BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.
Programs / hostinger

In brief. hostinger is a bug bounty program on HackerOne. Its critical reports have paid an average of $10,556 across 63 reports (HackerOne figures, November 8, 2026). It received 450 reports in the 90 days to November 8, 2026, about 15 per in-scope asset. As of Nov 8, 2026. Markdown for agents

NR Unrated

hostinger

hostinger HackerOne
3 more reviews needed for a grade
Write a review
Program page hackerone.com ↗
Claim this company profile

Work at hostinger? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Program metrics HackerOne, published

These are HackerOne’s own figures for this program, taken from its public page. Researchers did not report them, and they don't count toward the BugRater grade. Captured 8 Nov 2026.

What it pays, by severity

Critical $10,556 avg 63 reports firm
High $2,856 avg 237 reports firm
Medium $727 avg 318 reports firm
Low $200 avg 406 reports firm

$1,432,821 paid to researchers in total, $383,706 of it in the last 90 days. This is HackerOne’s lifetime figure. It shows the program has paid out before. It doesn't tell you what any one report will get.

Intake & responsiveness, last 90 days

Reports received
450
in 90 days
Resolved
1,041
all time, last one yesterday
Participants
374
hunters engaged
Response efficiency
100%
meeting its targets, HackerOne’s figure
SLA misses
0
targets missed
Reports received, day by day, last 30 days 409–450
9 Oct 450 reports 8 Nov

Response targets it sets itself

First response
2 days
Triage
7 days
Bounty
14 days
Resolution
30 days

These are targets the program set. They don't show whether it meets them.

Barriers to submitting

Open to submit. HackerOne lists no requirements for submitting a report here.

Over 78 days (54 snapshots): intake up 1 reports; 90-day payout up $213,152.

See how this program’s report load compares to others

Reviews

0 published

No reviews yet.

Be the first to review

Who this program credits

392 credited

Researchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.

# Researcher Reputation Recognised / submitted
1 kevin_mizu 4,571 103 / 110 94%
2 tsyogesh40 2,658 112 / 169 66%
3 aziz0x48 1,679 78 / 126 62%
3 thezodd 1,477 26 / 28 93%
4 mwhx-404 1,624 82 / 107 77%
5 lucvs 1,222 17 / 19 89%
6 guga_ 1,056 22 / 22 100%
7 captn0sharky1 844 50 / 114 44%
8 iankitkapoor01 687 37 / 79 47%
9 taise 658 16 / 18 89%
10 rdzsp 601 26 / 43 60%
11 aituglo 576 15 / 16 94%
12 tosun 556 19 / 22 86%
13 widgeon 532 12 / 13 92%
14 s7sh4rk 466 26 / 51 51%
15 0xpwnsec 464 30 / 62 48%
15 b5a2991d2419c16cc8c39aa 314 13 / 15 87%
16 dgrindle 463 17 / 19 89%
17 goisneto 408 7 / 7 100%
18 prkz 389 19 / 21 90%
19 andriiua 354 6 / 6 100%
20 bughuntar 295 15 / 24 63%
21 yashrs 230 11 / 17 65%
22 lerkas 220 9 / 11 82%
22 bughacher 168 0 / 0

Showing the top 25 of 392 credited on HackerOne.

Program profile HackerOne, imported

HackerOne published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 6 Nov 2026.

Responsiveness
100% HackerOne’s figure
Swag
No
Currency
USD
Submissions
Open
Launched
Jan 2024
Scope entries
31 HackerOne’s count

Scope

34 assets
AssetTypeEligibilityMax severity
*.000webhost.com WILDCARD ✓ bounty Critical
affiliates.zyro.com URL ✓ bounty Critical
agents.hostinger.com URL ✓ bounty Critical
ai-builder.hostinger.com URL ✓ bounty Critical
backend.zyro.com URL ✓ bounty Critical
Show all 34 assets
AssetTypeEligibilityMax severity
builder.hostinger.com URL ✓ bounty Critical
cpanel.hosting24.com URL ✓ bounty Critical
cpanel.hostinger.com URL ✓ bounty Critical
ecommerce.hostinger.com URL ✓ bounty Critical
editor.zyro.com URL ✓ bounty Critical
H5G OTHER ✓ bounty Critical
H5G/Agency OTHER ✓ bounty Critical
horizons.hostinger.com URL ✓ bounty Critical
hostinger.com URL ✓ bounty Critical
hpanel.hosting24.com URL ✓ bounty Critical
hpanel.hostinger.com URL ✓ bounty Critical
http://mail.hostinger.com/v2 URL ✓ bounty Critical
http://payments.hostinger.com URL ✓ bounty Critical
logo.zyro.com URL ✓ bounty Critical
mail.hostinger.com OTHER ✓ bounty Critical
mail.hostinger.com/v2 OTHER ✓ bounty Critical
Managed OpenClaw OTHER ✓ bounty Critical
panel.niagahoster.co.id URL ✓ bounty Critical
partner.niagahoster.co.id URL ✓ bounty Critical
payments.hosting24.com URL ✓ bounty Critical
payments.hostinger.com URL ✓ bounty Critical
payments.zyro.com URL ✓ bounty Critical
reach.hostinger.com URL ✓ bounty Critical
support.zyro.com URL ✓ bounty Critical
tracking.zyro.com URL ✓ bounty Critical
www.hosting24.com URL ✓ bounty Critical
www.hostinger.com URL ✓ bounty Critical
www.niagahoster.co.id URL ✓ bounty Critical
www.zyro.com URL ✓ bounty Critical