Open Bug Bounty
Free, non-profit coordinated-disclosure platform for a narrow set of externally verifiable issues (XSS, etc.) on any website.
Tags: disclosure, non-profit, iso-29147, no-guaranteed-bounty
- Program model
- Coordinated disclosure (non-profit)
- Regions
- Global
- Payout
- None guaranteed - optional, researcher-and-owner negotiated rewards
Specialties: xss, web, disclosure
How to approach it
Follows ISO 29147 coordinated disclosure. Only submit issues you can prove non-intrusively; there is no authorization to test beyond that.
- Good for building a public disclosure record, not for income.
- Stay strictly within the non-intrusive rules - this is not open pentest authorization.