Bug Bounty Programs Scraper

Bug Bounty Program Finder

thescrapelab/bug-bounty-program-finder

Find public bug bounty programs, vulnerability disclosure programs, security.txt contacts, rewards, scope, safe harbor notes, and disclosure policy URLs, then output normalized security program records for research, lead generation, and monitoring.

Bugcrowd Bug Bounty Programs Scraper

parseforge/bugcrowd-programs-scraper

Track public bug bounty programs listed on Bugcrowd. Each program returns the name, tagline, reward summary, industry, access status, scope rank, logo, and program link. Useful for security researchers picking targets, watching new programs, and mapping the bounty market.

HackerOne Programs Scraper

automation-lab/hackerone-programs-scraper

Extract public HackerOne bug bounty program data, bounty ranges, submission status, response metrics, and policy URLs for OSINT and sales.

Bug Bounty Program Scope Tracker Scraper

jungle_synthesizer/bug-bounty-program-scope-tracker-scraper

Unified, machine-readable feed of public bug-bounty program scopes across HackerOne, Bugcrowd, Intigriti and YesWeHack, normalized into in-scope/out-of-scope asset arrays with run-over-run scope-change detection.

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

anshumanatrey/bug-bounty-finder

Find every public bug bounty / responsible disclosure program for a target. Aggregates HackerOne directory + Bugcrowd engagements + target /.well-known/security.txt. Daily-use lookup for bug bounty hunters — know if a target has a program before hunting.

Find public security.txt, responsible disclosure, bug bounty, contact, and policy signals for domains.

Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd

getascraper/bug-bounty-finder

Find every public bug bounty and VDP program in one run. Queries HackerOne directory, Bugcrowd engagements, and security.txt files. 22 fields per program: min/max bounty, currency, resolved reports, policy snippet, contacts, expiry. $3.99 per 1,000 results.

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Automated reconnaissance actor for bug bounty hunters

wonderful_beluga/automated-reconnaissance-actor-for-bug-bounty-hunters

This Apify actor automates bug bounty recon by scraping the Wayback Machine and GitHub for legacy attack surfaces. It extracts historical URLs, public code, and deprecated files, parsing them to uncover hidden subdomains and forgotten API endpoints. The findings are saved into structured JSON files.

Scans GitHub for open developer bounties from Algora and bounty-labeled issues. Returns structured results with dollar amounts, repos, and required skills. Priced at $0.05 per bounty found.