H
HPenetration testing & bug bountyFull list
Pentest services, platforms and bug bounty programs.
3 tools
Subcategories · 19Penetration testing & bug bounty
- All47
- Password managers4
- 2FA & authenticators5
- Single sign-on & identity3
- DDoS protection & WAF6
- SSL certificates3
- Bot protection4
- Website malware scanning3
- Email security3
- Brand protection & anti-phishing3
- Breach & dark web monitoring3
- Security compliance automation3
- Antivirus & endpoint security4
- Backups5
- Encrypted file storage & sharing3
- Penetration testing & bug bounty3
- Antivirus6
- Identity theft protection5
- Bug bounty platforms3
- Security awareness training3
3 tools
HH
Contact
H
Bug bounty, pentesting and AI red teaming backed by a security researcher community
Bug bounty platforms
B
B
Contact
I
II
Contact
I
Bug bounty, PTaaS and managed VDP platform backed by 150K+ ethical hackers
Bug bounty platforms
With AI: AI security and fraud detection tools on infobroinfobro.ai →How to choose penetration testing & bug bounty tools
All three platforms listed here run security testing with crowdsourced researchers. They also all price by quote, so the published price won't help you choose. These points separate them better:
- Service mix. Work out whether you need a continuous bug bounty, scheduled pentests, or a vulnerability disclosure program (VDP). Intigriti lists bug bounty, PTaaS (pentest as a service) and a managed VDP. Bugcrowd covers bug bounty, pen testing and vulnerability disclosure.
- Specialised testing. HackerOne lists AI red teaming next to bug bounty and pentesting. That matters if you ship AI or LLM features and want them tested by people who try to break them.
- Researcher community. All three rely on outside hackers. Intigriti states a community of 150K+ ethical hackers. Ask each vendor how big and how skilled the researcher pool is in your tech stack.
- Scope and quote terms. Because pricing is on request, compare quotes on the same things: assets in scope, how long the engagement runs, how reports are checked and sorted, and how payouts are set.
We haven't tested these platforms ourselves.
Frequently asked questions
Are there free penetration testing or bug bounty platforms?
None of the platforms listed here publish a free plan. HackerOne, Intigriti and Bugcrowd all price by quote, so you need to contact them for terms.
How much do bug bounty and pentest platforms cost?
None of the listed tools publish prices. HackerOne, Intigriti and Bugcrowd all quote on request. Cost usually depends on scope, how long the engagement runs and how payouts are set, so ask each vendor for a quote on the same scope.
What should I look for when choosing a platform?
Check which services you actually need: bug bounty, pentesting, PTaaS or a vulnerability disclosure program. Then look at the researcher community behind the platform. Intigriti says it has 150K+ ethical hackers. If you build AI products, check for specialised options too. HackerOne, for example, lists AI red teaming.
What are the alternatives to HackerOne?
In this category, the alternatives are Intigriti, which offers bug bounty, PTaaS and a managed VDP, and Bugcrowd, which offers crowdsourced bug bounty, pen testing and vulnerability disclosure.