Company lists · Data refreshed November 2026

Top 21 Bug bounty platforms based in the United States

RevenueBase identified 55 company matches for bug bounty platforms associated with the United States as of November 2026 and tracks 10,815 professional contacts across them, including 1,004 with verified work emails. San Francisco is the largest hub.

This list covers company matches for bug bounty platforms associated with the United States, found by RevenueBase SmartSearch using the meaning of business descriptions in its company graph at Exact. Ranked by professionals tracked, largest first. Rows show recorded descriptions where available, Exact search membership and the snapshot date. Data refreshed November 5, 2026.

Published by RevenueBase, a B2B data infrastructure company. This list was built with RevenueBase SmartSearch, the natural-language company search RevenueBase customers use to build their own targeted lists and unlock verified emails and direct dials at the companies on them. How these lists are built and judged.

How to read this list RevenueBase SmartSearch · Exact Recorded Nov 5, 2026 How this list was built
55Companies
10,815Contacts tracked
1,004Verified emails
Explore this list → Free signup · no credit card · 500 free credits

The 21 largest bug bounty platforms based in the United States

Ranked by team size
Top 21 of 55 company matches for bug bounty platforms based in the United States, ordered by professional contacts tracked in RevenueBase, largest first. Recorded Nov 5, 2026. The RevenueBase SmartSearch column shows Exact match membership in this saved search. Click a contact count to view that company's people. Totals use company locations recorded by RevenueBase; the displayed preview is a smaller selection.
#CompanyRevenueBase SmartSearchHeadquartersEmployeesContacts
1Exact matchSan Francisco, CA, United StatesHQ recorded Nov 5, 2026n/a5,639 contacts →

Exact match

“HackerOne is a global leader in Continuous Threat Exposure Management (CTEM) and the only solution provider that pairs the simultaneous trust of the Fortune 500 and the world's…”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
2Exact matchSan Francisco, CA, United StatesHQ recorded Nov 5, 2026n/a3,342 contacts →

Exact match

“We are a crowdsourced security company that safeguards organizations' assets from sophisticated threat actors before they can strike-by uniting our customers with trusted hackers…”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
3Exact matchAustin, TX, United StatesHQ recorded Nov 5, 2026n/a693 contacts →

Exact match

“The Synack Red Team is a private freelance security research team that spans 6 continents and over 80 countries.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
4Exact matchWilmington, DE, United StatesHQ recorded Nov 5, 2026n/a417 contacts →

Exact match

“The Open Worldwide Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of software.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
5Exact matchLexington, MA, United StatesHQ recorded Nov 5, 202651-20088 contacts →

Exact match

“VulnCheck helps organizations outpace adversaries with exploit intelligence that predicts avenues of attack with speed and accuracy.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
6Exact matchCulver City, CA, United StatesHQ recorded Nov 5, 202611-5057 contacts →

Exact match

“Inspectiv is an all-in-one application security testing platform that simplifies the process of discovering, validating, and remediating vulnerabilities.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
7Exact matchNew York, United StatesHQ recorded Nov 5, 202611-5056 contacts →

Exact match

“Seal Security’s AppSec Remediation Agent delivers real, human-vetted, production-ready fixes for open source vulnerabilities - resolving risk directly in your applications without…”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
8Exact matchAustin, TX, United StatesHQ recorded Nov 5, 202611-5052 contacts →

Exact match

“Our team of world-class reverse engineers discovers exploitable critical vulnerabilities in common commercial software and hardware BEFORE they can be manipulated by attackers.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
9Exact matchSan Francisco, CA, United StatesHQ recorded Nov 5, 202611-5047 contacts →

Exact match

“Software ships daily.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
10Exact matchSeattle, WA, United StatesHQ recorded Nov 5, 20261-1017 contacts →

Exact match

“Staris is a product security validation platform that continuously discovers, proves, and helps remediate real exploitable vulnerabilities in modern applications.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
11Exact matchAnnapolis, MD, United StatesHQ recorded Nov 5, 202611-5011 contacts →

Exact match

“In 2004, we founded KoreLogic to build an IT security company that was respected for the quality of its work and the caliber of our staff.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
12Exact matchSan Francisco, CA, United StatesHQ recorded Nov 5, 202611-509 contacts →

Exact match

“Founded by security engineers from Tesla and Google, ZeroPath empowers developers to ship secure code faster.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
13Exact matchSan Francisco, CA, United StatesHQ recorded Nov 5, 20261-108 contacts →

Exact match

“Federacy is a bug bounty platform for startups.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
14Exact matchSuite 133, United StatesHQ recorded Nov 5, 20261-107 contacts →

Exact match

“Founded in 2022, Amplify Security is building the first agentic security harness for Security Engineers.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
15Exact matchWilmington, DE, United StatesHQ recorded Nov 5, 202611-506 contacts →

Exact match

“Vulners is a vulnerability database with an API.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
16Exact matchNew York, NY, United StatesHQ recorded Nov 5, 20261-104 contacts →

Exact match

“Pensar equips security teams with AI-powered tools to defend their identity and access perimeter.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
17Exact matchKirkland, WA, United StatesHQ recorded Nov 5, 20261-103 contacts →

Exact match

“Luta Security is transforming the way governments and organizations are managing people, processes, and technology to improve vulnerability coordination and security overall.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
18Exact matchSan Francisco, United StatesHQ recorded Nov 5, 20261-102 contacts →

Exact match

“Our vision is a healthy and ubiquitous Internet Immune System.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
19Exact matchReno, NV, United StatesHQ recorded Nov 5, 20261-102 contacts →

Exact match

“We are a Cyber Security Testing as Service company that provides a platform to monitor and test security posture of your online presence and deliver real-time insights…”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
20Exact matchTroy, NY, United StatesHQ recorded Nov 5, 20261-102 contacts →

Exact match

“RET2 is a computer security research firm founded in 2017.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase
21Exact matchOakdale, MD, United StatesHQ recorded Nov 5, 20261-101 contacts →

Exact match

“3Flatline is the next evolution in bug hunting platforms that is better, faster, and more accurate than traditional methods.”

Recorded in the RevenueBase company graph · Nov 5, 2026 · View company records in RevenueBase

Showing 21 of 55 bug bounty platforms based in the United States

See the full list, filter by size, metro and specialty, and access 1,004 tracked professional contacts with verified work emails. Direct dials are available where recorded.

Free signup · no credit card

View the full list →

Bug bounty platforms based in the United States at a glance

As of Nov 5, 2026
9.3%Verified-email coverage
196.6Average contacts per company
1-10Median size (employees)
12.7%Largest-city concentration · San Francisco
Nov 5, 2026Page data refreshed

Companies by employee count

1-10
32
11-50
18
51-200
3
201-500
2

Email recency for this list is measured worldwide rather than for United States, so it is reported there. Company counts and contact totals on this page are exact for United States, over 55 companies.

How this list was built

The recorded descriptions help you assess these company matches. Check a company’s website for its current services and locations.

Source
The RevenueBase company graph: 60 million companies and 398.9 million professional contacts resolved from primary sources, queried with RevenueBase SmartSearch, the natural-language company search available to every RevenueBase user.
What qualifies
Company records associated with the United States whose business descriptions match “bug bounty platforms” by meaning at the Exact setting. Descriptions are compiled in the RevenueBase company graph from public websites, profiles and company information where available; they are not guaranteed quotations from the company's website.
RevenueBase SmartSearch
Describe a niche company in your own words to find businesses by meaning. Exact, Similar, Related and Broad control the breadth of RevenueBase SmartSearch. This saved list uses Exact. Each row's Exact match badge shows inclusion in that search, not an individual score or a service-quality judgment.
Public preview
The public preview omits records without a verified work email. Where headquarters information is recorded, preview rows are also filtered to this page’s location. Dataset totals and geographic summaries describe the full matched records before these preview filters.
Match quality
RevenueBase's August 25, 2026 study assessed 4,198 description/company pairs across matching settings. The publisher reports 86% good or better at Exact. This evaluates the method across queries; it does not audit this individual list. Recorded company descriptions, where available, help you judge each match yourself. Read the full methodology: how the lists are built and what the study measures.
Ranking
Team size, largest first: companies are ordered by the number of professionals RevenueBase tracks at each one. Employee ranges shown are reported bands, for context.
Verification
Every displayed company carries at least one verified work email. RevenueBase tracks 1,004 professional contacts with verified work emails across the full matched dataset. Contacts re-verify on a rolling cadence, and each contact's own verification date is shown inside RevenueBase.
Refresh
This page's figures were pulled from the company graph on November 5, 2026. Lists refresh periodically as the graph is re-checked.
Record context
Company records and descriptions can change. Check the company's website for its current services and locations.

Frequently asked

What is RevenueBase SmartSearch?

RevenueBase SmartSearch finds niche companies by the meaning of their business descriptions in the RevenueBase company graph. Exact, Similar, Related and Broad control how closely companies must fit your description. This list uses Exact for “bug bounty platforms”; each Exact match badge shows search membership, not an individual similarity or quality score.

How many bug bounty platforms are there based in the United States?

RevenueBase identified 55 company matches for bug bounty platforms associated with the United States as of November 2026, using the meaning of business descriptions at Exact. This is the recorded matched set in the RevenueBase company graph.

What is the largest company on this list?

Hackerone tops the displayed preview by professional contacts tracked in RevenueBase. Recorded headquarters appear in the company rows.

Which city has the most bug bounty platforms?

San Francisco leads with 7 company records, followed by New York (5) and Austin (4).

How do I get contact information for these companies?

A free RevenueBase account lets you run this exact search and work limited free results with 500 credits to start. Upgrading provides access to the 1,004 professional contacts with verified work emails tracked across these 55 companies; direct dials are available where recorded.

How current is this list?

The list refreshes periodically as the company graph is re-checked. This page's figures were pulled on November 5, 2026.

Ready to reach these companies? Verified emails and direct dials for all 55 bug bounty platforms based in the United States. Start with a free account, no credit card.

Download this list →

Related lists

About this data

RevenueBase is a B2B data infrastructure company. Its company graph covers 60 million companies and 398.9 million professional contacts, with emails verified on a rolling cadence rather than scraped once and left to decay. These company lists are generated directly from that graph with RevenueBase SmartSearch, the same natural-language company search every RevenueBase user has: describe a market in plain words, get the companies that match, and add verified emails and direct dials for the people at them. It is the same data that powers RevenueBase's B2B data products, and a free account includes 500 credits to start. How these lists are built and judged.