scope

CLI tool that searches live bug bounty program scopes across HackerOne, Bugcrowd, Intigriti, and YesWeHack.

Desktopfreeglobal

scope is a free, open-source CLI tool and curated, auto-updated dataset for checking whether a domain or asset is in scope for a bug bounty program across HackerOne, Bugcrowd, Intigriti, and YesWeHack. Data refreshes every 10 minutes via automated GitHub Actions. It's aimed at bug bounty hunters and security researchers who need to quickly confirm a target is authorized before testing it.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of scope - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim scope to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether scope (or something else) actually fits.

Try a problem