HackerOne
2016-09-01 13:01:00
www.hackerone.com
High quality reports result in higher bounties and happier security teams. The best vulnerability reports provide security teams with all the information needed to verify and validate the issue. Now security teams can create their own custom report templates for hackers.
Enter customizable Report Templates from stage left, thanks to your friendly HackerOne engineering team.
What is a Report Template?
Instead of the report submission form being an empty white box, a Report Template customized by the security team will prompt hackers for the details they need.
The idea is simple: Security teams can create a (Markdown powered) template and when a hacker submits a new report, that template is pre-loaded, which can then request certain types of information. To add a Report Template, just navigate to Team Settings > Program > Submission Form, add the template to the box and click Update.
Hacker submitting reports to your program will then be greeted with a pre-populated Issue information box, assuming no report draft has previously been saved.
Here is an example template:
> Thanks for submitting a report! Please replace *all the [square] sections below with the pertinent details. You can remove this paragraph before you submit.*
Summary: [add summary of the vulnerability]
App Version: [add app version here]
App OS: [add OS here and version]
Steps to reproduce:
[add step]
[add step]
As you can see, this template makes it clear what information the hacker is expected to submit.
When creating templates, here are some useful tips:
- At the top of your report template make it clear how they fill in the key pieces. We recommend asking hackers to replace the items in [square brackets] like in the example above.
- Ask for key details about the platforms being used such as operating system, browser, and associated version numbers.
- Ask for details about the application such as version number, platform, and more.
- Ask for additional pieces information such as log files, code, screenshots, or other related material.
- Try to ask for the key details but don’t make your report template too long otherwise some hackers may get a little tired filling it in.
We are confident Report Templates will be helpful in improving the overall quality of report.
Harnessing Report Templates
Adding a Report Template is simple. Just click on Team Settings -> Program -> Submission Form and add the template to the box.
You can also read our help documentation for more information on using this feature.
Enjoy!
HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited. As the contemporary alternative to traditional penetration testing, our bug bounty program solutions encompass vulnerability assessment, crowdsourced testing and responsible disclosure management. Discover more about our security testing solutions or Contact Us today.
Keep your files stored safely and securely with the SanDisk 2TB Extreme Portable SSD. With over 69,505 ratings and an impressive 4.6 out of 5 stars, this product has been purchased over 8K+ times in the past month. At only $129.99, this Amazon’s Choice product is a must-have for secure file storage.
Help keep private content private with the included password protection featuring 256-bit AES hardware encryption. Order now for just $129.99 on Amazon!
Help Power Techcratic’s Future – Scan To Support
If Techcratic’s content and insights have helped you, consider giving back by supporting the platform with crypto. Every contribution makes a difference, whether it’s for high-quality content, server maintenance, or future updates. Techcratic is constantly evolving, and your support helps drive that progress.
As a solo operator who wears all the hats, creating content, managing the tech, and running the site, your support allows me to stay focused on delivering valuable resources. Your support keeps everything running smoothly and enables me to continue creating the content you love. I’m deeply grateful for your support, it truly means the world to me! Thank you!
BITCOIN bc1qlszw7elx2qahjwvaryh0tkgg8y68enw30gpvge Scan the QR code with your crypto wallet app |
DOGECOIN D64GwvvYQxFXYyan3oQCrmWfidf6T3JpBA Scan the QR code with your crypto wallet app |
ETHEREUM 0xe9BC980DF3d985730dA827996B43E4A62CCBAA7a Scan the QR code with your crypto wallet app |
Please read the Privacy and Security Disclaimer on how Techcratic handles your support.
Disclaimer: As an Amazon Associate, Techcratic may earn from qualifying purchases.