# Bug Bounty Program Scope Tracker Scraper (`jungle_synthesizer/bug-bounty-program-scope-tracker-scraper`) Actor Unified, machine-readable feed of public bug-bounty program scopes across HackerOne, Bugcrowd, Intigriti and YesWeHack, normalized into in-scope/out-of-scope asset arrays with run-over-run scope-change detection. - **URL**: https://apify.com/jungle\_synthesizer/bug-bounty-program-scope-tracker-scraper.md - **Developed by:** [BowTiedRaccoon](https://apify.com/jungle_synthesizer) (community) - **Categories:** Developer tools, Automation - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks - **User rating**: No ratings yet ## Pricing Pay per event This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Since this Actor supports Apify Store discounts, the price gets lower the higher subscription plan you have. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js/docs.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python/docs.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## Bug Bounty Program Scope Tracker Scraper Scrape public bug-bounty program scopes from [HackerOne](https://hackerone.com), [Bugcrowd](https://bugcrowd.com), [Intigriti](https://www.intigriti.com), and [YesWeHack](https://yeswehack.com). Returns normalized in-scope and out-of-scope asset lists, bounty ranges, and response-time stats for roughly 800+ public programs across all four platforms, with run-over-run scope-change detection built in. --- ### Bug Bounty Program Scope Tracker Features - Unifies four platforms into one schema — no more juggling separate HackerOne, Bugcrowd, Intigriti, and YesWeHack exports. - Flags `scope_change_detected` on every record, comparing this run's in-scope/out-of-scope assets against the last time you ran the actor for that program. - Returns structured asset arrays, not prose. Each in-scope and out-of-scope entry carries its target, asset type, bounty eligibility, and any hunter instructions. - Filters to bounty-paying programs only with a single toggle. - Pure API scraping — no browser, no proxies, no anti-bot handling. It reads a public, daily-refreshed data aggregate. - Captures published bounty ranges where the platform discloses them — Bugcrowd (max only), Intigriti and YesWeHack (min and max). --- ### Who Uses Bug Bounty Scope Data? - **Security researchers** — build a personal target list filtered by asset type, payout range, or platform, instead of tab-hopping four separate program directories. - **ASM and attack-surface vendors** — seed asset-discovery pipelines with a machine-readable feed of what's actually in scope, refreshed on your schedule. - **Bug bounty triage teams** — monitor scope drift on programs you track, and get notified (via `scope_change_detected`) the moment a company adds or removes an asset. - **Security researchers doing due diligence** — check whether a target domain is currently in scope before spending time on it, or whether it moved to out-of-scope. --- ### How Bug Bounty Program Scope Tracker Works 1. Pick which platforms to include — HackerOne, Bugcrowd, Intigriti, YesWeHack, or any combination. 2. The actor fetches each platform's public scope aggregate and normalizes every program into one schema, regardless of how that platform structures its own scope data. 3. Each program's current in-scope/out-of-scope hash is compared against the value stored from your last run, so `scope_change_detected` tells you exactly which programs moved. 4. Results land in your dataset as one row per program, with `in_scope` and `out_of_scope` as arrays of JSON-string assets you can parse directly. --- ### Input ```json { "platforms": ["hackerone", "bugcrowd", "intigriti", "yeswehack"], "offersBountiesOnly": false, "maxItems": 15 } ```` | Field | Type | Default | Description | |-------|------|---------|-------------| | `platforms` | array | `["hackerone","bugcrowd","intigriti","yeswehack"]` | Which bug-bounty platforms to include in this run. | | `offersBountiesOnly` | boolean | `false` | When enabled, skip programs that don't pay bounties (swag-only / VDP-only programs). | | `maxItems` | integer | `15` | Maximum number of programs to return, across all selected platforms combined. Raise this to pull the full set — HackerOne alone runs 450+ public programs. | Restrict to a single platform: ```json { "platforms": ["hackerone"], "offersBountiesOnly": true, "maxItems": 100 } ``` *** ### Bug Bounty Program Scope Tracker Output Fields ```json { "platform": "hackerone", "program_handle": "agoda-public", "program_name": "Agoda Public", "program_url": "https://hackerone.com/agoda-public", "offers_bounties": true, "offers_swag": false, "managed_program": true, "bounty_min_usd": null, "bounty_max_usd": null, "average_time_to_first_response": "0", "average_time_to_bounty_awarded": null, "in_scope": [ "{\"target\":\"https://www.agoda.com/book/\",\"type\":\"URL\",\"eligible_for_bounty\":true,\"instruction\":null}" ], "out_of_scope": [], "asset_types": ["URL"], "policy_url": "https://hackerone.com/agoda-public", "launched_at": null, "scope_change_detected": true, "scraped_at": "2026-07-13T09:34:22.224Z" } ``` | Field | Type | Description | |-------|------|-------------| | `platform` | string | Source platform: `hackerone`, `bugcrowd`, `intigriti`, or `yeswehack`. | | `program_handle` | string | Program handle or slug on its platform. | | `program_name` | string | Program display name. | | `program_url` | string | Program page URL on its platform. | | `offers_bounties` | boolean | Whether the program pays monetary bounties. | | `offers_swag` | boolean | Whether the program offers swag rewards (HackerOne only; `null` on other platforms). | | `managed_program` | boolean | Whether the platform actively triages and manages the program. | | `bounty_min_usd` | number | Published minimum bounty, in the platform's native currency — not every platform is USD-denominated (Intigriti and YesWeHack often publish in EUR). | | `bounty_max_usd` | number | Published maximum bounty, same currency caveat as above. | | `average_time_to_first_response` | string | Average time to first program response, where published. | | `average_time_to_bounty_awarded` | string | Average time to bounty awarded, where published. | | `in_scope` | array of strings | In-scope assets. Each entry is a JSON string: `{target, type, eligible_for_bounty, instruction}`. | | `out_of_scope` | array of strings | Out-of-scope assets, same shape as `in_scope`. | | `asset_types` | array of strings | Distinct asset types in this program's scope — `url`, `wildcard`, `api`, `android`, `ios`, `cidr`, `source_code`, `other`, and platform-specific variants. | | `policy_url` | string | Program policy or detail page URL. | | `launched_at` | string | Program launch date, where published. | | `scope_change_detected` | boolean | `true` when this run's scope differs from the last run's stored snapshot for this program (or this is the first time you've scraped it). | | `scraped_at` | string | ISO 8601 timestamp this record was scraped. | *** ### FAQ #### How do I scrape bug bounty program scopes? Bug Bounty Program Scope Tracker Scraper reads the public [bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data) aggregate — a daily-refreshed, community-maintained mirror of every public HackerOne, Bugcrowd, Intigriti, and YesWeHack program's own scope pages. Run the actor with your preferred `platforms` filter and it returns one normalized row per program. #### How much does Bug Bounty Program Scope Tracker Scraper cost to run? It's billed per record on the standard Apify PPE model — a per-start fee plus a small per-record charge. There's no proxy or browser overhead, so cost stays low and predictable regardless of platform mix. #### What data can I get from bug bounty programs? In-scope and out-of-scope asset lists, bounty ranges (where published), response-time stats, and whether a program is actively managed or bounty-paying. It's the scope metadata programs publish, not target reconnaissance. #### Can I filter by platform? Yes. Pass any subset of `hackerone`, `bugcrowd`, `intigriti`, `yeswehack` in `platforms`. Omit the field and you get all four. #### Does Bug Bounty Program Scope Tracker Scraper need proxies? No. It reads a public GitHub-hosted JSON aggregate, not the platforms directly — no proxy, no browser, no anti-bot handling required. #### How does scope-change detection work? Bug Bounty Program Scope Tracker Scraper hashes each program's normalized in-scope/out-of-scope arrays and compares that hash against the value stored from your previous run. If it's different (or this is the first run), `scope_change_detected` comes back `true`. *** ### Need More Features? Need custom fields, filters, or a different target site? [File an issue](https://console.apify.com/actors/issues) or get in touch. ### Why Use Bug Bounty Program Scope Tracker Scraper? - **Four platforms, one schema** — HackerOne, Bugcrowd, Intigriti, and YesWeHack normalized into the same fields, so you're not writing four parsers. - **Built-in scope-change detection** — every record tells you whether that program's scope moved since your last run, which is the one thing none of the single-platform alternatives track. - **Cheap and fast** — no browser, no proxies, just a structured public data aggregate turned into clean rows. # Actor input Schema ## `sp_intended_usage` (type: `string`): Please describe how you plan to use the data extracted by this crawler. ## `sp_improvement_suggestions` (type: `string`): Provide any feedback or suggestions for improvements. ## `sp_contact` (type: `string`): Provide your email address so we can get in touch with you. ## `platforms` (type: `array`): Which bug-bounty platforms to include in this run. ## `offersBountiesOnly` (type: `boolean`): When enabled, skip programs that don't pay bounties (swag-only / VDP-only). ## `maxItems` (type: `integer`): Maximum number of programs to return (across all selected platforms combined). ## Actor input object example ```json { "sp_intended_usage": "Describe your intended use...", "sp_improvement_suggestions": "Share your suggestions here...", "sp_contact": "Share your email here...", "platforms": [ "hackerone", "bugcrowd", "intigriti", "yeswehack" ], "offersBountiesOnly": false, "maxItems": 15 } ``` # Actor output Schema ## `results` (type: `string`): No description # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "sp_intended_usage": "Describe your intended use...", "sp_improvement_suggestions": "Share your suggestions here...", "sp_contact": "Share your email here...", "platforms": [ "hackerone", "bugcrowd", "intigriti", "yeswehack" ], "maxItems": 15 }; // Run the Actor and wait for it to finish const run = await client.actor("jungle_synthesizer/bug-bounty-program-scope-tracker-scraper").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "sp_intended_usage": "Describe your intended use...", "sp_improvement_suggestions": "Share your suggestions here...", "sp_contact": "Share your email here...", "platforms": [ "hackerone", "bugcrowd", "intigriti", "yeswehack", ], "maxItems": 15, } # Run the Actor and wait for it to finish run = client.actor("jungle_synthesizer/bug-bounty-program-scope-tracker-scraper").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "sp_intended_usage": "Describe your intended use...", "sp_improvement_suggestions": "Share your suggestions here...", "sp_contact": "Share your email here...", "platforms": [ "hackerone", "bugcrowd", "intigriti", "yeswehack" ], "maxItems": 15 }' | apify call jungle_synthesizer/bug-bounty-program-scope-tracker-scraper --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=jungle_synthesizer/bug-bounty-program-scope-tracker-scraper", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "Bug Bounty Program Scope Tracker Scraper", "description": "Unified, machine-readable feed of public bug-bounty program scopes across HackerOne, Bugcrowd, Intigriti and YesWeHack, normalized into in-scope/out-of-scope asset arrays with run-over-run scope-change detection.", "version": "0.1", "x-build-id": "49xU8BQdRKW7srDr6" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/jungle_synthesizer~bug-bounty-program-scope-tracker-scraper/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-jungle_synthesizer-bug-bounty-program-scope-tracker-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/jungle_synthesizer~bug-bounty-program-scope-tracker-scraper/runs": { "post": { "operationId": "runs-sync-jungle_synthesizer-bug-bounty-program-scope-tracker-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/jungle_synthesizer~bug-bounty-program-scope-tracker-scraper/run-sync": { "post": { "operationId": "run-sync-jungle_synthesizer-bug-bounty-program-scope-tracker-scraper", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "platforms", "maxItems" ], "properties": { "sp_intended_usage": { "title": "What is the intended usage of this data?", "minLength": 1, "type": "string", "description": "Please describe how you plan to use the data extracted by this crawler." }, "sp_improvement_suggestions": { "title": "How can we improve this crawler for you?", "minLength": 1, "type": "string", "description": "Provide any feedback or suggestions for improvements." }, "sp_contact": { "title": "Contact Email", "minLength": 1, "type": "string", "description": "Provide your email address so we can get in touch with you." }, "platforms": { "title": "Platforms", "type": "array", "description": "Which bug-bounty platforms to include in this run.", "items": { "type": "string", "enum": [ "hackerone", "bugcrowd", "intigriti", "yeswehack" ], "enumTitles": [ "HackerOne", "Bugcrowd", "Intigriti", "YesWeHack" ] }, "default": [ "hackerone", "bugcrowd", "intigriti", "yeswehack" ] }, "offersBountiesOnly": { "title": "Bounty programs only", "type": "boolean", "description": "When enabled, skip programs that don't pay bounties (swag-only / VDP-only).", "default": false }, "maxItems": { "title": "Max Items", "type": "integer", "description": "Maximum number of programs to return (across all selected platforms combined).", "default": 15 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```