Status
Live Hunts
Live status of public bug-bounty programs Aligned is tracking. No findings are claimed.
Last checked Oct 23, 2026.
- Programs tracked
- 48
- Verified active
- 43
- Next up
- 5
- Scoping
- 3
- Queued
- 40
Showing 48 of 48.
| Company | Program | Platform | AI scope | Program status | Aligned status | Payout |
|---|---|---|---|---|---|---|
| Mozilla / 0DIN | 0DIN GenAI Bug Bounty | 0din.ai | Yes | Active | Next up | $500–$15,000 (guardrail jailbreak $500–$1,000; content manipulation $5,000; weights $15,000) |
| Google / Alphabet | Google AI VRP | Google Bug Hunters | Yes | Active | Next up | Flagship S1 Rogue Actions $20,000; S2 $15,000; quality 0.8x–1.2x; novelty +$1k–$5k |
| OpenAI | OpenAI Safety Bug Bounty | Bugcrowd | Yes | Active | Next up | Not verified |
| OpenAI | OpenAI Security Bug Bounty | Bugcrowd | Partial | Active | Next up | Not verified |
| Microsoft | Microsoft Copilot Bounty | MSRC | Yes | Active | Next up | $100–$30,000 |
| Anthropic | Anthropic Bug Bounty | HackerOne | Partial | Active | Scoping | Not verified |
| X / xAI | X / xAI Bug Bounty | HackerOne | Partial | Active | Scoping | Not verified |
| Palo Alto / huntr | huntr AI challenges | huntr | Yes | Active | Scoping | Not verified |
| Google / Alphabet | Google VRP (web/Alphabet) | Google Bug Hunters | Partial | Active | Queued | RCE Tier0 up to $101,010 base (quality up to 1.2x) |
| Meta | Meta Bug Bounty | Meta (self-hosted) | Partial | Active | Queued | Not verified |
| Apple | Apple Security Bounty | Apple (self-hosted) | No | Active | Queued | Up to $2 million stated on page; bonuses can reach $5M |
| Amazon | Amazon VRP | HackerOne | Partial | Active | Queued | Not verified |
| Microsoft | Microsoft Bounty (general) | MSRC | Partial | Active | Queued | Not verified |
| GitHub / Microsoft | GitHub Bug Bounty | HackerOne | Partial | Active | Queued | Not verified |
| Shopify | Shopify Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Uber | Uber Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| PayPal | PayPal Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Coinbase | Coinbase Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Cloudflare | Cloudflare Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| TikTok / ByteDance | TikTok Bug Bounty | HackerOne | Partial | Active | Queued | Not verified |
| Snap | Snapchat Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Stripe | Stripe Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Salesforce / Slack | Slack Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Spotify | Spotify Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Airbnb | Airbnb Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| DoorDash | DoorDash Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| GitLab | GitLab Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| LinkedIn / Microsoft | LinkedIn Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Reddit Bug Bounty | HackerOne | No | Active | Queued | Not verified | |
| Roblox | Roblox Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Epic Games | Epic Games Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| Valve | Valve Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| HackerOne | HackerOne Bug Bounty | HackerOne | No | Active | Queued | Not verified |
| IBM | IBM VDP | HackerOne | Partial | Active | Queued | No monetary bounty (offers_bounties=false) |
| U.S. Department of Defense | U.S. DoD VDP | HackerOne | No | Active | Queued | No monetary bounty |
| Tesla | Tesla Bug Bounty | Bugcrowd | No | Active | Queued | Not verified |
| Atlassian | Atlassian Bug Bounty | Bugcrowd | No | Active | Queued | Not verified |
| Mastercard | Mastercard Bug Bounty | Bugcrowd | No | Active | Queued | Not verified |
| Samsung | Samsung Mobile Security Rewards | Samsung (self-hosted) | No | Active | Queued | Not verified |
| LayerZero | LayerZero (Immunefi) | Immunefi | No | Active | Queued | Up to $15,000,000 stated on page |
| Gray Swan | Gray Swan Arena | Gray Swan | Yes | Unverified | Queued | Not verified |
| Mozilla | Mozilla Bug Bounty | HackerOne | Partial | Paused | Queued | Not verified |
| Anthropic | Anthropic Model Safety Bounty | HackerOne (invite) | Yes | Unverified | Queued | Not verified |
| NVIDIA | NVIDIA Bug Bounty | HackerOne | Partial | Unverified | Queued | Not verified |
| Salesforce | Salesforce Bug Bounty | HackerOne | Partial | Unverified | Queued | Not verified |
| Intigriti | Intigriti (platform) | Intigriti | Varies | Active | Queued | Not verified |
| YesWeHack | YesWeHack (platform) | YesWeHack | Varies | Active | Queued | Not verified |
| CISA / federal agencies | CISA VDP Platform | CISA | No | Active | Queued | Not verified |