bounty-targets-data is a data repository that aggregates bug bounty program scopes from multiple platforms into consolidated, regularly-updated files.
The tool solves the problem of manually tracking eligible targets across fragmented bug bounty platforms. It fetches scope data from Hackerone, Bugcrowd, Federacy, Intigriti, and YesWeHack, then normalizes and publishes it in multiple formats. Users get both simplified lists (domains and wildcards) and raw JSON dumps from each platform, allowing security researchers to quickly identify which targets are in-scope for bounty hunting without visiting each platform individually.
Security researchers and bug bounty hunters should adopt this if they want a single source of truth for target scope data across multiple platforms. It suits projects that need to programmatically access or monitor bounty program eligibility. The tool is particularly valuable for those building scanning tools, automation frameworks, or maintaining their own target lists. The README explicitly notes that wildcard domains may have exclusions, so users must still verify program rules before submitting reports.
The project maintains hourly-updated data dumps with new changes detected every thirty minutes, ensuring scope information stays current as programs add or remove targets. The actual collection and processing logic is maintained in a separate repository, keeping this repository focused purely on serving the data outputs.
