I built a site that maps the web from a bounty hunter's perspective
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
I built this because I wanted my own directory of public companies running bug bounty programs — where I could see their infrastructure in one place and have a real idea of where to start poking holes.Neobotnet collects intel data from companies on HackerOne and Bugcrowd — subdomains, DNS records, web servers with status codes, indexed/crawled URLs, JS files, and exposed secrets/paths (still building this last part). The data is already there when you need it. No scans to run.Currently tracking 41 companies, 63,878 web servers, and 1.8M+ URLs.Long term I want to expand this to startups that depend on cloud infrastructure so they can see what's publicly accessible.Made a free sample with Capital One's data (and other companies) so you can see what it looks like without signing up: https://freerecon.comOriginal Page: https://neobotnet.comFeedback very welcome.
HN · launched Mar 23, 2026 · 46 upvotes (top 17%) · 0 views
Niche: cyber threat intelligence platforms · 66 launches, 4 in the last 7 days ▼ -56% · Explore this niche →
Category and tags
- Security
- Analytics & BI
- Developer
- Not AI
- Hobby / open-source project
Visit website ↗ Source listing ↗
More like this: all 66 launches in cyber threat intelligence platforms →
Could you build this?
Partial The web frontend and company directory are straightforward to build, but collecting and continuously updating reconnaissance data across thousands of bug bounty targets requires a complex distributed scanning pipeline.
What it would actually take: A complete implementation requires a pipeline using tools like sublist3r, amass, httpx, and Nuclei running on worker queues (Celery/Temporal) to scan DNS records, crawl URLs, and flag vulnerability patterns across thousands of hosts. The hard part is building rate-limiting, IP rotation, and continuous parsing infrastructure that avoids getting blocked while handling millions of scan points without massive AWS bills. It demands security reconnaissance experience and distributed data ingestion architecture.
Discussion
9 comments analyzed.
Competitors mentioned: Shodan API, Mitigata bug bounty platform
Concerns raised: Fake scarcity strategy alienates technical audience, Unclear long-term value proposition vs. Shodan, Limited differentiation from commodity scanners, URL data lacks actionable insights for security teams
Feature requests: JavaScript and API reconnaissance capabilities, Detection of sensitive parameters in URLs, Identification of services with default credentials, Client-side vulnerability detection
Competitors
Other products that read as similar to this one : 216 launches clear the similarity bar, closest 8 shown.
Attention rank: #51 of 217 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 142 days after the earliest competitor.
- Open database tracking 77K public DNS servers every 10 minutes · hn · 2025-12-18 · 7 upvotes · similarity 0.46
- StackScope · hn · 2026-06-12 · 67 upvotes · similarity 0.46
- Browse Internet Infrastructure · hn · 2026-02-09 · 110 upvotes · similarity 0.45
- SpotStartup · ph · 2026-09-22 · 2 upvotes · similarity 0.43
- bugbounty.fyi · ph · 2026-11-13 · 3 upvotes · similarity 0.43
- Crustdata (YC F24) · hn · 2026-02-25 · 10 upvotes · similarity 0.43
- I built an interactive map of jobs at top AI companies · hn · 2025-11-24 · 16 upvotes · similarity 0.42
- We post-trained a model that pen tests instead of refusing · hn · 2026-06-20 · 93 upvotes · similarity 0.42
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.