Companies pay researchers who responsibly report security bugs through public bug bounty programmes.
Who can apply
Experienced learners who understand the rules and legal scope.
Dates
Always open.
How to apply
- Learn the basics on PortSwigger and Hacker101 first.
- Read each programme's scope and rules carefully.
- Report clearly and never test outside scope.
SWABUD noteTesting outside a programme's scope can be illegal. Always follow the rules.
What it costs and what you get
Cost: Free to join
Benefits: Cash rewards and public recognition
Members only · free
Unlock how to apply
Create a free SWABUD account to see the full listing and keep track of it.
- The official application link
- Step-by-step how to apply and SWABUD's tips
- Cost, benefits and level
- Calendar reminders and your personal tracker
Before you apply
- Open the official page and confirm the dates in Nepal time.
- Read the eligibility rules in full, including age and country.
- Never pay an agent or a third party to apply. Official programmes say clearly if there is a fee.
- Save a copy of your application and any confirmation email.