Pricing

from $0.01 / 1,000 results

GitHub Bounty Scanner

Scans GitHub for open developer bounties from Algora and bounty-labeled issues. Returns structured results with dollar amounts, repos, and required skills. Priced at $0.05 per bounty found.

Pricing

from $0.01 / 1,000 results

Rating

0.0

(0)

Developer

Jeff

Actor stats

Bookmarked

Total users

Monthly active users

a day ago

Last modified

What it does

Searches GitHub Issues for active bounties from Algora's platform and bounty-labeled repos
Extracts confirmed dollar amounts from issue bodies and Algora bot comments
Filters by programming language, minimum bounty value, and result count
Returns clean structured data: title, URL, repo, bounty amount, skills, and description

Input

Field	Type	Default	Description
`language`	string	(all)	Filter by programming language (e.g. `TypeScript`, `Python`, `Rust`)
`minAmount`	integer	`25`	Minimum bounty value in USD
`maxResults`	integer	`100`	Maximum number of results to return (up to 500)
`githubToken`	string	(none)	Optional GitHub personal access token for 5000 req/hr vs 60/hr unauthenticated

Output

Each result contains:

{
  "id": "gh-123456789",
  "title": "Fix: binary column types incorrectly typed as strings",
  "url": "https://github.com/drizzle-team/drizzle-orm/issues/5900",
  "repo": "drizzle-team/drizzle-orm",
  "bountyAmount": 200,
  "currency": "USD",
  "labels": ["bug", "bounty", "typescript"],
  "skills": ["TypeScript"],
  "description": "MySQL2 binary/varbinary types are...",
  "createdAt": "2026-06-10T14:23:00Z",
  "source": "algora"
}

Pricing

$0.005 per bounty returned (~$0.50 per 100 results). You only pay for results that match your filters.

Use cases

Build a personal bounty dashboard for freelance income
Feed results into an AI agent that evaluates and applies to bounties
Track high-value open issues across repos you contribute to
Monitor specific languages or ecosystems for new bounty postings

Tips

Provide a GitHub token to avoid hitting the 60 req/hr unauthenticated rate limit
Set minAmount: 100 to focus on higher-value bounties
Use language: TypeScript or language: Python to narrow to your stack
Run on a schedule (daily or hourly) to catch new bounties as they appear

Bug Bounty Recon Scanner

iamuendo/Bug-Bounty-Recon-Scanner

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Isaac Muendo

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

anshumanatrey/bug-bounty-finder

Find every public bug bounty / responsible disclosure program for a target. Aggregates HackerOne directory + Bugcrowd engagements + target /.well-known/security.txt. Daily-use lookup for bug bounty hunters — know if a target has a program before hunting.

Anshuman Atrey

theHarvester Cloud - Email + Subdomain OSINT | 54 Sources Bulk

anshumanatrey/theharvester-osint

Cloud-hosted theHarvester OSINT tool. Harvest emails, subdomains, IPs, URLs and ASNs from 54+ public sources (Shodan, Censys, crt.sh, VirusTotal, SecurityTrails, GitHub, hunter.io). Full CLI feature parity — DNS brute force, subdomain takeover, screenshots. $0.003 per record harvested.

Anshuman Atrey

Network Security Scanner

dz_omar/network-security-scanner

The SSL Checker actor scans IPs or subnets for SSL certificate details using masscan. It retrieves response headers, titles, and redirected URLs for HTTP and HTTPS. Customize parameters and set result limits for efficient scanning

FlowExtract API

5.0

(1)

Nmap Cloud Scanner - Port Scanner + Service Detection | Bulk

anshumanatrey/nmap-scanner

Cloud-hosted nmap (industry-standard network scanner by Fyodor). TCP connect port scans, service/version detection, NSE scripts. Results streamed as structured dataset records — one row per discovered port. $0.005 per record. Authorize scans before running.

Anshuman Atrey

Subdomain Intelligence OSINT Scanner & Monitor

thescrapelab/subdomain-intelligence-osint

Subdomain finder and OSINT exposure monitor for authorized domains. Discover subdomains, validate DNS, classify live/auth-gated/DNS-only assets, detect technologies and providers, monitor changes, and generate reports.

Inus Grobler

Automated reconnaissance actor for bug bounty hunters

wonderful_beluga/automated-reconnaissance-actor-for-bug-bounty-hunters

This Apify actor automates bug bounty recon by scraping the Wayback Machine and GitHub for legacy attack surfaces. It extracts historical URLs, public code, and deprecated files, parsing them to uncover hidden subdomains and forgotten API endpoints. The findings are saved into structured JSON files.

Zaher el siddik

AI Repository Security Scanner

optimus-fulcria/ai-repo-security-scanner

Scan AI/ML repositories for vulnerabilities: sandbox escapes, code injection, path traversal. For security teams.

Fulcria Labs

Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner

anshumanatrey/gitleaks-github-secret-scanner

Hunt leaked API keys across GitHub. Pick a known platform (36 services: Razorpay, Stripe, AWS, OpenAI, Anthropic, Cashfree, PayU, Surepass, Decentro, Karza, Attestr, Tartan +24 more), a keyword (auto-expanded), or a regex. Scan a repo, org, or all of GitHub. PAT unlocks fast Code Search.

Anshuman Atrey

Betterleaks Cloud - GitHub & S3 Secret Scanner

anshumanatrey/betterleaks-cloud

Cloud-hosted Betterleaks v1.3.1 (the successor to Gitleaks, by the original author). Scan GitHub orgs/users/repos/PRs/issues/actions/gists, single git URLs, or S3/R2 buckets. Optional live validation probes each secret against the vendor API to flag which ones are still active.

Anshuman Atrey