About this tool

HuntBug is a crowdsourced bug bounty platform that connects security researchers with companies to find and fix vulnerabilities in web, API, mobile, and infrastructure assets.

What is HuntBug?

HuntBug is a crowdsourced bug bounty platform where companies run public or private security programs and pay researchers when a fix lands in production. Researchers use a dashboard to track programs, submit reports with markdown and video capture, and receive payouts via wire, Wise, or USDC. The platform handles tax forms (1099/W8) and offers SLA-tracked triage with severity-weighted alerts.

Key Features

- Live feed — Real-time stream of submissions showing severity, researcher, program, and bounty amount; 24 events/min average.
- Scope manager — Sync assets from DNS and cert logs; manage up to 153 assets per program; live asset sync.
- Duplicate checker — Pre-screens reports; kills approximately 38% of submissions before they reach the company inbox.
- SLA-tracked triage — Average triage time of 6 hours 12 minutes; severity-weighted alerts; SLA exceeded after specified hours per program.
- Personal reputation — Researcher reputation (RP) that follows across all programs; daily quests and certifications unlock private invites.
- Payouts — Same week as fix; escrow release on patch shipment; multi-currency including wire, Wise, USDC; 1099/W8 handling.
- Private programs — Invite-only access with 235 private programs currently live (112 public).
- CLI for hunters — Command-line interface for serial hunters to automate submissions and scope monitoring.

Who is it for?

- Security researchers — Hunt full-time or part-time using a unified dashboard; submit reports with templates, video capture, and duplicate detection; build reputation and receive same-week payouts.
- Engineering teams — Launch a public bug bounty program in under an hour or run private programs; triage submissions with SLA tracking; pay only for validated bugs.
- Startups and enterprises — Protect web, API, mobile, and infrastructure assets by leveraging a global community of 2,900+ active hunters.

What can you do with HuntBug?

- Bug bounty hunters — Browse 347 live programs, filter by stack, bounty range, and response time; submit reports with markdown, payload templates, and video capture; earn bounties up to $50,000.
- Security teams — Set up a program in minutes, sync scope from DNS and cert logs, and receive SLA-tracked triage with duplicate detection reducing noise.
- Independent researchers — Participate in daily quests (e.g., "Find an IDOR") to earn bonus points and cash; unlock private program invites through certifications and streak achievements.

How does HuntBug work?

1. Discover — Browse 300+ live programs, filter by stack, bounty range, response time, or known dupes.
2. Submit — File a single report using markdown editor with payload templates and video capture; pre-screened by duplicate hash.
3. Triage — SLA-clocked review by triagers and the program team; severity locked at acceptance with no scope-creep haggling.
4. Pay — Escrow releases automatically when the patch ships; payouts issued same week in multiple currencies with tax forms.