Find better bug bounty opportunities, sooner.

Sign in with Google and choose monthly or yearly billing. Once Pro is active, open a program’s Targets or History tab, or connect Telegram and save a notification rule. API and MCP setup are optional, and the public setup guides are available before you buy.

bbradar’s program aggregation covers 25 platforms. Pro builds on that coverage with opportunity signals, submission-cost visibility and sorting, deeper target tooling, alert delivery and integrations. Programs without a detected submission cost are currently treated as free; other source-dependent metadata is shown where available.

Self-Hosted means programs published directly on organizations’ own websites. Admission requires first-party program evidence; paid classification also requires explicit monetary-reward evidence. Optional VDPs are hidden and excluded from alerts by default. Profiles link to official policies and reporting routes, with rewards and structured targets where available. Always confirm the organization’s current rules before testing.

Open a platform or Self-Hosted program and choose History beside Targets. Pro shows recorded changes with before-and-after values, source links and UTC detection times. Search and date or category filters help narrow the timeline. Public program pages show a compact preview without detailed event identities.

History begins when tracking starts; older changes are not backfilled. The first accepted observation sets a baseline, and later detected changes can cover scope, rewards, rules, program details and repository refs. Available fields vary by source, and polling can miss changes between checks. The tracking date and coverage notice explain what is available for each program.

Programs and scope are checked on source-dependent schedules. Detection time can differ from the time a program or target was originally published, and some fields are only available from certain sources. Check the displayed timestamps and the official program page when making research decisions.

Program and target scores summarize available signals to help you prioritize research. Pro shows the tier or label, factor breakdown, estimated competition and a “Why This Target” explanation. These estimates do not predict whether a finding will be unique, accepted or paid.

Telegram is a private one-to-one delivery channel that uses your personal notification rules. Discord provides shared Pro roles and channels; personal rules do not customize the shared Discord feed.

The target explorer supports search plus platform, tag, language, target type, eligibility/scope/removal state, minimum score, label and risk filters. You can copy individual targets or export filtered/current results to .txt, including 5, 10 or 50-row page sizes.

bbradar follows supported public repositories found in program scope and reports changes detected after the initial baseline. History keeps repository refs, before-and-after SHAs and source context, with provider links for comparison. Source code, patches, commit messages and changed file paths are not stored. Repository coverage and available branches vary by provider.

Both billing options include the Pro API and MCP access for supported program, opportunity, target and repository-feed data. Program History is a web feature and does not add API-key or MCP endpoints. API use has documented per-user, per-key and concurrency limits. The @bbradar/mcp package connects compatible AI clients through a local server and requires Node.js 20 or newer.

There is no free trial. Subscriptions renew automatically until canceled. Payments are not refunded for partial periods or unused time, except where required by law. You can read the public guides and illustrative previews before subscribing.

Yes. You can cancel from your account at any time, and access remains active through the paid billing period. Checkout is securely handled by Stripe, with VAT handled by Stripe where applicable.