Security research platform · ptaas
Cobalt
Paid, time-boxed pentest engagements delivered by the vetted 'Cobalt Core' - closer to consulting than open bounty.
Overview
Research on Cobalt
Not an open-scope bounty: you apply to Cobalt Core, get vetted, and are assigned scheduled paid pentests. Reliable income, defined scope.
- Program type
- Pentest-as-a-Service
- Regions
- Global
- Payout
- USD; paid per engagement (not per-bug bounty)
Field notes
Practical guidance
- Best if you want predictable paid work rather than bounty variance.
- Report-writing and methodology matter as much as raw bug-finding here.
Primary source
Official links
Version history: normalized permanent page created 2026-08-20. Verify current platform terms before testing.