The leaderboard
One number per researcher, worked out from the bug bounty accounts they have verified on HackerOne and Bugcrowd. It counts how much you found and how often the reports held up.
How the score works
Each platform can add up to 1,000 points, so the highest possible score is 2,000. The scale is logarithmic, which means going from ten reports to a hundred is worth much more than going from a thousand to eleven hundred. Where a platform publishes an accuracy figure, that nudges the number up or down. GitHub stars, write-ups and follower counts do not enter into it.
A platform starts counting once you verify the account, which takes one email code. Anyone can type a stranger’s handle into their settings, so a claim nobody has proven earns nothing. It still shows up on that platform’s own tab, because that tab reports what the platform says rather than what we make of it.
Only Overall is ranked by HS. Each platform tab uses that platform’s own figure exactly as published: reputation on HackerOne, valid findings on Bugcrowd.
