I expected the list of platforms to be a list of companies that actually have programs, not a list of companies that offer to manage the program for you...
Same, but only because I missed the word “platforms” when I read the title. I don’t know how many companies I would expect to be on a list like that, but certainly more than 45.
Yeh, these are the different orgs that run programs on behalf of companies. For a list of the orgs running programs there’s about 2,300 of those here (also open-source and a contact work in progress): https://github.com/disclose/diodb
Granted “platforms” was a weird phrase, but I assumed it was companies operating bug bounty programs because that’s the only thing I would expect to see on HN or care about seeing on HN.
If I were looking for a company to host one for me I would have no trouble. 10 seconds on Google, literally.
If you were a bug bounty hunter and wanted to sign up for as many platforms as possible to maximise your potential scope, this list would be really useful.
Seems to me like useful content for hackers, which is what I would expect to see on Hacker News.
Every list is a list of "all known things" unless the author intentionally left something off it. It doesn't mean the author knows about all of the platforms; only that they listed all the platforms they know of. As such, it's not a very useful description.