387 listed,
450+ secured
Every organization that recognized my security reports and is fine with being named. Programs where I was the first researcher come first. Wherever a public Hall of Fame exists, it's linked so you can check my name on it yourself.
How the list adds up
45first researcher
136public pages linked
226with a page or screenshot
Why fewer than 450 here? Not every thank you is mine to publish. The rest are sub companies and clients of groups already listed, private programs and pentests under NDA, programs that haven't approved disclosure yet, and reports confirmed but waiting for a Hall of Fame update.
- Credited under a parent company's name
- Private programs and NDAs
- Waiting on approval or an update
01Top names
The most recognizable
Ranked by size, reach and public significance. A red edge marks the ones where I was the first researcher.
- 01Appleapple.com, United States
- 02NVIDIAnvidia.com, United States
- 03United Nationsun.org, United States
- 04World Health Organizationwho.int
- 05UNESCOunesco.org
- 06European Unioneuropa.eu
- 07Boeingboeing.com, United States
- 08Oracleoracle.com, United States
- 09BASF SEbasf.com, Germany
- 10Nokianokia.com, Finland
- 11Thalesthales.com, France
- 12Royal Philipsphilips.com, Netherlands
- 13Michelinmichelin.com, France
- 14TRATONtraton.com, Germany
- 15LGlg.com, South Korea
- 16MediaTekmediatek.com, Taiwan
- 17Red Hatredhat.com, United States
- 18Netwrixnetwrix.com, United States
- 19TP-Linktp-link.com, United States
- 20ALDI Südaldi-sued.com, Germany
- 21Amulamul.coop, India
- 22Pirellipirelli.com, Italy
- 23Nykaanykaa.com, India
- 24GeeksforGeeksgeeksforgeeks.org, India
- 25BBCbbc.com, United Kingdom
- 26Lloyd's of Londonlloyds.com, United Kingdom
- 27Commerzbankcommerzbank.de, GermanyFirst researcher
- 28Deutsche Börsedeutsche-boerse.com, Germany
- 29Evri (formerly Hermes)evri.com, United Kingdom
- 30Beatportbeatport.com, United States
- 31Buy Me a Coffeebuymeacoffee.com, United States
- 32VolkerWesselsvolkerwessels.com, Netherlands
- 33Redeia (Spanish Power Grid)redeia.com, Spain
- 34GEA Groupgea.com, Germany
- 35Marelmarel.com, Iceland
- 36Achmea Insuranceachmea.nl, Netherlands
- 37Proton AG (ProtonMail/VPN)proton.me, Switzerland
- 38Wiz (Cloud Security)wiz.io, United States
- 39Swedish Police Authoritypolisen.se, Sweden
- 40CERT-Incert-in.org.in, India
- 41Norwegian Directorate of Electionsvalg.no, Norway
- 42Department of Home Affairshomeaffairs.gov.au, Australia
- 43Digital Transformation Agencydta.gov.au, Australia
- 44Department of Foreign Affairs and Tradedfat.gov.au, Australia
- 45City of Berlinberlin.de, GermanyFirst researcher
- 46City of Marseillemarseille.fr, France
- 47DSB (Danish State Railways)dsb.dk, Denmark
- 48Swedish Medical Products Agencylakemedelsverket.se, Sweden
- 49UWV (Employee Insurance Agency)uwv.nl, Netherlands
- 50NWO (Dutch Research Council)nwo.nl, Netherlands
- 51KNAWknaw.nl, Netherlands
- 52Australian Research Councilarc.gov.au, Australia
- 53Attorney-General's Departmentag.gov.au, Australia
- 54Administrative Review Tribunalart.gov.au, Australia
- 55Australian Prudential Regulation Authorityapra.gov.au, Australia
- 56IP Australiaipaustralia.gov.au, Australia
- 57Nordnetnordnet.se, Sweden
- 58Hemnethemnet.se, Sweden
- 59MONETA Money Bankmoneta.cz, Czech Republic
- 60BankAxept (Payment System)bankaxept.no, NorwayFirst researcher
- 61Handelsblatt Media Grouphandelsblattgroup.com, Germany
- 62TV4 (Swedish Television)tv4.se, Sweden
- 63Vismavisma.com, Norway
- 64GetYourGuidegetyourguide.com, Germany
- 65Cambridge University Presscambridge.org, United Kingdom
- 66Drexel Universitydrexel.edu, United States
- 67University of St Andrewsst-andrews.ac.uk, United KingdomFirst researcher
- 68University of Sheffieldsheffield.ac.uk, United Kingdom
- 69TU Delfttudelft.nl, Netherlands
- 70Charles University, Praguecuni.cz, Czech Republic
- 71EMBL-EBI (European Bioinformatics)ebi.ac.uk, United Kingdom
- 72Maastricht Universitymaastrichtuniversity.nl, Netherlands
- 73Radboud Universityru.nl, Netherlands
- 74University of Twenteproto.utwente.nl, Netherlands
- 75G DATA CyberDefensegdata.de, Germany
- 76ZKTecozkteco.com, China
- 77Port of Tallinnts.ee, EstoniaFirst researcher
02Directory
Every listed organization
The red line under a name is what I reported to that organization. The badges are what came back, and they show only what I am free to publish, so a missing badge says nothing either way.
Showing all 387 organizations
| Organization | Sector | Country | Recognition | Verify |
|---|---|---|---|---|
| BankAxept (Payment System)bankaxept.no | Finance | Norway | First researcherHall of Fame | |
| City of Berlinberlin.deXSS · PII exposure · Information disclosure | Government | Germany | First researcherHall of Fame | |
| Commerzbankcommerzbank.deInformation disclosure | Finance | Germany | First researcherHall of Fame | |
| Port of Tallinnts.eeHTML injection | Education | Estonia | First researcherHall of Fame | |
| University of St Andrewsst-andrews.ac.ukSQL injection · Account takeover · XSS | Education | United Kingdom | First researcherHall of Fame | |
| Accodeingaccodeing.com | Company | Netherlands | First researcherHall of Fame | |
| Australian Financial Security Authorityafsa.gov.auSession handling · HTML injection | Government | Australia | First researcherHall of Fame | |
| AVM99963avm99963.com | Independent | Europe (multi country) | First researcherHall of Fame | |
| Bokadirektbokadirekt.seAccount takeover · IDOR · Broken access control | Company | Sweden | First researcherHall of FameBounty | |
| Bringmebringme.comAuthentication flaw | Company | Belgium | First researcherHall of Fame | |
| Coloop AIcoloop.aiBusiness logic flaw · Authentication flaw · Information disclosure | Company | Europe (multi country) | First researcherHall of Fame | |
| CSCherrcscherr.de | Independent | Germany | First researcherHall of Fame | |
| Daniel Fisherdanielfisher.com | Independent | United States | First researcherHall of Fame | |
| Dept. of Industry, Science & Resourcesindustry.gov.au | Government | Australia | First researcherHall of Fame | |
| Elfsterelfster.comInformation disclosure | Company | United States | First researcherHall of Fame | |
| Gi Effektivtgieffektivt.no | Nonprofit and civic | Norway | First researcherHall of Fame | |
| Government of Western Australiawa.gov.au | Government | Australia | First researcherHall of Fame | |
| Inspector-General of Taxationigt.gov.au | Government | Australia | First researcherHall of Fame | |
| Julie & Joyjulieandjoy.fr | Company | France | First researcherHall of Fame | |
| KIVI (Royal Engineers Society)kivi.nlHTML injection | Nonprofit and civic | Netherlands | First researcherHall of FameSwag | |
| LennyBaconlennybacon.com | Independent | Germany | First researcherHall of Fame | |
| Matchis (Stem Cell Foundation)matchis.nl | Nonprofit and civic | Netherlands | First researcherHall of Fame | |
| MBO Digitaalmbodigitaal.nl | Education | Netherlands | First researcherHall of Fame | |
| Modalku / Funding Societiesmodalku.co.id | Finance | Indonesia | First researcherHall of Fame | |
| Personal Property Securities Registerppsr.gov.au | Government | Australia | First researcherHall of Fame | |
| Praamid Estoniapraamid.ee | Education | Estonia | First researcherHall of Fame | |
| Red Gamesredgames.coAuthentication flaw | Company | United States | First researcherHall of FameSwag | |
| Seantisseantis.ch | Company | Switzerland | First researcherHall of FameBounty | |
| TicketCounterticketcounter.nlInformation disclosure | Company | Netherlands | First researcherHall of FameBounty | |
| Whatfixwhatfix.com | Company | India | First researcherHall of FameBounty | |
| WhatIsMyBrowserwhatismybrowser.com | Company | Australia | First researcherHall of FameSwag | |
| Zeptozeptonow.com | Company | India | First researcherHall of Fame | |
| Attensiattensi.com | Company | Norway | First researcherHall of Fame | |
| Bacardi55bacardi55.io | Independent | France | First researcherHall of Fame | |
| BelWü (Academic Network)belwue.de | Education | Germany | First researcherHall of Fame | |
| CTW Incctw.incCredential exposure · PII exposure | Company | Japan | First researcherHall of FameCertificate | |
| Felix Brezofelixbrezo.com | Independent | Spain | First researcherHall of Fame | |
| Hulpverleningszone Meetjeslandzonemeetjesland.be | Government | Belgium | First researcherHall of FameLetter of appreciation | |
| Metacodemetacode.biz | Company | Europe (multi country) | First researcherHall of Fame | |
| SIF/ERDA (Univ. of Copenhagen)sif.erda.dkAuthentication flaw · Information disclosure | Education | Denmark | First researcherHall of Fame | |
| Suttysutty.nl | Company | Netherlands | First researcherHall of FameSwag | |
| THWS Würzburg-Schweinfurtthws.de | Education | Germany | First researcherHall of Fame | |
| VideoDockvideodock.comPII exposure · Authentication flaw · HTML injection | Company | Netherlands | First researcherHall of Fame | |
| Xledgerxledger.com | Company | Norway | First researcherHall of FameSwag | |
| ZenDiS (Digital Sovereignty)zendis.deInformation disclosure | Government | Germany | First researcherHall of FameSwag | |
| 1000minds1000minds.comBusiness logic flaw · Race condition · HTML injection | Company | New Zealand | Hall of Fame | |
| 10x Banking10xbanking.com | Finance | United Kingdom | Hall of Fame | |
| 365.bank365.bank | Finance | Slovakia | Hall of Fame | |
| 50plusMatch50plusmatch.beAccount takeover · Broken access control · Authentication flaw | Company | Belgium | Hall of Fame | |
| Achmea Insuranceachmea.nl | Finance | Netherlands | Swag | |
| ACT Governmentact.gov.au | Government | Australia | Hall of Fame | |
| Activeloopactiveloop.aiInformation disclosure · Session handling | Company | United States | ||
| Addpipeaddpipe.comHTML injection | Company | Romania | ||
| Adfinisadfinis.com | Company | Switzerland | Hall of Fame | |
| Administrative Review Tribunalart.gov.auHTML injection | Government | Australia | ||
| Airmail Newsairmail.newsAccount takeover · Broken access control · Authentication flaw | Media | United States | Hall of FameBounty | |
| Airmeetairmeet.com | Company | India | Hall of Fame | |
| ALDI Südaldi-sued.com | Enterprise | Germany | Hall of Fame | |
| AMA Japanama.ne.jp | Company | Japan | Hall of Fame | |
| AMDBamdb.com.brServer-side template injection · XSS · CSRF | Company | Brazil | Hall of Fame | |
| AmTrust Financialamtrustgroup.comAuthentication flaw | Finance | United States | Hall of Fame | |
| AmTrust Title Eventsamtrusttitleevents.com | Company | United States | Hall of Fame | |
| Amulamul.coopAccount takeover · Broken access control · XSS | Enterprise | India | Hall of Fame | |
| Anglian Wateranglianwater.co.uk | Enterprise | United Kingdom | Swag | |
| AppCraftappcraft.nl | Company | Netherlands | Hall of Fame | |
| Appleapple.com | Enterprise | United States | Acknowledged | |
| Appy Pieappypie.com | Company | India | Hall of Fame | |
| Aqqoaqqo.com | Company | Netherlands | Acknowledged | |
| Arkadiumarkadium.com | Company | United States | Hall of FameBounty | |
| AssoConnectassoconnect.comIDOR · Broken access control · Authentication flaw | Company | France | Hall of Fame | |
| ATS Warraatswarra.com | Company | Australia | Hall of Fame | |
| Attorney-General's Departmentag.gov.auHTML injection | Government | Australia | Hall of Fame | |
| Audinateaudinate.com | Company | Australia | Hall of Fame | |
| Australian Institute of Health & Welfareaihw.gov.auInformation disclosure | Government | Australia | Hall of Fame | |
| Australian Prudential Regulation Authorityapra.gov.au | Government | Australia | Hall of Fame | |
| Australian Research Councilarc.gov.au | Government | Australia | Hall of Fame | |
| Australian Tax Ombudsmantaxombudsman.gov.au | Government | Australia | Hall of Fame | |
| Avans Universityavans.nlBroken access control · PII exposure · Information disclosure | Education | Netherlands | Letter of appreciation | |
| BAHAG (Bauhaus Parent)bahag.comAccount takeover · Credential exposure · PII exposure | Enterprise | Germany | Hall of FameBounty | |
| Bandsintownbandsintown.comSQL injection · Account takeover · SSRF | Company | United States | SwagBounty | |
| BASF SEbasf.com | Enterprise | Germany | Hall of Fame | |
| BBCbbc.com | Media | United Kingdom | Swag | |
| Beatportbeatport.comAccount takeover · IDOR · Broken access control | Company | United States | Hall of Fame | |
| Beeline Uzbekistanbeeline.uzBroken access control · PII exposure | Enterprise | Uzbekistan | Hall of Fame | |
| Beneribeneri.se | Company | Sweden | Hall of Fame | |
| Berliner Hochschule für Technikbht-berlin.de | Education | Germany | Hall of Fame | |
| Billiger-Mietwagenbilliger-mietwagen.deBusiness logic flaw · Credential exposure · Authentication flaw | Company | Germany | Hall of FameBounty | |
| BitDegreebitdegree.org | Company | Lithuania | Hall of FameBounty | |
| Black Arrow Tradingblackarrowtrading.com | Company | United States | Hall of Fame | |
| Blinqblinq.meXSS · HTML injection · Information disclosure | Company | Australia | Hall of FameBounty | |
| BMC Softwarebmc.com | Company | United States | Swag | |
| Boeingboeing.com | Enterprise | United States | Hall of Fame | |
| Bournemouth Universitybournemouth.ac.ukInformation disclosure | Education | United Kingdom | Hall of Fame | |
| Buy Me a Coffeebuymeacoffee.comPII exposure · HTML injection | Company | United States | Hall of FameBounty | |
| Byte Physicsbyte-physics.de | Company | Germany | Hall of Fame | |
| ByteBloggerBasebytebloggerbase.com | Company | India | Swag | |
| Cambridge University Presscambridge.orgCSRF · CORS misconfiguration · Session handling | Education | United Kingdom | Hall of Fame | |
| CCV Group (Payments)ccv.euPII exposure · Information disclosure | Finance | Netherlands | Hall of Fame | |
| CERT-Incert-in.org.inSQL injection · Information disclosure | Government | India | Hall of FameAcknowledged | |
| Charles University, Praguecuni.cz | Education | Czech Republic | Hall of Fame | |
| Chemnitz University of Technologytu-chemnitz.de | Education | Germany | Hall of Fame | |
| Chillforce Ltdchillforceltd.co.uk | Company | United Kingdom | Hall of Fame | |
| Chromaticchromatic.com | Company | United States | Hall of Fame | |
| City of Marseillemarseille.frPII exposure · HTML injection · Information disclosure | Government | France | Hall of Fame | |
| CK-12 Foundationck12.org | Nonprofit and civic | United States | Hall of Fame | |
| ClayHRclayhr.com | Company | United States | Hall of Fame | |
| Clearclear.bio | Company | United States | Certificate | |
| ClearTaxcleartax.in | Company | India | Swag | |
| Cleengcleeng.com | Company | Netherlands | Hall of FameBounty | |
| Clinical Support Systemsclinicalsupportsystems.comHTML injection | Company | United States | Hall of Fame | |
| Club Brugge KVclubbrugge.be | Sports | Belgium | Hall of Fame | |
| CM (Belgian Health Insurance)cm.beBroken access control · XSS · Credential exposure | Finance | Belgium | Hall of FameBounty | |
| CoinSwitchcoinswitch.coIDOR · PII exposure · Information disclosure | Finance | India | Hall of FameBounty | |
| CougarBoardcougarboard.comSSRF · Credential exposure · Authentication flaw | Company | United States | Hall of Fame | |
| CreateYourVPNcreateyourvpn.com | Company | United States | Hall of Fame | |
| Danacitadanacita.co.id | Company | Indonesia | Hall of Fame | |
| de Bijenkorfdebijenkorf.nl | Enterprise | Netherlands | Hall of FameBounty | |
| DeHaatagrevolution.in | Company | India | Hall of FameSwag | |
| Department of Foreign Affairs and Tradedfat.gov.auHTML injection | Government | Australia | Hall of Fame | |
| Department of Home Affairshomeaffairs.gov.auInformation disclosure | Government | Australia | Hall of Fame | |
| Dept. of Employment & Workplace Relationsdewr.gov.auHTML injection | Government | Australia | Hall of Fame | |
| Deutsche Börsedeutsche-boerse.com | Finance | Germany | Hall of Fame | |
| Deutscher Maklerverbunddemv.deAuthentication flaw · Session handling · HTML injection | Company | Germany | Hall of FameBounty | |
| DFRNTdfrnt.comBusiness logic flaw · Subdomain takeover · HTML injection | Company | Sweden | Hall of Fame | |
| Digital Transformation Agencydta.gov.auInformation disclosure | Government | Australia | ||
| DNS Privacy Projectdnsprivacy.org.ukPII exposure · Authentication flaw · Memory corruption | Nonprofit and civic | United Kingdom | Hall of Fame | |
| do.de (Domain Registrar)do.de | Company | Germany | Hall of Fame | |
| Dramatifydramatify.comAuthentication flaw · HTML injection | Company | Sweden | Acknowledged | |
| DrayTekdraytek.com | Company | Taiwan | Swag | |
| Drexel Universitydrexel.edu | Education | United States | Hall of FameLetter of appreciation | |
| DSB (Danish State Railways)dsb.dkInformation disclosure | Government | Denmark | Hall of Fame | |
| Easy Cryptoeasycrypto.comSubdomain takeover | Finance | New Zealand | Hall of FameBounty | |
| Easybelleasybell.de | Company | Germany | Hall of FameBounty | |
| Eerlijk Digitaal Onderwijseerlijkdigitaalonderwijs.nl | Education | Netherlands | Hall of Fame | |
| EISCAT Scientific Associationeiscat.se | Education | Sweden | Swag | |
| EITB (Basque Public Broadcaster)eitb.eusSubdomain takeover | Government | Spain | Hall of Fame | |
| Elementselements.nl | Company | Netherlands | Hall of Fame | |
| EMBL-EBI (European Bioinformatics)ebi.ac.uk | Education | United Kingdom | Hall of Fame | |
| Empire Flippersempireflippers.com | Company | United States | Hall of FameBounty | |
| Encreencre.me | Company | Europe (multi country) | Hall of Fame | |
| Escanavescanav.comInformation disclosure | Company | Europe (multi country) | Hall of Fame | |
| eSignesign.eu | Company | Europe (multi country) | Hall of Fame | |
| Essential Energyessentialenergy.com.au | Enterprise | Australia | Hall of Fame | |
| Eterna (Stanford)eternagame.org | Education | United States | Hall of Fame | |
| European Unioneuropa.euPII exposure · HTML injection · Information disclosure | Government | Europe (multi country) | Hall of Fame | |
| Evolu Softwareevolu.software | Company | Europe (multi country) | Hall of Fame | |
| Evri (formerly Hermes)evri.com | Enterprise | United Kingdom | Hall of Fame | |
| Exirioexirio.com | Company | Europe (multi country) | Hall of Fame | |
| Fagerhult Groupfagerhult.seSSRF · HTML injection · Information disclosure | Enterprise | Sweden | Hall of Fame | |
| fairtragenfairtragen.deRemote code execution · Broken access control · XSS | Company | Germany | Hall of Fame | |
| Fatorafatora.io | Company | Bahrain | Hall of Fame | |
| Fazz Financialfazz.com | Finance | Singapore | Hall of FameBounty | |
| FD Mediagroepfdmediagroep.nlAccount takeover · XSS · Credential exposure | Media | Netherlands | Hall of Fame | |
| Flexcomflexcom.deAccount takeover · PII exposure · Exposed service | Company | Germany | Hall of Fame | |
| Fondazione Bruno Kesslerfbk.eu | Education | Italy | Hall of Fame | |
| Free Law Projectfree.lawAccount takeover · XSS · Credential exposure | Nonprofit and civic | United States | Hall of Fame | |
| Freedom Internetfreedom.nl | Company | Netherlands | Hall of FameBounty | |
| Freelance PMfreelanceprojectmanager.be | Company | Belgium | Hall of Fame | |
| Fundamentsfundaments.nlCredential exposure · Information disclosure | Company | Netherlands | Hall of Fame | |
| Fyrfyr.io | Company | Europe (multi country) | Hall of Fame | |
| G DATA CyberDefensegdata.deAccount takeover · Business logic flaw · Credential exposure | Company | Germany | Swag | |
| GajiGesagajigesa.com | Company | Indonesia | Hall of Fame | |
| GB Twentegbtwente.nlHTML injection | Company | Netherlands | Hall of Fame | |
| GEA Groupgea.com | Enterprise | Germany | SwagBounty | |
| GeeksforGeeksgeeksforgeeks.orgAccount takeover · XSS | Company | India | Hall of FameCertificate | |
| Gemeente Katwijkkatwijk.nlInformation disclosure | Government | Netherlands | ||
| GetYourGuidegetyourguide.comAccount takeover · HTML injection | Company | Germany | Hall of FameBounty | |
| GigaPrintgigaprint.cz | Company | Czech Republic | Hall of Fame | |
| GMX (United Internet)gmx.netHTML injection | Company | Germany | Hall of FameBounty | |
| GoKoppagokoppa.comXSS · Session handling · HTML injection | Company | Europe (multi country) | Hall of Fame | |
| Gothickgothick.org.uk | Independent | United Kingdom | Hall of Fame | |
| GrabXgrabx.chXSS · Subdomain takeover · CSRF | Company | Switzerland | Hall of Fame | |
| Hackclusivehackclusive.com | Company | Europe (multi country) | Hall of Fame | |
| HAN University of Applied Scienceshan.nl | Education | Netherlands | Hall of Fame | |
| Handelsblatt Media Grouphandelsblattgroup.comAccount takeover · IDOR · Broken access control | Media | Germany | Hall of Fame | |
| Hanulahanula.me | Independent | Europe (multi country) | Hall of Fame | |
| Hebcalhebcal.com | Company | United States | Hall of Fame | |
| Hemnethemnet.seSession handling · Authentication flaw | Company | Sweden | ||
| Het CAK (Healthcare Admin)hetcak.nl | Government | Netherlands | Hall of Fame | |
| HiGlobehiglobe.comBusiness logic flaw · HTML injection | Company | United States | Hall of Fame | |
| Hippo Videohippovideo.io | Company | India | Hall of Fame | |
| Hochschule Bremenhs-bremen.de | Education | Germany | Hall of Fame | |
| Hochschule Harzhs-harz.de | Education | Germany | Hall of Fame | |
| Hoplrhoplr.com | Company | Belgium | Hall of Fame | |
| HTM (The Hague Transport)htm.nlAuthentication flaw · Session handling | Government | Netherlands | Hall of Fame | |
| Idealoidealo.de | Company | Germany | Swag | |
| Industriutrustningindustriutrustning.seSession handling | Company | Sweden | Hall of Fame | |
| Inflectra Corporationinflectra.com | Company | United States | Hall of Fame | |
| Informatiebeveiligingsdienst (IBD)informatiebeveiligingsdienst.nl | Company | Netherlands | Hall of Fame | |
| inovexinovex.deAccount takeover · XSS · Exposed service | Company | Germany | Hall of Fame | |
| InStrideinstride.ch | Company | Switzerland | Hall of Fame | |
| Intevationintevation.dePII exposure · Authentication flaw · Information disclosure | Company | Germany | Hall of Fame | |
| Intuifaceintuiface.comXSS · Information disclosure | Company | France | Hall of FameBounty | |
| IP Australiaipaustralia.gov.au | Government | Australia | Hall of Fame | |
| IRFU Swedenirfu.seInformation disclosure | Sports | Sweden | Hall of Fame | |
| ISI Federalisifederal.net | Company | United States | Hall of Fame | |
| JavaScript Todayjavascripttoday.com | Company | United States | Swag | |
| KatieThe.Devkatiethe.devExposed service · Information disclosure | Independent | Europe (multi country) | Hall of Fame | |
| KDO (Municipal IT Provider)kdo.deAccount takeover · SSRF | Government | Germany | Hall of Fame | |
| Kedalionkedalion.nl | Company | Netherlands | Hall of Fame | |
| Kindekinde.com | Company | Australia | Hall of FameSwag | |
| Kliksafekliksafe.nl | Company | Netherlands | Hall of Fame | |
| KNAWknaw.nlExposed service · Information disclosure | Education | Netherlands | ||
| Kommunicatekommunicate.ioBusiness logic flaw · Authentication flaw · HTML injection | Company | India | Hall of Fame | |
| La Calle Grouplacallegroup.comAccount takeover · Broken access control · Credential exposure | Company | United States | Hall of Fame | |
| Label Radarlabelradar.com | Company | United States | Hall of Fame | |
| Lainlain.laSent a Steam gift cardXSS · File upload | Company | Europe (multi country) | AcknowledgedGift card | |
| Landsbankilandsbanki.is | Finance | Iceland | Hall of Fame | |
| LeaveWizardleavewizard.com | Company | United Kingdom | Hall of Fame | |
| Lecturiolecturio.comCredential exposure · Session handling · HTML injection | Education | Germany | ||
| Lectus24lectus24.pl | Company | Poland | Hall of Fame | |
| Leiden University Medical Centerlumc.nlInformation disclosure | Education | Netherlands | Hall of Fame | |
| Leuchter AGleuchterag.ch | Company | Switzerland | Hall of Fame | |
| LGlg.comInformation disclosure | Enterprise | South Korea | Hall of Fame | |
| lise GmbHlise.deSSRF · File upload · Information disclosure | Company | Germany | ||
| Lloyd's of Londonlloyds.comInformation disclosure | Finance | United Kingdom | Hall of Fame | |
| Lookalooka.com | Company | Canada | Hall of Fame | |
| Loopcloudloopcloud.com | Company | United Kingdom | Hall of Fame | |
| Loopmastersloopmasters.com | Company | United Kingdom | Hall of Fame | |
| LVPlvp.nlInformation disclosure | Company | Netherlands | ||
| Lyntlynt.cz | Company | Czech Republic | Hall of Fame | |
| Lyrics Indialyricsindia.net | Independent | India | Hall of Fame | |
| Maastricht Universitymaastrichtuniversity.nlInformation disclosure | Education | Netherlands | Certificate | |
| Marelmarel.com | Enterprise | Iceland | Hall of FameBounty | |
| MasterHackersmasterhackers.com | Company | Europe (multi country) | Hall of Fame | |
| MBO Utrechtmboutrecht.nl | Education | Netherlands | Hall of FameBounty | |
| MediaTekmediatek.com | Enterprise | Taiwan | Hall of Fame | |
| Michelinmichelin.com | Enterprise | France | Hall of Fame | |
| MONETA Money Bankmoneta.cz | Finance | Czech Republic | Hall of FameBounty | |
| Municipality of Gooise Merengooisemeren.nl | Government | Netherlands | Hall of Fame | |
| Municipality of Preganziolcomune.preganziol.tv.it | Government | Italy | Hall of Fame | |
| Municipality of Raalteraalte.nl | Government | Netherlands | Swag | |
| Municipality of Súdwest-Fryslânsudwestfryslan.nl | Government | Netherlands | Hall of FameBounty | |
| Municipality of Veereveere.nl | Government | Netherlands | Hall of Fame | |
| Municipality of Westerkwartierwesterkwartier.nl | Government | Netherlands | Hall of Fame | |
| Münster Univ. of Applied Sciencesfh-muenster.deInformation disclosure | Education | Germany | Hall of Fame | |
| MyWagemywage.de | Company | Germany | Hall of Fame | |
| Narrativv AInarrativv.ai | Company | Europe (multi country) | Hall of Fame | |
| NDIS Quality & Safeguards Commissionndiscommission.gov.auInformation disclosure | Government | Australia | Hall of Fame | |
| NDIX (Internet Exchange)ndix.net | Company | Netherlands | Hall of Fame | |
| Nelogicanelogica.com.brMemory corruption | Company | Brazil | Hall of Fame | |
| Neoshareneoshare.de | Company | Germany | Certificate | |
| NetworkAppnetworkapp.comServer-side template injection · HTML injection | Company | Netherlands | Hall of Fame | |
| Netwrixnetwrix.comRemote code execution · Credential exposure | Company | United States | Hall of FameCVEsAcknowledged | |
| NeuRAneura.edu.auInformation disclosure | Education | Australia | ||
| NextAppnextapp.co | Company | Europe (multi country) | Hall of Fame | |
| Nexusnexus.orgInformation disclosure | Nonprofit and civic | United States | Hall of Fame | |
| Nexxwavenexxwave.be | Company | Belgium | Hall of Fame | |
| Nikoniko.eu | Company | Belgium | Hall of Fame | |
| Nitradonitrado.netBroken access control · PII exposure · Authentication flaw | Company | Germany | Hall of FameBounty | |
| Nodasoft / ABCPnodasoft.com | Company | Russia | Hall of Fame | |
| Nokianokia.comRemote code execution · Broken access control · Credential exposure | Enterprise | Finland | Hall of Fame | |
| Nordnetnordnet.se | Finance | Sweden | Hall of Fame | |
| Norkartnorkart.noXSS | Company | Norway | Hall of Fame | |
| Norsk Helsenett (Health Network)nhn.no | Government | Norway | Hall of Fame | |
| Norwegian Directorate of Electionsvalg.no | Government | Norway | Hall of Fame | |
| Notinonotino.com | Enterprise | Czech Republic | Hall of FameBounty | |
| NTU Enterprise (Nanyang Tech)ntucenterprise.sgAccount takeover · Session handling · Information disclosure | Education | Singapore | Hall of Fame | |
| NVIDIAnvidia.comInformation disclosure | Enterprise | United States | ||
| NWO (Dutch Research Council)nwo.nl | Government | Netherlands | Swag | |
| Nykaanykaa.comBroken access control · Authentication flaw · Exposed service | Enterprise | India | Certificate | |
| Oasen (Water Utility)oasen.nl | Company | Netherlands | Hall of Fame | |
| ODAV AGodav.deAccount takeover · Broken access control · Credential exposure | Company | Germany | Hall of Fame | |
| Oliver Maicherbugs.olivermaicher.eu | Independent | Germany | Hall of Fame | |
| OnlineTrionlinetri.com | Company | Netherlands | Hall of Fame | |
| Oracleoracle.com | Enterprise | United States | Hall of Fame | |
| Oro Incoroinc.com | Company | United States | Hall of FameBounty | |
| OtterBoxotterbox.com | Enterprise | United States | Hall of Fame | |
| Paddlepaddle.com | Company | United Kingdom | Hall of Fame | |
| PAO Cloudpaocloud.co.th | Company | Thailand | Hall of Fame | |
| Pareto Securityparetosecurity.comAccount takeover · Broken access control · Authentication flaw | Company | Europe (multi country) | Hall of FameBounty | |
| Pirellipirelli.com | Enterprise | Italy | Swag | |
| Plugin Boutiquepluginboutique.comAccount takeover · IDOR · Broken access control | Company | United Kingdom | Hall of FameBounty | |
| Plum Medienplum-medien.deAccount takeover · CSRF · Memory corruption | Company | Germany | Hall of Fame | |
| PMGpmgnet.de | Company | Germany | Hall of Fame | |
| Polaritypolarity.io | Company | United States | Hall of Fame | |
| Project Admissionprojectadmission.com | Company | United States | Hall of Fame | |
| Proton AG (ProtonMail/VPN)proton.me | Company | Switzerland | Hall of FameBounty | |
| PUBLIQpubliq.beAccount takeover · IDOR · Broken access control | Nonprofit and civic | Belgium | Hall of Fame | |
| Radboud Universityru.nlBroken access control | Education | Netherlands | Hall of Fame | |
| RB Mediarb-media.nl | Media | Netherlands | Hall of FameBounty | |
| Red Hatredhat.comBroken access control · Exposed service · Information disclosure | Enterprise | United States | Hall of Fame | |
| Redeia (Spanish Power Grid)redeia.com | Enterprise | Spain | Hall of Fame | |
| RedVillaredvilla.tech | Company | India | Hall of Fame | |
| Register.si (Domain Registry)register.siXSS · Information disclosure | Government | Slovenia | Acknowledged | |
| Rehiverehive.com | Company | South Africa | Hall of Fame | |
| Rentlyrently.com | Company | United States | Hall of Fame | |
| ReReadyreready.coCredential exposure | Company | United States | Hall of Fame | |
| Resideo Technologiesresideo.com | Enterprise | United States | Hall of Fame | |
| RESOL (Solar Energy)resol.deBusiness logic flaw | Company | Germany | Hall of Fame | |
| Rijk Zwaan (Global Seeds)rijkzwaan.nlAccount takeover · Authentication flaw · Session handling | Enterprise | Netherlands | SwagBounty | |
| Roboinroboin.io | Company | Europe (multi country) | Hall of Fame | |
| Rootnetrootnet.nl | Company | Netherlands | Hall of Fame | |
| Royal Philipsphilips.comPII exposure | Enterprise | Netherlands | Hall of Fame | |
| Ruokaboksiruokaboksi.fiAccount takeover · Broken access control · Subdomain takeover | Company | Finland | Hall of Fame | |
| Safe-Connectsafe-connect.com | Company | Europe (multi country) | Hall of Fame | |
| SBAB Banksbab.se | Finance | Sweden | Hall of Fame | |
| Schuberg Philisschubergphilis.com | Company | Netherlands | Hall of FameBounty | |
| SCO Leidenscoleiden.nl | Education | Netherlands | Hall of Fame | |
| SEFsef.co.za | Company | South Africa | Hall of Fame | |
| SendPulsesendpulse.comSSRF · CSRF · HTML injection | Company | United States | Hall of FameBounty | |
| Senzer (Public Employment)senzer.nl | Government | Netherlands | Hall of Fame | |
| ShellOrbitshellorbit.com | Company | Europe (multi country) | Hall of Fame | |
| Shippitshippit.com | Company | Australia | Hall of Fame | |
| Shiprocketshiprocket.in | Company | India | Swag | |
| Shuttleshuttle.euMemory corruption · Information disclosure | Company | Europe (multi country) | Hall of Fame | |
| Sidersider.nlAccount takeover | Company | Netherlands | Hall of FameBounty | |
| Silfosilfo.nl | Company | Netherlands | Hall of Fame | |
| Simple In/Outsimpleinout.com | Company | United States | Hall of Fame | |
| Simply Made Appssimplymadeapps.com | Company | United States | Hall of Fame | |
| SiteConnectsiteconnect.io | Company | New Zealand | Hall of Fame | |
| Skiprskipr.co | Company | Belgium | Hall of Fame | |
| Skipsoskipso.com | Company | United Kingdom | Hall of Fame | |
| SMSEaglesmseagle.euAccount takeover · Information disclosure | Company | Poland | Hall of Fame | |
| Snap Send Solvesnapsendsolve.comAccount takeover · Authentication flaw · HTML injection | Company | Australia | Hall of Fame | |
| Snel.comsnel.com | Company | Netherlands | Hall of Fame | |
| Sol1sol1.com.au | Company | Australia | Hall of Fame | |
| SP (Socialist Party NL)sp.nl | Nonprofit and civic | Netherlands | Hall of Fame | |
| SparkHiresparkhire.com | Company | United States | Hall of FameBounty | |
| Spartnerspartner.nl | Company | Netherlands | Hall of Fame | |
| Stadtfabrikantenstadtfabrikanten.org | Nonprofit and civic | Germany | Hall of FameBounty | |
| Sticky Passwordstickypassword.comBroken access control · Business logic flaw · Credential exposure | Company | Czech Republic | Hall of Fame | |
| Swedish Medical Products Agencylakemedelsverket.seHTML injection | Government | Sweden | Hall of Fame | |
| Swedish Police Authoritypolisen.seHTML injection · Information disclosure | Government | Sweden | Swag | |
| Swileswile.co | Company | France | Hall of Fame | |
| Sword Healthswordhealth.comHTML injection | Company | United States | Hall of Fame | |
| Tabletop Tournamentstabletoptournaments.net | Company | Europe (multi country) | Hall of Fame | |
| Thalesthales.com | Enterprise | France | Letter of appreciation | |
| Thundersquaredthundersquared.com | Independent | Europe (multi country) | Hall of Fame | |
| TicketBahiaticketbahia.comAccount takeover · Business logic flaw · Session handling | Company | Argentina | ||
| Timeblndrtimeblndr.com | Company | Europe (multi country) | Hall of Fame | |
| TNG Technology Consultingtngtech.comXSS · OAuth flaw · File upload | Company | Germany | Hall of Fame | |
| Todyltodyl.com | Company | United States | Swag | |
| Tolvyntolvyn.ioBusiness logic flaw · Race condition | Company | India | Hall of Fame | |
| Tosiboxtosibox.comInformation disclosure · Broken access control | Company | Finland | Acknowledged | |
| Tosibox (tosi.net)tosi.netInformation disclosure | Company | Finland | Acknowledged | |
| TouchBistrotouchbistro.comHTML injection | Company | Canada | Hall of Fame | |
| TP-Linktp-link.comLetter of appreciation in process | Enterprise | United States | Hall of FameLetter of appreciation | |
| TransferNowtransfernow.netHTML injection | Company | France | Hall of Fame | |
| TRATONtraton.comInformation disclosure | Enterprise | Germany | ||
| Tresorittresorit.com | Company | Switzerland | Hall of FameBounty | |
| Trusted Shopstrustedshops.comCredential exposure · Authentication flaw · Memory corruption | Company | Germany | Hall of FameBounty | |
| TS Shippingts-shipping.com | Company | Europe (multi country) | Hall of Fame | |
| TU Braunschweigtu-braunschweig.de | Education | Germany | Hall of Fame | |
| TU Delfttudelft.nl | Education | Netherlands | Hall of Fame | |
| Tübingen AI Centertuebingen.ai | Education | Germany | Hall of Fame | |
| Tuxis BVtuxis.nlInformation disclosure | Company | Netherlands | ||
| TV4 (Swedish Television)tv4.seSubdomain takeover | Media | Sweden | Hall of Fame | |
| Twingatetwingate.com | Company | United States | Hall of FameBounty | |
| UMC Utrechtumcutrecht.nl | Education | Netherlands | Hall of Fame | |
| UNESCOunesco.org | Government | International | Hall of Fame | |
| Unihackersunihackers.com | Company | Europe (multi country) | Hall of Fame | |
| United Domainsunited-domains.de | Company | Germany | Hall of FameBounty | |
| United Nationsun.orgPII exposure · Information disclosure | Nonprofit and civic | United States | ||
| University of Münsteruni-muenster.de | Education | Germany | Hall of Fame | |
| University of Sheffieldsheffield.ac.ukInformation disclosure | Education | United Kingdom | Hall of Fame | |
| University of Strasbourgunistra.fr | Education | France | Hall of Fame | |
| University of Twenteproto.utwente.nlAuthentication flaw · Session handling · Memory corruption | Education | Netherlands | Hall of Fame | |
| URIportsuriports.com | Company | Netherlands | Hall of Fame | |
| URLDnaurldna.io | Company | Europe (multi country) | Hall of Fame | |
| UWV (Employee Insurance Agency)uwv.nl | Government | Netherlands | Hall of Fame | |
| Vector Cryptovectorcrypto.com | Company | United States | Hall of Fame | |
| Verogetvero.com | Company | Australia | Hall of FameBounty | |
| Vicusvicus.nl | Company | Netherlands | Hall of Fame | |
| Vismavisma.com | Company | Norway | Hall of Fame | |
| VolkerWesselsvolkerwessels.com | Enterprise | Netherlands | Hall of Fame | |
| WarGodswargods.roSession handling | Company | Romania | ||
| We-Triwe-tri.nl | Company | Netherlands | Hall of Fame | |
| Webadorwebador.comServer-side template injection | Company | Netherlands | Hall of FameBounty | |
| Westbury Digitalwestburydigital.com.auInformation disclosure | Company | Australia | Hall of Fame | |
| Wildixwildix.com | Company | Italy | Hall of FameBounty | |
| Windesheim Universitywindesheim.nl | Education | Netherlands | Certificate | |
| Wiz (Cloud Security)wiz.io | Company | United States | Hall of FameBounty | |
| World Health Organizationwho.intXSS · PII exposure · HTML injection | Government | International | Hall of Fame | |
| World of Gameswog.ch | Company | Switzerland | Hall of Fame | |
| Wortellwortell.com | Company | Netherlands | SwagLetter of appreciation | |
| Xasecasexasecase.com | Company | Europe (multi country) | Hall of Fame | |
| Xelionxelion.comInformation disclosure | Company | Netherlands | Hall of Fame | |
| XPDxpd.seInformation disclosure | Company | Sweden | Hall of Fame | |
| Yellow Duckyellowduck.be | Company | Belgium | Hall of Fame | |
| Zazzlezazzle.comSession handling · Information disclosure | Company | United States | Hall of FameBounty | |
| Zeteszetes.com | Company | Belgium | Hall of Fame | |
| Ziegler Groupzieglergroup.com | Company | Germany | Hall of Fame | |
| Ziekenhuis Amstellandziekenhuisamstelland.nl | Healthcare | Netherlands | Hall of Fame | |
| ZKTecozkteco.comCredential exposure · Information disclosure | Company | China | Swag | |
| Zone Collegezonecollege.nl | Education | Netherlands | Hall of Fame | |
| Zuyd Universityzuyd.nl | Education | Netherlands | Hall of Fame |
No listed organization matches that search. It may be one of the programs I can't name yet.