PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A quick update on our ranking point system

yeswehack.com | blog | #bug-bounty | #community | #platform | #ranking | #cvss | #triaging
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An explainer on YesWeHack's ranking point system: how reports move from triage to acceptance, and how bounty size, quality ratings, and CVSS accuracy bonuses combine into a hunter's score.
Published
Collected

Related coverage

blog · about.gitlab.com
Co-Create: Building GitLab with our users
GitLab's Co-Create recap: in H1 2026, 650+ contributors shipped 4,874 improvements across 100+ product groups — from instance-wide Secret Push Protection to Scala support for Orbit and Duo.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
The prioritisation problem: dealing with a growing vulnerability backlog
YesWeHack explains why CVSS alone cannot set remediation priorities as backlogs grow, and how exploitability, exposure and asset value help rank findings from Bug Bounty, VDP and pentest sources.
blog · yeswehack.com
YesWeHack unveils workflow-friendly revamp of user interface
YesWeHack rolls out a workflow-friendly UI revamp: always-visible report tabs and workflow visualisation, condensed filters, enhanced program browsing, and an Olympic-style podium for rankings.
blog · yeswehack.com
New features for quicker and improved Bug Reporting!
Two reporting upgrades on YesWeHack: a personal template manager for reusable report structures, and richer formatting with image embedding by ID plus syntax highlighting for Burp, Python and JSON.
blog · bishopfox.com
Sipping from the CVE Firehose: How We Prioritize Emerging Threats for Real-World Impact
Facing nearly 40,000 CVEs in 2024, Bishop Fox's TEA team goes beyond CVSS — weighing exposure and exploitability against customer attack surfaces to flag emerging threats and warn affected assets.
Back