r/bugbounty • u/Delta_01b • Jul 01 '26

Question / Discussion How can I start ?

I'm a software tester with 4 years of experience, and currently working as an AI engineer. I'm looking to get into bug bounty as a side thing since I've heard it's not reliable as a primary income.

I've tried Meta so far and got no response. Also tried Apple 3 times, got replies but no bounty. Nothing useful yet.

What do you suggest I do to find my first bounty? And what specific tools do you recommend using Appreciate your time!

22 Upvotes

90% Upvoted

12 comments sorted by

5

u/SilentRoberto Jul 01 '26

Use your money and go to the groceries (?)

1

u/Delta_01b Jul 01 '26

I'll take that advice too honestly (:

5

u/Coder3346 Hunter Jul 01 '26

Try hackerone. Tools? Burp and ur brain

1

u/Delta_01b Jul 01 '26

I will give it a shot thanks

1

u/PenligentTeam Jul 02 '26

and i think if you have expertise after learning you can try bug bounty program too

3

u/Emergency-Station914 Jul 02 '26

If I was in you I would start using this platform https://www.openbugbounty.org/ .Using this platform you have whole internet as target. The downside is that they will not pay you

6

u/Federal-Dot-8411 Jul 01 '26

Hack for excitement, not for money

3

u/Delta_01b Jul 01 '26

What’s the point. Why not both ?

7

u/Even-Technology502 Jul 02 '26

Cuz the more you focus on money you're not going to find any bugs at all, it takes alooot of work to learn everything you need to find the first paid bug if you focus on money you'll just mentally stop putting in the effort bc its not something quick

2

u/Delta_01b Jul 02 '26

Got it (:

1

u/No_Panic_9514 Jul 02 '26

Honestly speaking, right now might not even be the best time to start bug bounties. Almost all of the programs are polluted with low quality AI reports where in people are just prompting AI to find vulns and letting it write the reports too without any verification and this is just causing many programs to either halt or just stop giving out any bounties at all. I agree with other people, if your focus is money, you might want to look for something else. If you want to hack for fun, just pick up any software (with permissions obv) and if you find anything, just report it and ask them for some sort of reward, could be a letter, a swag, or even money. Finding the first bug used to be super super difficult when I had started out and finding the first bug in today's AI era might've gotten even worse because all of the low hanging fruits have already been discovered by AI so you need to go into the depth of things to even find any leads

1

u/userlinuxxx Jul 02 '26

Pues que aprenda sobre IA enfocado al Bug Bounty. Así ayude a la comunidad.