nowfound

Life & fun · August 1, 2018

BC

BountyGraph: Crowdfunded Bug Bounties and Security Audits

Bug bounties and dependencies

BountyGraph: Crowdfunded Bug Bounties and Security Audits launched on August 1, 2018 with 23 votes, #836 of 2,619 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 8 years on.

In plain words

BountyGraph is a platform for crowdfunded bug bounties and security audits focused on free and open-source software projects. It addresses concerns about existing bug bounty programs that may have conflicts of interest or slow response times. The platform enables security researchers to report and receive compensation for vulnerabilities in popular open-source software through community-funded bounties rather than traditional corporate programs.

written from the facts on this page · September 2026

From the sources

I just launched a website! BountyGraph is built on the idea that horrible bugs in popular free and open-source software projects should be: Unfortunately, some of the largest bounties are offered by organizations with a vested interest in not fixing bugs promptly or, sometimes, at all. Consider vulnerabilities in Apache HTTP Server. If one company’s publicly advertised price list is to be believed, you can earn up to $150,000 for a working exploit, as long as you’re OK with that exploit being packaged up and sold to governments . The Trend Micro ZDI pays well, but they release “protection filters” to Trend Micro customers for each vulnerability prior to notifying the project maintainers. If…from justi.cz

Does a similar job

all alternatives →
  • BountyPage2022 · bountypage.com · ▲77

    A platform to start and manage bug bounty programs with ease

  • BountyHub2024 · bountyhub.dev · ▲341

    Hello HN community! As a long-time Github user, I often had issues with public repositories that remained open for a long time. This is due to multiple reasons, such as the lack of resources or prioritization. Sponsoring a repository isn't always the best idea because most of the time, contributors are not the ones receiving money. I came up with a solution: put bounties on GitHub issues to incentivize open-source contributors to fix issues even if they're not directly affected by them. This tool is not intended to force any unwanted additions to a GitHub project, but mainly to help with…

  • Bounty Jungle2021 · ▲79

    We save you hours of debugging time

  • FS
  • Federacy2018 · federacy.com · ▲203

    Bug bounty and security testing platform.

  • git-bug – Distributed bug tracker embedded in git2018 · github.com · ▲447

    Distributed, offline-first bug tracker embedded in git - git-bug/git-bug

More life & fun this month

the category →

Source: Show HN post ↗

Launched alongside, August 2018

the whole month →
  • IM
  • Powerful video recorder. Now on Desktop.

    Dev tools · 2018 · loom.com

  • Create unique illustrations for websites & applications.

    Dev tools · 2018 · craftwork.design

  • Retool▲640

    Hi all, founder @ Retool here. We initially launched Retool on HN five years ago: https://news.ycombinator.com/item?id=14515494. The feedback was extraordinarily helpful then (e.g. we launched source control, on-prem, etc. based on HN comments), and we’re grateful for all of it. Today, we’re excited to get HN’s thoughts on one of our new products: Retool Mobile. It lets you build and deploy mobile apps in minutes, not days. The idea is there is a large class of line-of-business mobile apps, and the process of getting a simple form + button on a mobile device, in a native app,…

    Dev tools · 2018 · retool.com

  • Pts is a javascript library for visualization and creative-coding.

    Dev tools · 2018 · ptsjs.org

  • Build, deploy, and manage internal tools with Retool's unified engine. Connect to any database, API, or LLM. Leverage AI throughout your business.

    AI · 2018 · tryretool.com