Overview
Community-maintained directory of bug bounty platforms, VDPs, and disclosure programs worldwide. Not a bounty marketplace itself—a map of where programs live.
How to make the most of it
- · Use filters by region and program type to discover platforms beyond the big four.
- · Cross-check directory entries against official program pages before testing.
- · Bookmark regional platforms (LATAM, APAC, etc.) for diversification.
- · Contribute corrections if you find outdated entries.
- · Pair directory research with careful scope review once you pick targets.
Basic rules
- Disclose.io is a directory, not authorization to test.
- Always read the actual program policy before any testing.
- Respect each platform's and company's rules separately.
- Do not assume listing equals safe harbor.
- Verify scope on the official source of truth.
Always read the live program policy — platform norms never override scope.
Best for
Discovery — finding platforms and VDPs you have not used yet
Payout notes
N/A — points you to programs; each destination has its own payout model
Learn on YouTube
Search results for explainers and walkthroughs. Verify freshness and prefer official channels when available.