Bug bounties are awesome, but hard. Get the 5 keys to successfully running your own bug bounty.

Thanks to the 91 Legends for their contribution to this page. View contributors.

Company New Reward Swag Hall of Fame
123 Contact Form Yes
99designs Yes Yes
Abacus Yes
Acquia Yes
Active Campaign Yes
ActiveProspect Yes
ActiVPN Yes
Adapcare Yes
AeroFS
Aerohive
Agora Ciudadana Security
Airbnb
Alcyon Yes
Altervista Yes
Amazon Web Services
ANCILE Solutions Inc. Yes
Android Free Apps Yes
Appcelerator Yes
Apple Yes
Apptentive
Aptible Yes Yes
Asana Yes
AT&T Yes Yes Yes
Attack Secure Yes Yes
Automattic Yes
Avast! Yes
Avira
Badoo Yes Yes
Barracuda Yes Yes
Base Yes
Basecamp Yes
Beanstalk
Bitcasa Yes
Bitcoin.de
Bittrex Yes Yes
Blackberry
Blackphone Yes
Blinksale Yes
Blogger Yes Yes
Box
Braintree Yes
BTX Trader
Buffer Yes
C2FO Yes
Campaign Monitor
Can you XSS this? Yes
CARD.com Yes
Chargify Yes
Chromium Project Yes Yes
CircleCi Yes
Cisco
Code Climate
CodePen Yes
Coinbase Yes Yes
Coinkite Yes Yes
Commonsware Yes
Compilr Yes
Compose Yes
Constant Contact Yes
Coupa
CPanel Yes
cPaperless
Cryptocat Yes
Cupcake Yes
Customer Insight
Dato Capital Yes
Dell Secureworks
Detectify Yes
Deutsche Telekom Yes
Digital Ocean Yes
DNSimple Yes
Downstream Analytics
Dribbble Yes
Dropbox Yes
Dropcam Yes Yes
Drupal
eBay Yes
Eclipse
Elance-oDesk Yes Yes
EMC2
Emptrust
Engineyard Yes
EthnoHub
Etsy Yes
Eventbrite Yes
Event Espresso
Evernote Yes
Expatistan
Facebook Yes Yes
FFmpeg
flood.io Yes
Flowdock
Fluxiom Yes
Form Assembly Yes
Foursquare Yes
Foxycart Yes
Freelancer Yes Yes
Gallery Yes
Gamma
Gemeente Wageningen
Gemfury
getClouder Yes Yes
Ghost
Ghostscript Yes
Giftcards.com Yes
Github Yes Yes
Gitlab Yes
Gittip Yes
Gliph Yes
GoAnimate Yes
Google Yes Yes
Greenhouse.io Yes Yes
Grok Learning Yes
HackerOne Yes Yes
Hack For Cause Yes
HakSecurity Yes
Harmony Yes
Helpscout Yes Yes
Heroku Yes Yes Yes
Hex-Rays Yes
HoneyDocs
Honeywell
Hootsuite Yes
HTC
Huawei
Hybrid Saas
IBM
ICEcoder
Iconfinder Yes
iFixit Yes
Indeed Yes Yes
Informatiebeveiliging
ING NL
Instagram Yes Yes Yes
IntegraXor (SCADA) Yes Yes
Internetwache Yes
ITRP
Joomla
jruby
Juniper
Kadince
Kaneva Yes
Kayako Yes
Keming Labs
Khan Academy Yes
KPN
Kraken Yes Yes
Laer Yes
LastPass Yes
LaunchKey Yes Yes
Librato Yes
Lievensberg Hospital
Liferay
LinkedIn
Localize Yes
Logentries Yes
Lookout Yes Yes
MacOS X Bitcoin LevelDB data corruption issue Yes
Magento Yes Yes
Magix AG Yes
Mahara Yes
ManageWP Yes
Mandrill App Yes
Marktplaats Yes
MCProHosting Yes
Mega.co.nz Yes
Meldium Yes
Meraki Yes
Microsoft (bounty programs) Yes
Microsoft (Online Services) Yes
Microweber Yes
Millsap Independent School District
Modus CSR
Moneybird Yes
Moodle Yes
Motorola
Movember Yes
Movielee Yes
Mozilla Yes Yes
Myntra Yes
MyStuff2 App Yes Yes
Namazu
National Cyber ​​Security Center (Netherlands) Yes Yes
Netagio Yes
Netflix Yes
Net Worth Pro Yes Yes
Nitrous.IO Yes
Nokia Siemens Networks Yes
Norada Yes
NSN Nokia Solutions Networks Yes
Nvidia
Oculus Yes Yes
Offers.com
Olark Yes Yes Yes
Onavo Yes Yes
OnePageCRM Yes
OpenBSD
Openclass Knowledge Base
OpenText Yes
Opera
Oracle
Orkut Yes Yes
PagerDuty
Pantheon Yes
Panzura
Parse Yes Yes
Paychoice Yes
Paymill Yes
Paypal Yes Yes
Pidgin
PikaPay Yes
Pinoy Hack News Yes
Pinterest Yes
Piwik Yes
Pocket Yes
Polar SSL Yes
PostmarkApp Yes
Prezi Yes
PullReview
Puppet Labs Yes
PureVPN Yes
Qiwi Yes
Qmail Yes
Qualcomm Yes
Rackspace Yes
Reddit Yes
RedHat Yes
Regiobank NL Yes
Relaso
Ribose Yes
Ripple Yes
Riskalyze Yes
Risk.io Yes Yes
Salesforce
Samba
Samsung Yes
SBWire Yes
Schuberg Philis Yes Yes
Scorpion Software Yes
Security Net Yes
Segment.io Yes
Sellfy Yes
ServiceRocket Yes
Shopify Yes Yes
Silent Circle Yes
Simple Yes Yes
Simplify
SiteGround Yes
Skuid
Smart Budget Yes
SmileznHapiez Yes
SNS Bank NL Yes
Sonatype Yes
Sony Yes
Soundcloud Yes
SplashID Yes Yes
Splitwise Yes
Spotify Yes Yes
Sprout Social Yes
Square Yes Yes
StatusPage.io Yes Yes Yes
Sunrise Yes Yes
Symantec
Tagged Yes
Tapatalk
Tarsnap Yes
Team Unify
Tele2
Telegram Yes
Tesla Yes
The Humble Bundle Yes
Trade Only
Tresorit Yes
Tuenti Yes
Tumblr Yes Yes
Twilio Yes
Twitch Yes
Twitter Yes Yes
Typo3
Uber Yes
Unitag Yes
UPC
Valve Software Yes
VCE
Venmo
Viadeo Yes
Vodafone (Netherlands)
Volcanic Pixels
Volusion Yes
VSR
Wamba
Webconverger
Websecurify Yes Yes
WHMCS Yes
Windthorst ISD
X.commerce
Xen
Xmarks Yes
XMind Yes
Yahoo Yes Yes
Yandex Yes Yes
Yesware Yes
YouTube Yes Yes
Zencash Yes
Zendesk Yes Yes
Zetetic
Ziggo
Zimbra
Zynga Yes

Contribute to the list. Email us at support@bugcrowd.com