Bugcrowd Bug Bounty Programs Scraper
Pricing
from $7.69 / 1,000 results
Bugcrowd Bug Bounty Programs Scraper
Collects public Bugcrowd bug bounty and vulnerability disclosure programs. Each row returns the program name, reward range, submission state, and target category.
Pricing
from $7.69 / 1,000 results
Rating
0.0
(0)
Developer
ParseForge
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
16 hours ago
Last modified
Categories
Share
Bugcrowd Bug Bounty Programs Scraper
Scrape every public Bugcrowd bug bounty and VDP program into a clean dataset. Each row includes the program name, reward range, submission state, and target category. No API key or authentication needed. Export to CSV, JSON, Excel, or XML.
Bugcrowd's directory lists thousands of active bug bounty and vulnerability disclosure programs, but browsing page by page and copying details manually is slow. This actor reads the public program listings directly, filtering by engagement type, and returns a structured row for every match. You get a complete, sortable list in minutes, ready for analysis or tooling.
| Who uses it | What they scrape Bugcrowd for |
|---|---|
| Security researchers | Build a personal watchlist of programs that match their skills and payout expectations. |
| Bug bounty platform analysts | Compare program counts, reward ranges, and response times across platforms. |
| Penetration testing firms | Identify prospective clients who already run public vulnerability disclosure programs. |
| Cybersecurity students | Find beginner-friendly VDPs to practice responsible disclosure. |
What it does
This Actor collects public Bugcrowd programs by category and returns each one as a flat row with its name, reward range, submission state, and target type.
- 🎯 Category filter: choose between bug bounty programs with monetary rewards or vulnerability disclosure programs (VDPs).
- 📏 Volume control: set a hard cap on the number of programs collected per run, from a single entry up to one million.
- 🔄 Fresh data every run: each execution hits the live Bugcrowd directory, so your dataset reflects the current program list.
Results export to CSV, JSON, Excel, or XML, or straight from the API.
What you can do with Bugcrowd data
📋 Build a research pipeline.
A security researcher runs the scraper weekly for the bug bounty category, filters the CSV for web targets with a high maximum reward, and picks their next engagement.
📊 Compare platform adoption.
An analyst collects all VDP listings from Bugcrowd and another platform, then compares industry adoption rates by counting programs per vertical.
🛡️ Qualify sales leads.
A consultancy scrapes the VDP list, cross-references the company names with their CRM, and prioritizes outreach to firms that already invest in coordinated disclosure.
🎓 Find safe practice targets.
A student scrapes the VDP category, picks a program that explicitly welcomes newcomers, and submits their first responsible disclosure report.
Why choose this scraper
| What you get | |
|---|---|
| Program discovery | A single list of every public program in your chosen category, not scattered across paginated views. |
| Reward intelligence | See the stated minimum and maximum bounty for each program where Bugcrowd publishes it. |
| Submission status | Know immediately whether a program is currently accepting submissions. |
| Target category | Understand the primary asset type each program covers, such as websites, APIs, or mobile apps. |
How it compares
This actor focuses exclusively on the Bugcrowd directory with a simple category filter and volume control, while the competitors below span multiple platforms or track scope changes over time.
| Feature | ParseForge | Bug Bounty Program Scope Tracker Scraper | Bug Bounty Finder: 22-Field Intel from HackerOne & Bugcrowd |
|---|---|---|---|
| Bugcrowd-only focus | Yes | Not listed | Not listed |
| Bug bounty and VDP category filter | Yes | Not listed | Not listed |
| Multi-platform support | Not listed | Yes | Yes |
| Scope-change detection across runs | Not listed | Yes | Not listed |
| 22-field output with policy snippets and contacts | Not listed | Not listed | Yes |
| No API key required | Yes | Not listed | Not listed |
Configure the run
Drive the Actor by selecting a program category, and set a maximum number of programs to collect. The Input tab lists every parameter.
A first run with the defaults:
A larger pull:
Pricing
Pay-per-result: $0.0085 per result collected. You pay only for the results written to your dataset.
| Results collected | Approximate cost |
|---|---|
| 100 results | $0.85 |
| 1,000 results | $8.50 |
| 10,000 results | $85.00 |
New Apify accounts start with $5 in free credit.
Free users
Free-plan runs return up to 10 results as a preview. Upgrade your Apify plan to collect up to 1,000,000 results per run.
Run it
- Create a free Apify account with $5 in credit.
- Open the Bugcrowd Bug Bounty Programs Scraper.
- Set your inputs and any filters, then click Start.
- Export the results as CSV, Excel, JSON, or XML from the Dataset tab.
Run it programmatically through the Apify API (run-sync-get-dataset-items) or the ApifyClient for JavaScript and Python.
Use with AI agents (MCP)
Give an AI agent live access to Bugcrowd through the Model Context Protocol. Add the Actor to Claude, Cursor, or any MCP client:
Then prompt it in plain language to run the scraper and read back the results.
Troubleshooting
Why am I getting zero results?
Confirm you selected a category that has active public programs. Both 'bug_bounty' and 'vdp' return listings, but a very low 'Maximum programs' value combined with a fast run can sometimes appear empty. Try increasing the maximum to 100 and rerunning.
The actor finishes but the dataset has fewer rows than my maximum.
The actor stops when it has collected your requested number of programs or when it reaches the end of the public directory. If Bugcrowd lists fewer programs than your maximum, you will receive all of them.
Some reward fields are empty in my results.
Bugcrowd does not publish reward ranges for every program. VDPs rarely show bounties, and some bug bounty programs hide the range until you are invited. Empty fields reflect what Bugcrowd displays publicly.
The run timed out.
Large requests can take time. Increase the actor's timeout in the run settings, or lower the 'Maximum programs' value and run the actor more frequently.
I see a 'blocked' or 'access denied' error.
Bugcrowd may temporarily rate-limit aggressive scraping. The actor includes polite delays, but if you encounter this, wait a few minutes and retry. Running from a residential proxy can also help.
FAQ
| Question | Answer |
|---|---|
| Does this scraper need a Bugcrowd API key? | No. It reads the same public program directory you can see in a browser. No login, no API token, and no Bugcrowd account are required. |
| What is the difference between bug bounty and VDP? | Bug bounty programs offer monetary rewards for valid reports. Vulnerability Disclosure Programs (VDPs) provide a safe harbor to report issues but typically do not pay bounties. |
| How many programs can I scrape in one run? | You control the limit with the 'Maximum programs' input. Set it to 10 for a quick sample or up to 1,000,000 to pull the entire directory. |
| Does the actor return private program details? | No. It only collects information that Bugcrowd displays publicly in its program directory. Private program data is never accessible. |
| Can I filter by industry or technology stack? | The actor filters by engagement category. For deeper filtering by industry or tech, you can load the full dataset into a spreadsheet or database and filter there. |
| How often should I run this actor? | Program statuses and reward ranges can change. A weekly or daily scheduled run keeps your dataset current without manual checking. |
| What export formats are supported? | You can export your results to CSV, JSON, Excel, or XML directly from the Apify dataset tab. |
| Does the actor handle pagination automatically? | Yes. It navigates through all pages of the Bugcrowd directory for you and stops when it hits your requested maximum or the end of the list. |
| Can I get the program URL in the output? | Yes. Each row includes the direct link to the program's Bugcrowd page so you can read the full policy and scope. |
| Is this actor affiliated with Bugcrowd? | No. This is an independent tool built on the Apify platform. It is not developed, endorsed, or supported by Bugcrowd Inc. |
Related actors
Browse the full ParseForge collection for more scrapers.
🆘 Need help? Email parseforge@protonmail.com with your run ID, your input, and what you expected.
⚠️ Disclaimer. This Actor is unofficial and is not affiliated with, endorsed by, or sponsored by Bugcrowd Inc. It collects only publicly available data. You are responsible for using the collected data in compliance with the source's terms of service and applicable data-protection laws, including GDPR, CCPA, and PIPL. Do not use it to collect personal data unlawfully.
