility that searches and aggregates public vulnerability disclosure programs and responsible disclosure contacts across multiple platforms. It queries HackerOne, Bugcrowd, and standardized security.txt files in a single unified run. Returns a completely flat, spreadsheet-friendly dataset with 22 fields per row: min and max bounty, currency, resolved report count, policy snippet, security.txt contact, encryption URL, expiration date, and more. Running on the Apify platform gives you rotatable proxies to bypass anti-bot blocks, scheduled automated scanning, real-time Slack and webhook integrations, and a warm standby HTTP API server for instantaneous queries. ### Why use bug bounty finder? This actor is ideal for cybersecurity professionals, penetration testers, security researchers, and enterprise threat intelligence teams: * **Lead generation**: Instantly find high-paying bug bounty programs and active security policies. * **Asset discovery**: Map target brand terms and find their legal responsible disclosure pathways. * **Vulnerability disclosure compliance**: Automatically locate security contacts (via security.txt) for responsible reporting, preventing risky public disclosures. * **Tabular exports**: Download raw data directly into clean Excel, CSV, or Google Sheets layouts without complex JSON manipulation. ### How to use bug bounty finder? To run this scraper: 1. Input a target query (such as a brand keyword like `uber` or a full domain like `google.com`). 2. Select which security platforms you want to query (HackerOne, Bugcrowd, and/or standard security.txt). 3. Set your maximum limits and enable Apify Proxy to ensure continuous scanning. 4. Run the Actor and download your flat dataset directly in your preferred file format. ### Input parameters The input parameters are simple and grouped into clear, non-technical sections: | Field name | Type | Required | Default | Description | | :--- | :--- | :--- | :--- | :--- | | `query` | string | Yes | `uber` | The keyword, brand name, or domain name to search for. | | `platforms` | array | Yes | `["hackerone", "bugcrowd", "security_txt"]` | The list of bug bounty databases or standard paths to search. | | `onlyWithBounty` | boolean | Yes | `false` | If set to true, only programs offering monetary rewards are saved. | | `maxItems` | integer | Yes | `100` | The maximum number of records to retrieve during the run. | | `proxyConfiguration` | object | Yes | `{"useApifyProxy": true}` | Enables proxy network routing to bypass rate limiting. | ### Output dataset structure Every result is written to the dataset using a completely flat, spreadsheet-friendly database layout. Nested JSON objects and lists have been fully removed. #### Example program result ```json { "record_type": "program", "query": "uber", "platform": "hackerone", "program_name": "Uber", "url": "https://hackerone.com/uber", "min_bounty": 100, "max_bounty": 15000, "currency": "USD", "offers_bounties": true, "resolved_reports": 2450, "policy_snippet": "Uber's official vulnerability disclosure program on HackerOne.", "engagement_type": "public", "scraped_at": "2026-06-20T10:00:00.000Z" } ```` #### Example security contact result ```json { "record_type": "security_txt", "query": "uber", "domain": "uber.com", "contact": "mailto:security@uber.com, https://uber.com/security", "policy_url": "https://uber.com/legal/security-policy", "encryption_key": "https://uber.com/pgp-key.asc", "hiring_url": "https://uber.com/careers", "acknowledgments_url": "https://uber.com/security/hall-of-fame", "expires_at": "Thu, 31 Dec 2026 23:59:59 GMT", "raw_text": "Contact: mailto:security@uber.com\nPolicy: https://uber.com/legal/security-policy", "scraped_at": "2026-06-20T10:01:00.000Z" } ``` ### Mapped data fields The output dataset includes these clear, un-nested columns: | Column name | Data type | Description | | :--- | :--- | :--- | | `record_type` | string | The category of record, which can be a program, security\_txt, or summary. | | `query` | string | The search query that triggered this finding. | | `domain` | string | The target domain name (specific to security.txt). | | `platform` | string | The source directory (hackerone, bugcrowd, or security\_txt). | | `program_name` | string | The official title of the vulnerability disclosure program. | | `url` | string | The direct link to the program's policy details page. | | `min_bounty` | number | The minimum cash reward paid out by the program (in USD). | | `max_bounty` | number | The maximum cash reward paid out by the program (in USD). | | `currency` | string | The payment currency, defaulting to USD. | | `offers_bounties` | boolean | True if the program offers monetary rewards. | | `resolved_reports` | number | The total count of resolved reports within the directory. | | `policy_snippet` | string | A short preview of the program guidelines. | | `engagement_type` | string | Indicates whether the program is public or private. | | `contact` | string | A comma-separated list of parsed contact paths from security.txt. | | `policy_url` | string | The link to the target's vulnerability disclosure policy. | | `encryption_key` | string | The link to the target's public PGP/encryption key. | | `hiring_url` | string | The link to the target's security jobs page. | | `acknowledgments_url` | string | The link to the target's hall of fame or credit page. | | `expires_at` | string | The expiration date of the security.txt file. | | `scraped_at` | string | The exact timestamp when this information was extracted. | ### Pricing and cost estimation How much does it cost to find bug bounty programs? - This Actor is priced at a competitive flat rate of **$3.99 per 1,000 results** (equivalent to just $0.00399 per row of data). - Because the Actor runs 100% browser-less, it consumes minimal compute and memory. A typical run of 100 results on a 512 MB container completes in less than 3 seconds, resulting in nearly zero platform platform overhead fees. ### Tips and optimization - **Keyword selection**: For broad results across directory platforms, use general brand terms (such as `meta` or `microsoft`). - **Domain queries**: If you specifically want to parse security.txt files, input a full domain name (such as `github.com`) to query standard security paths directly. - **Limit your runs**: Use the `maxItems` setting to control your cost and restrict data sizes to what is necessary. ### Support, disclaimers, and feedback This tool aggregates publicly accessible disclosure directories and open-standard security.txt endpoints. It does not perform active vulnerability scanning or exploit attempts. It strictly queries standard directories and public paths. For bug reports, feature requests, or questions, please navigate to the Issues tab on the Apify platform. Custom scraping setups and custom database integrations are also available upon request. # Actor input Schema ## `query` (type: `string`): The brand or domain name to search for (for example: uber, airbnb, or leave blank to search all public programs). ## `platforms` (type: `array`): Select which platforms to query for vulnerability disclosure programs. ## `onlyWithBounty` (type: `boolean`): If enabled, only programs offering monetary bug bounty rewards will be included. ## `maxItems` (type: `integer`): The maximum number of vulnerability disclosure programs or security contacts to retrieve. ## `proxyConfiguration` (type: `object`): Enable proxies to avoid being blocked by security firewalls. ## Actor input object example ```json { "query": "uber", "platforms": [ "hackerone", "bugcrowd", "security_txt" ], "onlyWithBounty": false, "maxItems": 100, "proxyConfiguration": { "useApifyProxy": true } } ``` # Actor output Schema ## `results` (type: `string`): No description # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "query": "uber", "platforms": [ "hackerone", "bugcrowd", "security_txt" ], "proxyConfiguration": { "useApifyProxy": true } }; // Run the Actor and wait for it to finish const run = await client.actor("getascraper/bug-bounty-finder").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "query": "uber", "platforms": [ "hackerone", "bugcrowd", "security_txt", ], "proxyConfiguration": { "useApifyProxy": True }, } # Run the Actor and wait for it to finish run = client.actor("getascraper/bug-bounty-finder").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "query": "uber", "platforms": [ "hackerone", "bugcrowd", "security_txt" ], "proxyConfiguration": { "useApifyProxy": true } }' | apify call getascraper/bug-bounty-finder --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=getascraper/bug-bounty-finder", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd", "description": "Find every public bug bounty and VDP program in one run. Queries HackerOne directory, Bugcrowd engagements, and security.txt files. 22 fields per program: min/max bounty, currency, resolved reports, policy snippet, contacts, expiry. $3.99 per 1,000 results.", "version": "0.1", "x-build-id": "StTNPhB7p61jlX5da" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/getascraper~bug-bounty-finder/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-getascraper-bug-bounty-finder", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/getascraper~bug-bounty-finder/runs": { "post": { "operationId": "runs-sync-getascraper-bug-bounty-finder", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/getascraper~bug-bounty-finder/run-sync": { "post": { "operationId": "run-sync-getascraper-bug-bounty-finder", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "query", "platforms", "maxItems" ], "properties": { "query": { "title": "Search Query", "type": "string", "description": "The brand or domain name to search for (for example: uber, airbnb, or leave blank to search all public programs).", "default": "uber" }, "platforms": { "title": "Bounty Platforms", "type": "array", "description": "Select which platforms to query for vulnerability disclosure programs.", "default": [ "hackerone", "bugcrowd", "security_txt" ] }, "onlyWithBounty": { "title": "Only Programs with Cash Rewards", "type": "boolean", "description": "If enabled, only programs offering monetary bug bounty rewards will be included.", "default": false }, "maxItems": { "title": "Maximum Results", "minimum": 1, "type": "integer", "description": "The maximum number of vulnerability disclosure programs or security contacts to retrieve.", "default": 100 }, "proxyConfiguration": { "title": "Proxy Configuration", "type": "object", "description": "Enable proxies to avoid being blocked by security firewalls.", "default": { "useApifyProxy": true } } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```