Below is a list of bounties actively being paid by companies you’ll recognize!
AT&T – https://bugbounty.att.com/home.php
Apache – https://www.apache.org/security/
Apple – https://support.apple.com/en-au/HT201220
Avast – https://www.avast.com/bug-bounty
Bugcrowd – https://www.bugcrowd.com/bug-bounty-list/
Cisco – https://www.cisco.com/c/en/us/about/security-center/security-vulnerability-policy.html
Dropbox – https://www.dropbox.com/help/security/report-vulnerability
Facebook – https://www.facebook.com/whitehat/
GitHub – https://bounty.github.com/
Google – https://www.google.com/about/appsecurity/reward-program/
Hackerone – https://hackerone.com/bug-bounty-programs
Intel – Bounty Link: https://security-center.intel.com/BugBountyProgram.aspx
LinkedIn – https://security.linkedin.com/posts/2015/private-bug-bounty-program
Magento – https://magento.com/security
Microsoft – https://technet.microsoft.com/en-us/library/dn425036.aspx
Mozilla – https://www.mozilla.org/en-US/security/bug-bounty/
OpenSSL – https://www.openssl.org/news/vulnerabilities.html
PHP – https://bugs.php.net/report.php?bug_type=Security
Paypal – https://www.paypal.com/us/webapps/mpp/security-tools/reporting-security-issues
Paytm – https://paytm.com/offer/bug-bounty/
Perl – http://perldoc.perl.org/perlsec.html#SECURITY-VULNERABILITY-CONTACT-INFORMATION
Quora – https://engineering.quora.com/Security-Bug-Bounty-Program
Shopify – https://www.shopify.in/whitehat
Snapchat – https://support.snapchat.com/en-US/i-need-help
Starbucks – https://www.starbucks.com/whitehat
Tor Project – Contact security@lists.torproject.org
Twitter – https://support.twitter.com/articles/477159
Uber – https://eng.uber.com/bug-bounty/
Vimeo – https://vimeo.com/about/security
WordPress – https://make.wordpress.org/core/handbook/testing/reporting-bugs/
Yahoo – https://safety.yahoo.com/Security/REPORTING-ISSUES.html
Zomato – https://www.zomato.com/security
awesome article