Yearly planning

Bug Bounty Program Budget

Enter how many valid findings you expect in each severity band. The calculator multiplies those counts by your table, then adds a platform fee and a reserve as percentages. The result is a planning envelope, not a quote from a platform.

Expected findings

Critical findings

High findings

Medium findings

Low findings

Platform fee (percent)

Enter 0 if you pay researchers directly.

Reserve (percent)

A buffer above the award total.

Bounty table (USD)

Critical minimum

Critical maximum

High minimum

High maximum

Medium minimum

Medium maximum

Low minimum

Low maximum

Enter expected valid findings for each severity. The estimate updates as you type.

Severity	Count	Low awards	Expected awards	High awards

Examples from this budget

When to use a budget envelope

Use it after the payout table is settled, and you can guess a year’s valid volume. The estimate updates as you type. The low and high columns show what happens if every finding pays the floor or the ceiling. The expected column uses the same rounded geometric mean as the Bug Bounty Calculator. Counts of zero are allowed.

Bug Bounty Program Budget

Expected findings

Planning envelope

Examples from this budget

When to use a budget envelope