Browse documentation
bbradar guide
bbradar documentation
Find your next bug bounty program, compare payouts and activity with Pro, explore program History, and set up personal alerts and developer tools.
On this page
Use the public catalog to discover programs and compare rewards. Pro helps you spot changing programs, review their history, explore targets and follow the updates that matter to you.
- Task
- Find programs
- Free access
- Browse platform listings, rewards, tags, program pages, and official policy links.
- With Pro
- Compare available 7/30-day payouts, activity labels, opportunity signals, report counts and submission costs.
- Task
- Compare programs
- Free access
- Preview how many changes BBRadar recorded this week.
- With Pro
- Rank programs by payouts, value, scope, rewards, reports and response in Activity.
- Task
- Plan audit contests
- Free access
- Compare public contest schedules, rewards and languages, and download available calendar events.
- With Pro
- Inspect full program scope, target inventory and program intelligence.
- Task
- Understand scope activity
- Free access
- See aggregate target counts and redacted examples of recent changes.
- With Pro
- Read full target identities, eligibility, target changes, and supported repository events.
- Task
- Review a program’s changes
- Free access
- Explore the program page and History preview.
- With Pro
- Catch up in Overview, then open History to compare scope, rewards, policy and repository updates.
- Task
- Find direct programs
- Free access
- Read the Self-Hosted guide and feature explanation.
- With Pro
- Browse verified Self-Hosted paid programs and optional VDPs.
- Task
- Receive alerts or use data in tools
- Free access
- Review the public setup guides and API reference.
- With Pro
- Connect personal Telegram alerts, shared Discord access, the Pro API, and local MCP.
| Task | Free access | With Pro |
|---|---|---|
| Find programs | Browse platform listings, rewards, tags, program pages, and official policy links. | Compare available 7/30-day payouts, activity labels, opportunity signals, report counts and submission costs. |
| Compare programs | Preview how many changes BBRadar recorded this week. | Rank programs by payouts, value, scope, rewards, reports and response in Activity. |
| Plan audit contests | Compare public contest schedules, rewards and languages, and download available calendar events. | Inspect full program scope, target inventory and program intelligence. |
| Understand scope activity | See aggregate target counts and redacted examples of recent changes. | Read full target identities, eligibility, target changes, and supported repository events. |
| Review a program’s changes | Explore the program page and History preview. | Catch up in Overview, then open History to compare scope, rewards, policy and repository updates. |
| Find direct programs | Read the Self-Hosted guide and feature explanation. | Browse verified Self-Hosted paid programs and optional VDPs. |
| Receive alerts or use data in tools | Review the public setup guides and API reference. | Connect personal Telegram alerts, shared Discord access, the Pro API, and local MCP. |
Start with the account checklist. It takes you from active Pro access to a working alert channel and, if you need automation, a Pro API key.
Open your account
Sign in with Google and confirm the Pro badge appears in Account & Billing.Choose an alert channel
Connect Telegram for personal filtered alerts, Discord for shared Pro server access, or both.Review notification rules
Select the events you want. Repository changes are opt-in, so enable that stream explicitly.Create an API key if needed
Use one key for the Pro API and the local@bbradar/mcpserver.
Sanitized product view
- Target-aware catalog search
- Verified Self-Hosted paid programs and VDPs
- Full active target identities
- Activity rankings for payouts, value, scope, rewards, reports and response
- Activity labels and a Signals panel on every program
- Per-program History with before and after details
- Sorting by payouts, recent updates, high activity and large scope changes
- Program and target opportunity signals
- Latest target-change feed
- Multi-provider repository-change feed
- Personal Telegram rules
- Discord Pro role
- Pro API and local MCP access
- Term
- Bug bounty and VDP
- Meaning
- A paid program advertises a monetary reward, which may have no published amount. A vulnerability disclosure policy (VDP) has no confirmed monetary reward.
- Term
- Self-Hosted
- Meaning
- A security program run directly by an organization. Admission uses first-party program evidence; the linked current policy controls scope and permission.
- Term
- Program opportunity
- Meaning
- A comparative program tier based on available freshness, public report activity, rewards, and scope evidence.
- Term
- Target Intelligence
- Meaning
- A target score, label, factor breakdown, and dupe-risk context, when the source supports those signals.
- Term
- Dupe risk
- Meaning
- An estimate of visible crowding, not a measured probability of a duplicate report. Unknown means evidence is insufficient.
- Term
- Paused program
- Meaning
- A confirmed paused platform listing remains browsable. Retained scope and rewards describe previously published information; current bounty eligibility is disabled.
- Term
- Latest changes
- Meaning
- Recent target updates found across supported programs.
- Term
- Program History
- Meaning
- A timeline beside Targets on each program page, with recorded changes and earlier public updates where available.
- Term
- Activity
- Meaning
- A Pro page that ranks programs by what they paid out, their value, scope and reward changes, reports and response.
- Term
- Activity labels
- Meaning
- Icons that sum up a program at a glance, such as Steady payer, Fresh scope or Rewards increased. Red ones are a heads-up.
- Term
- Signals
- Meaning
- A panel on each program page with its payout rhythm, average payout and value compared with platform peers.
- Term
- Repository baseline
- Meaning
- The starting point for following supported repository updates in the Commits feed.
| Term | Meaning |
|---|---|
| Bug bounty and VDP | A paid program advertises a monetary reward, which may have no published amount. A vulnerability disclosure policy (VDP) has no confirmed monetary reward. |
| Self-Hosted | A security program run directly by an organization. Admission uses first-party program evidence; the linked current policy controls scope and permission. |
| Program opportunity | A comparative program tier based on available freshness, public report activity, rewards, and scope evidence. |
| Target Intelligence | A target score, label, factor breakdown, and dupe-risk context, when the source supports those signals. |
| Dupe risk | An estimate of visible crowding, not a measured probability of a duplicate report. Unknown means evidence is insufficient. |
| Paused program | A confirmed paused platform listing remains browsable. Retained scope and rewards describe previously published information; current bounty eligibility is disabled. |
| Latest changes | Recent target updates found across supported programs. |
| Program History | A timeline beside Targets on each program page, with recorded changes and earlier public updates where available. |
| Activity | A Pro page that ranks programs by what they paid out, their value, scope and reward changes, reports and response. |
| Activity labels | Icons that sum up a program at a glance, such as Steady payer, Fresh scope or Rewards increased. Red ones are a heads-up. |
| Signals | A panel on each program page with its payout rhythm, average payout and value compared with platform peers. |
| Repository baseline | The starting point for following supported repository updates in the Commits feed. |
: the new Activity guide explains every view, label and signal, the Value map and quick ways to find your next program. The Program History guide now focuses on program pages.
: compare available payouts and program changes in Activity. The Program History and activity guide explains its views, payout ranges, period controls and links to program details.
: the contest calendar guide explains public access, filters, UTC deadlines, unconfirmed dates, calendar exports and reward types. The FAQs now cover audit competitions and schedule freshness.
: the API reference now describes paused programs, optional inventory queries, stable snapshots, expiry recovery, and current field types. The MCP guide confirms repository-feed support in version 0.2.3 and identifies remaining HTTP API capabilities.
These are documentation review notes, not program discovery dates or promises of source freshness. Check the authenticated capabilities response and the installed MCP guide for the contract your client uses.