Hall of Fame

Public bug bounty programs where I reported valid vulnerabilities.

• 8x8
• Acronis
• Arlo
• AT&T
• Automattic
• Bitdefender
• Booking.com
• Boozt Fashion
• Bumble
• Certinia
• Circle
• ClassDojo
• Comcast Xfinity
• Crowdstrike
• Crypto.com
• Databricks
• Early Warning
• Elastic
• EPAM Systems
• Epic Games
• EEternal
• Expedia Group
• Faraday
• Flickr
• FloQast
• Ford
• GitHub
• Google
• Grab
• Hilton
• HPE
• HubSpot
• Hyatt Hotels
• Instacart
• Kiwi.com
• Kong
• LaunchDarkly
• M&T Bank
• Majid Al Futtaim
• Malwarebytes
• Matomo
• Meta
• MoonPay
• Neon
• OpenAI
• OPPO
• PayPal
• PlayStation
• Redox
• Remitly
• Robinhood
• Semrush
• Snapchat
• Spotify
• Stellantis
• Stripe
• SSuperbet
• Superhuman
• The Browser Company
• TheFork
• TikTok
• Tinder
• Trip.com
• Tripadvisor
• Uber
• Ubiquiti
• Udemy
• United Airlines
• Valve
• Varonis
• Verily Life Sciences
• Vimeo
• Xiaomi
• Yahoo
• Yelp