Huntr
Bounties on open-source repositories (now under Protect AI). Supply chain, RCE in libraries, ML/AI repos.
Tags: opensource, supply-chain, ai
- Program model
- Open-source bounty
- Regions
- Global
- Payout
- USD; per-repo bounties, often strong for RCE in libraries
Specialties: opensource, rce, supply-chain, ai
How to approach it
You are reading source, not poking a live SaaS. Different muscle: SAST, gadget chains, maintainers who can patch.
- High-impact in widely imported packages pays. Toy repos do not.
- Read the repo's threat model. Many want RCE/path traversal, not XSS in a docs site.