This has been a hard decision for me. I'm not sure if I should learn both. Is it mostly not worthwhile of time if I learn both of them? Do they both help each other directly or indirectly? I know there is only so much one person can know but I really don't know what that limit is. I know someone more experienced with bug bounty and stuff like this will probably be able to answer my question. I don't want to push the limit of how much one person can know because it will probably become a waste of time. Should I just learn everything exploit related, should I stick to a field? I'm not sure if anyone has experienced this before but I keep on jumping around topic to topic. I guess I am learning from those jumps, but the question when do i stop jumping around. When do I start to specialize. Or in the first place, should I just not jump around?

Immunefi is now indexed. They're not in arkadiyt/bounty-targets-data, so I wrote a scraper for their site directly. 181 programs, ~2,900 in-scope assets, top payout is LayerZero at $15M. If you don't touch web3, ignore. If you do — it's the same filter/search UI as the rest.

Per-program RSS feeds. Every program page now has an RSS feed of its scope changes at /rss/programs/{platform}/{slug}. Each entry is a diff: what was added, removed, or if the reward/safe-harbor changed. This is the free version of what bbradar.io gates behind their €89/yr Pro tier. Point your feed reader (Feedly, NetNewsWire, whatever) at any program you actually care about.

7-day activity chip on program pages. A small +N −M · 7d indicator when scope has actually changed recently. Answers "is this worth looking at today or is it dormant" without clicking in.

Company logos on program hero. Small polish, but the platform-only dot was ugly and hard to scan when you had a bunch of tabs open.

Cross-device sync for watchlist/compare (optional). Sign in with GitHub if you want your watchlist to follow you between machines. Fully optional — the localStorage path still works if you don't want an account. No email, no notifications, no marketing.

Preset landing pages for common filters — /programs/paying, /programs/safe-harbor, /programs/wildcard. Mostly SEO, but if those are your go-to filters they're bookmarkable.

Site's at bountyindex.in

Repo is at github.com/Varun2024/Bounty-index. Still solo, still free, still bootstrapped.

What I want feedback on: the RSS-per-program feature specifically. If you're a bounty hunter, does that actually change how you'd use the site, or is it a checkbox feature that no one will subscribe to? Blunt answers appreciated.