Cobalt
Paid, time-boxed pentest engagements delivered by the vetted 'Cobalt Core' - closer to consulting than open bounty.
Tags: ptaas, vetted, engagements, steady-pay
- Program model
- Pentest-as-a-Service
- Regions
- Global
- Payout
- USD; paid per engagement (not per-bug bounty)
Specialties: web, api, mobile, cloud
How to approach it
Not an open-scope bounty: you apply to Cobalt Core, get vetted, and are assigned scheduled paid pentests. Reliable income, defined scope.
- Best if you want predictable paid work rather than bounty variance.
- Report-writing and methodology matter as much as raw bug-finding here.