Unclaimed brand
Every public bug bounty program on HackerOne, Bugcrowd, Intigriti, YesWeHack, Federacy, Immunefi, and HackenProof, filterable by scope, payout, and asset type.
Liking this brand profile? Share this page
Hex Code
Color name
RGB
HSL
CMYK
#00D294
Caribbean Green
0, 210, 148
162, 100, 41
100, 0, 30, 18
#0A0A0B
Woodsmoke
10, 10, 11
240, 5, 4
9, 9, 0, 96
#5EE9B5
Turquoise Blue
94, 233, 181
158, 76, 64
60, 0, 22, 9
Bounty Index is a free directory and research tool for security researchers, bringing public bug bounty and vulnerability disclosure programs from six platforms into one searchable view. Its index covers more than 1,800 programs and nearly 56,000 in-scope assets, with details on rewards, scope, and program activity. Users can filter by asset type, payout, and scope, compare programs, and check whether a domain is included in any listed program.
The service also tracks scope and reward changes, provides a dated activity feed and RSS updates, and offers watchlists and Discord alerts. An opportunity score ranks programs using a published formula based on payout, bounty status, and freshness. For developers and AI agents, Bounty Index provides an MCP endpoint to query the directory.
The site is maintained by Varun as an independent project and is free to use without an account. It also publishes information about its data sources, scoring methodology, and update process, helping researchers assess opportunities and keep up with changes across the bug bounty landscape
Brand industry
Computers Electronics and Technology
Company type
Suggest company type
Year founded
Suggest founded year
Company size
Suggest company size
How do I download the Varun.sh logo?
The Varun.sh logo comes in one version: an icon. Download as JPEG.
What are Varun.sh's brand colors?
The Varun.sh color palette uses the hex codes #00D294, #0A0A0B and #5EE9B5.
The Varun.sh name, logos and brand assets are trademarks of Varun.sh and its affiliates. Brandfetch isn't affiliated with or endorsed by Varun.sh. Their use is subject to Varun.sh's brand guidelines.