Software Testing & Cybersecurity

Synack Red Team Security

Join Synack's elite Red Team of vetted security researchers. Higher payouts and exclusive targets with a trusted, managed platform.

Applause

The enterprise parent of uTest — Applause connects skilled QA testers with Fortune 500 companies for real-world testing projects. Higher-paying projects for experienced testers.

Ferpection Mobile App Testing

Test mobile apps and websites from a real user's perspective. European-based platform with focus on qualitative user feedback.

PlaytestCloud Game Testing

Play unreleased mobile games and earn money providing feedback. Record your gameplay and thoughts to help game developers improve their products.

Rainforest QA

Rainforest QA is a distributed platform that bridges the gap between automated testing and human verification. It provides companies with on-demand access to a global network of manual testers who perform repetitive, script-based functional tests. The platform is best suited for individuals seeking entry-level technical work that does not require prior coding knowledge or professional QA experience. Users earn money by accepting 'jobs'—short sequences of instructions—and reporting whether the software behaves as expected or encounters an error. Unlike high-level penetration testing, this work is highly structured and task-oriented. Typical commitment is flexible, as testers can choose tasks whenever they are available, though work volume fluctuates based on client demand. Key requirements include a reliable computer, a stable internet connection, and the ability to follow precise English instructions without deviation. Compensation generally ranges from $8 to $15 per hour, depending on the tester's speed and the complexity of the specific test suites assigned.

Testbirds Global QA

German crowdtesting platform. Remote usability, functional, and localization testing globally.

Global App Testing

Global App Testing is a crowdsourced platform specializing in QA and functional testing for global brands. It allows freelance testers to verify software performance on real devices under real-world conditions. The platform is particularly suited for individuals with strong attention to detail and those looking to enter the field of software quality assurance. Users earn income primarily through a performance-based model, where payments are issued for each unique, validated bug discovered during a testing cycle. Test cycles are typically short-term and project-based, allowing for a high degree of flexibility; there are no fixed hours or long-term commitments required. To participate, users must have access to modern hardware, such as smartphones or laptops, and a stable internet connection. While categorized as beginner-friendly, success on the platform requires the ability to write clear, concise bug reports in English, often including screen recordings or log files. This role is ideal for hobbyists or aspiring QA professionals looking to build a portfolio while earning supplemental income.

HackerOne Bug Bounty Platform

Find and report security vulnerabilities in top companies' software. Earn bounties from $100 to $100,000+ for critical bugs in platforms like GitHub, PayPal, and more.

Cobalt

Cobalt is a structured cybersecurity platform specializing in Pentest as a Service (PtaaS). Unlike open-ended bug bounty programs, Cobalt operates on a project-based model where curated researchers, known as the Cobalt Core, are invited to specific engagements. These projects involve testing web applications, APIs, cloud environments, and internal networks for security flaws. The platform suits advanced security professionals who prefer a more predictable income stream and structured scope compared to competitive crowdsourced security testing. Users earn between $500 and $5,000 per engagement, depending on the project's complexity and their role. Typical commitments range from one to two weeks of focused testing. To join, researchers must pass a rigorous vetting process that evaluates their technical expertise, communication skills, and professional background. Key requirements include proven experience in penetration testing, relevant certifications (such as OSCP or CREST), and the ability to collaborate directly with engineering teams to remediate identified risks.

Immunefi

Immunefi is the leading bug bounty platform for the blockchain industry, serving as a bridge between security researchers and decentralized projects. Unlike general software testing platforms, Immunefi focuses exclusively on smart contracts and Web3 protocols. It suits advanced cybersecurity professionals and smart contract developers with deep technical knowledge of Solidity, Rust, and blockchain architecture. Users earn income by conducting asynchronous security audits and submitting vulnerability reports through the platform's coordinated disclosure process. Rewards are typically paid in cryptocurrency and are scaled according to the potential financial impact of the bug, with critical vulnerabilities often yielding six or seven-figure payouts. There is no set time commitment; researchers work independently on their own schedules. Key requirements include advanced proficiency in code analysis, an understanding of DeFi attack vectors, and adherence to strict reporting guidelines. While the earning potential is significantly higher than traditional bug bounty platforms, the barrier to entry is high, requiring specialized expertise in cryptographic security and blockchain-specific logic.