Standardized framework for vulnerability classificationWe use a standardized classification system to bring consistency and clarity to how vulnerabilities are tracked and evaluated across our platform.
- Finding Status and Labels - Every submission is assigned a status and may be tagged with labels to aid in triage, filtering, and reporting.
- Competition Finding Severity - Severities are determined using criteria that evaluate potential impact, likelihood, and exploitability.
- Bug Bounty Severity - For bounty programs, we follow a framework to map severity levels to payout tiers.