Getting started

BountyHunt watches bug-bounty scope so you don't have to — programs, in-scope code, and every change, in one feed.

What BountyHunt does

BountyHunt continuously tracks bug-bounty programs and audit competitions across Sherlock, Cantina, Immunefi, HackenProof, HackerOne, and Code4rena. For every program it catalogs the in-scope assets (git repos, web targets, contracts) and monitors them for activity — new commits, pull requests, releases, tags, and scope changes — so you see what changed the moment it changes.

  1. Watch the programs you hunt

    Browse Bounty Programs, filter by platform or type, and hit the star on the ones you care about. Watched programs power the Watching filter everywhere else.

  2. Follow the activity feed

    Activity is the live feed: commits, PRs, releases, new assets, contest openings, and published audits. Filter by kind, platform, program, or time window — or flip to Watching to see only your programs.

  3. Get pushed, not pulled

    Set up webhooks to receive events on your own endpoint, connect an agent over MCP, or use the REST API directly. Pro members can also link Telegram alerts.

Pages at a glance

  • Activity — everything that happened, newest first.
  • Bounty Programs — the program catalog; star to watch.
  • Bounty Assets — every in-scope repo, web target, and contract.
  • Audit Reports — published audits from external firms (Pro).
  • Webhooks — push events to your own endpoints (Pro).
  • API keys — credentials for the REST API and MCP (Pro).

Free vs Pro

Every new account can start a 7-day free Pro trial from Billing — add a card, cancel anytime before the trial ends and you won’t be charged.

  • Free — full program and asset catalog, activity from the last 24 hours.
  • Pro — full activity history, higher rate limits, webhooks, API keys, audit reports, MCP tool access, and Telegram alerts.

Upgrade any time from Billing.