Bug Bounty Platforms Overview

Different platforms serve different ecosystems. Understanding where your targets live helps you prioritise monitoring and hunting effort.

Major Platforms

• Immunefi – Leading Web3 / smart contract bug bounty platform with large reward pools
• HackerOne – Broad coverage of web, mobile, hardware and some Web3 programs
• Cantina – Competitive audit contests and bounty programs focused on blockchain
• Sherlock – Audit contests and bounties for DeFi and infrastructure projects
• HackenProof – Mix of traditional and crypto programs
• Bugcrowd / Intigriti / YesWeHack – Strong presence in traditional web and enterprise
• Self-hosted – Projects that run their own disclosure programs outside major platforms

Why Aggregation Matters

Researchers rarely limit themselves to one platform. A single dashboard that normalises events across sources reduces context switching and ensures you see high-signal changes regardless of where the program is hosted.

Deep dives: Immunefi Guide · HackerOne Guide