Skyscanner
Skyscanner · Bugcrowd · launch date not exposed by platform
Live public bug bounty program on Bugcrowd with full safe harbor. Max payout $8,000.
Metrics
Beginner fit
72/100
Estimated: this program accepts low-severity findings worth reporting.
Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.
Engage
Open on BugcrowdAlways read the full policy on the platform before submitting. Scope below is a summary only.
In-scope assets
- Skyscanner iOS App
- Skyscanner Android App
- gateway.skyscanner.net/*
- skyscanner.net/hotels/book/*
- skyscanner.net/*
- partnerportal.skyscanner.net/*
- *.skyscanner.net
- Skyscanner Android app
- Skyscanner iOS app
- AWS Infrastructure
Wanted categories
Tech stack
Detected from the program's own description and scope assets — always confirm on the program page before relying on it.
Who should hunt here
Beginners
Workable- 10 assets in scope gives you room to explore without fighting a crowd for the same endpoints.
- Wide attack surface — 10 assets means overlooked corners (old subdomains, staging hosts) are statistically likely.
- Fast feedback — triage lands in ~3 days, so you learn what this team pays for quickly.
Intermediate
Good target- Real ceilings — payouts reach $8.0k, so chaining two medium findings into one report actually pays.
- APIs are in scope — where medium hunters get paid: broken object-level authorization, mass assignment, and rate-limit gaps.
Pros
High value- $8.0k ceiling — worth deep recon and targeted fuzzing; one critical here outearns a month of small programs.
- 10 assets scale well with automation — attack-surface monitoring and diffing pay off at this size.
Think twice if
- Heavily crowded — duplicates arrive within hours; only novel vectors or automation win here.
- Bugcrowd doesn't publish report volume — the competition and fit scores here are conservative estimates, not measurements.
- Program age is unknown — Bugcrowd doesn't expose start dates, so "freshness" can't be verified.
Where these numbers come from
Live from Bugcrowd
- Max payout & safe-harbor status — from the hourly public Bugcrowd crawl
- Full in-scope asset list — crawled from Bugcrowd's public program
Modeled estimates
- Minimum bounty — not exposed; assumed $0 floor
- Report volume — unknown; competition is scored from neutral defaults
- Triage & payout speed — modeled, not measured
- Beginner fit — computed from the signals above (methodology on this page)
Recon launchpad
One-click starting points per asset — certificate history, archived pages, leaked code, and exposed hosts. Open results in their own tabs.
gateway.skyscanner.net
skyscanner.net
partnerportal.skyscanner.net