Market analytics.
What the radar data implies about where the money is and where the crowd isn't. Medians, not averages, so one $2M ceiling doesn't distort a row. Everything comes from the same 24h platform refresh as the rest of the site.
Active programs
515
405 with bounties
Median max bounty
$3.8k
paid programs only
Median triage
3d
lower is better
Measured activity
7%
expose real report volume
By competition level
The trade-off curve: quieter programs pay less on median but give beginners a real shot. Crowding = median reports per in-scope asset.
Low
14 programs$5.0k
median max bounty
Medium
63 programs$4.5k
median max bounty
High
438 programs$3.5k
median max bounty
By platform
Where triage and payouts move fastest. Measured = share of programs with real (not estimated) activity.
| Platform | Programs | Median max bounty | Triage | First bounty | Measured |
|---|---|---|---|---|---|
| Intigriti | 79 | $4.3k | 3d | 21d | 0% |
| Bugcrowd | 292 | $3.6k | 3d | 21d | 0% |
| YesWeHack | 34 | $3.0k | 1d | 21d | 100% |
| HackerOne | 110 | $0 | 3d | 21d | 0% |
By asset type
Where scope lives and what it pays.
iot
$5.0k
0 reports/asset · 13 programs
api
$4.5k
0 reports/asset · 307 programs
web
$3.8k
0 reports/asset · 512 programs
Medians across active programs listing each class/asset; bounty stats use paid programs only. Report-volume figures are marked as conservative estimates where platforms don't expose them.