PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Improving Report Quality through Submission Editing by the Bugcrowd ASE Team

bugcrowd.com | vulnerability | #bugcrowd | #vulnerability-disclosure | #triage | #report-quality | #platform-features | #submission-editing | #ase
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd's ASEs can now edit vulnerability reports during triage: researchers see original and edited versions side by side, and customers receive higher-quality reports and faster payouts.
Published
Collected

Related coverage

vulnerability · bugcrowd.com
Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs
Bugcrowd launches self-service Vulnerability Disclosure Programs: a structured intake and triage pipeline for bug reports, with managed triage for the first 15 or 75 submissions.
blog · bugcrowd.com
The hidden cost of agentic pentesting
Bugcrowd finds agentic pentesting tools submit overwhelmingly low-signal reports on public bug bounty programs, while top findings still come from skilled humans; triage absorbs the hidden cost.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · yeswehack.com
‘Happy hunters equal happy customers and vice versa’: YesWeHack vulnerability triage chief Adrien Jeanneau on creating a virtuous Bug Bounty circle
Interview with Adrien Jeanneau, head of YesWeHack's triage team: how clear, actionable reports build customer confidence, the seven-step triage process, and 24/7 operations.
vulnerability · yeswehack.com
9 rules for a successful first-time Bug Bounty Program
Nine rules for a successful first Bug Bounty program: clear team roles, a dedicated manager, a detailed brief, efficient triage, transparent payments and integration with internal remediation.
vulnerability · hackerone.com
Advanced Workflows with Inbox Views
HackerOne adds customizable Inbox Views: security teams can create, reorder and remove saved filters to build advanced disclosure workflows, such as Tier 1/Tier 2 triage, per-platform queues or separate bounty stages.
Back