
Getting Paid for Bug Bounties: How Your HackerOne and Bugcrowd Payouts Are Taxed
Bug bounty payouts from HackerOne and Bugcrowd are ordinary income from the first dollar, and for 2026 platforms only issue 1099s at $2,000 per researcher — but the income is taxable with or without a form. Covers W-9 setup, the hobby-versus-business test that decides whether tooling is deductible, self-employment tax, and quarterly estimates.










