Skip to main content
A bounty program uses a table of fixed amounts for two target tiers and four severities: Critical, High, Medium, and Low. The target’s tier and the report’s final severity guide the primary bounty. Each target also has its own Bounty eligibility setting.

​
Manage the bounty table

Open your program’s Manage page and find Bounty table. A program SuperAdmin can edit the eight amounts and click Save bounty table. Hackrate emails other program administrators when an amount changes. The table uses the program’s currency. A SuperAdmin can also use Enable bounties and Save bounty status to turn bounty rewards on or off. The existing table is preserved while bounties are off. A program needs a configured bounty table before bounties can be enabled.
Update the table and target eligibility before inviting researchers to a new reward program. Researchers can review the published table and eligible targets on the program page.

​
Award a primary bounty

Open the report and confirm its status, severity, target tier, and bounty eligibility. In Administration, click Give bounty, enter the amount, and submit it. The report records the primary award and the researcher receives a reward notification. The action appears for Accepted, Resolved, or Duplicate reports when the program has bounties enabled, the reporter has a registered account, and the report has no primary bounty yet. A known issue cannot receive a bounty.

​
Add a bonus

Use Give bonus in the report’s Administration card to record an additional reward. The bonus is tracked separately from the primary bounty. The action is available only on eligible reports that have not already received a bonus.

​
Review spending

Open your organization’s Bounty ledger to review monthly awards, bonus totals, and reports that still need a primary bounty. You can filter the ledger by year, program, target, reward state, status, and severity, then click Export CSV. If your organization has programs in more than one currency, review each currency total separately.