# HeroCoders Apps: bug bounty program on Bugcrowd

> HeroCoders Apps is a bug bounty program on Bugcrowd. Bounties range from $100 to $1,500. 7 assets are listed in scope, 7 of them bounty-eligible.

- **Company:** HeroCoders Apps
- **Platform:** Bugcrowd
- **Program page:** /engagements/herocoders
- **Pays bounties:** yes
- **Submissions:** open
- **Bounty range:** $100 to $1,500
- **BugRater grade:** not graded yet (fewer than three reviewers)
- **BugRater page:** https://bugrater.com/programs/herocoders

## Scope

As imported from Bugcrowd on November 6, 2026: 7 assets in scope (7 bounty-eligible), 0 out of scope. The policy page is the authority.

- `Acceptance Criteria for Jira (Free) - https://marketplace.atlassian.com/apps/1223139/acceptance-criteria-for-jira-free?hosting=cloud` (website): in scope, bounty-eligible
- `Checklists for Jira (Enterprise) by HeroCoders - https://marketplace.atlassian.com/apps/1211562/checklists-for-jira-enterprise-by-herocoders?tab=overview&hosting=cloud` (website): in scope, bounty-eligible
- `Checklists for Jira (Free) by HeroCoders - https://marketplace.atlassian.com/apps/1220209/checklists-for-jira-free-by-herocoders?hosting=cloud` (website): in scope, bounty-eligible
- `Checklists for Jira (Pro) by HeroCoders - https://marketplace.atlassian.com/apps/1213231/checklists-for-jira-pro-by-herocoders?hosting=cloud` (website): in scope, bounty-eligible
- `Clockwork Lite Time Tracker - https://marketplace.atlassian.com/apps/1220750/clockwork-lite-time-tracker-time-tracking-and-timesheets?hosting=cloud` (website): in scope, bounty-eligible
- `Clockwork Pro for Jira Time Tracking and Timesheets - https://marketplace.atlassian.com/apps/1219213/clockwork-pro-for-jira-time-tracking-and-timesheets?hosting=cloud` (website): in scope, bounty-eligible
- `Portfolio by HeroCoders - https://marketplace.atlassian.com/apps/1220137/portfolio-by-herocoders-structure-ppm-for-jira-capacity?tab=overview&hosting=cloud` (website): in scope, bounty-eligible

---

Generated November 8, 2026 from BugRater data. Platform figures are the platform's own; grades and reviews are BugRater's. Agents can check targets against this scope with the check_scope tool at https://bugrater.com/mcp.