Pricing

$0.01 / 1,000 programs

Bug Bounty Programs Scraper

Find public bug-bounty and vulnerability-disclosure programs from selected sources. Search by keyword, company or domain, or program handle, then save normalized records with public links and available rewards, scope, and status.

Pricing

$0.01 / 1,000 programs

Rating

0.0

(0)

Developer

Maxime Dupré

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Bug Bounty Programs Scraper | Public Records API

Below, you can find a list of relevant HTTP API endpoints for calling the Bug Bounty Programs Scraper Actor. For this, you’ll need an Apify account. Replace <YOUR_API_TOKEN> in the URLs with your Apify API token, which you can find under Integrations in Apify Console. For details, see the API reference.

Run Actor

POST
https://api.apify.com/v2/actors/maximedupre~bug-bounty-programs/runs?token=<YOUR_API_TOKEN>

Note: By adding the method=POST query parameter, this API endpoint can be called using a GET request and thus used in third-party webhooks. Please refer to our Run Actor API documentation.

Run Actor synchronously and get dataset items

POST
https://api.apify.com/v2/actors/maximedupre~bug-bounty-programs/run-sync-get-dataset-items?token=<YOUR_API_TOKEN>

Note: This endpoint supports both POST and GET request methods. However, only the POST method allows you to pass input data. For more information, please refer to our Run Actor synchronously and get dataset items API documentation.

Get Actor

GET
https://api.apify.com/v2/actors/maximedupre~bug-bounty-programs?token=<YOUR_API_TOKEN>

For more information, please refer to our Get Actor API documentation.

Actors can be used to scrape web pages, extract data, or automate browser tasks. Use the Bug Bounty Programs Scraper API programmatically via the Apify API.

You can choose from:

Bug Bounty Programs Scraper API in Python

Bug Bounty Programs Scraper API in JavaScript

Bug Bounty Programs Scraper API through CLI

Bug Bounty Programs Scraper OpenAPI definition

You can start Bug Bounty Programs Scraper with the Apify API by sending an HTTP POST request to the Run Actorendpoint. An Actor’s input and its content type can be passed as a payload of the POST request, and additional options can be specified using URL query parameters. The Bug Bounty Programs Scraper is identified within the API by its ID, which is the creator’s username and the name of the Actor.

When the Bug Bounty Programs Scraper run finishes you can list the data from its default dataset(storage) via the API or you can preview the data directly on Apify Console.

Bug Bounty Program Finder

thescrapelab/bug-bounty-program-finder

Find public bug bounty programs, vulnerability disclosure programs, security.txt contacts, rewards, scope, safe harbor notes, and disclosure policy URLs, then output normalized security program records for research, lead generation, and monitoring.

Inus Grobler

Bugcrowd Bug Bounty Programs Scraper

parseforge/bugcrowd-programs-scraper

Track public bug bounty programs listed on Bugcrowd. Each program returns the name, tagline, reward summary, industry, access status, scope rank, logo, and program link. Useful for security researchers picking targets, watching new programs, and mapping the bounty market.

ParseForge

HackerOne Programs Scraper

automation-lab/hackerone-programs-scraper

Extract public HackerOne bug bounty program data, bounty ranges, submission status, response metrics, and policy URLs for OSINT and sales.

Stas Persiianenko

Bug Bounty Program Scope Tracker Scraper

jungle_synthesizer/bug-bounty-program-scope-tracker-scraper

Unified, machine-readable feed of public bug-bounty program scopes across HackerOne, Bugcrowd, Intigriti and YesWeHack, normalized into in-scope/out-of-scope asset arrays with run-over-run scope-change detection.

BowTiedRaccoon

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

anshumanatrey/bug-bounty-finder

Find every public bug bounty / responsible disclosure program for a target. Aggregates HackerOne directory + Bugcrowd engagements + target /.well-known/security.txt. Daily-use lookup for bug bounty hunters — know if a target has a program before hunting.

Anshuman Atrey

Security Disclosure Finder

toronto_777/security-disclosure-finder

Find public security.txt, responsible disclosure, bug bounty, contact, and policy signals for domains.

Steven Feng

Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd

getascraper/bug-bounty-finder

Find every public bug bounty and VDP program in one run. Queries HackerOne directory, Bugcrowd engagements, and security.txt files. 22 fields per program: min/max bounty, currency, resolved reports, policy snippet, contacts, expiry. $3.99 per 1,000 results.

GetAScraper

Bug Bounty Recon Scanner

altuserap/Bug-Bounty-Recon-Scanner

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Altuserap

Automated reconnaissance actor for bug bounty hunters

wonderful_beluga/automated-reconnaissance-actor-for-bug-bounty-hunters

This Apify actor automates bug bounty recon by scraping the Wayback Machine and GitHub for legacy attack surfaces. It extracts historical URLs, public code, and deprecated files, parsing them to uncover hidden subdomains and forgotten API endpoints. The findings are saved into structured JSON files.

Zaher el siddik

GitHub Bounty Scanner

mranderson323/github-bounty-scanner

Scans GitHub for open developer bounties from Algora and bounty-labeled issues. Returns structured results with dollar amounts, repos, and required skills. Priced at $0.05 per bounty found.