Managing a bug bounty program involves attracting the right talent to test your assets effectively. Previously, there was no direct way to communicate the specific technical skills needed to find vulnerabilities in a particular asset. This could lead to a mismatch between a researcher's skills and an asset's requirements.
The "Required Skills" feature allows you to define the expertise needed for each asset. This helps researchers quickly identify programs that match their skillset and enables them to attract the most qualified individuals to test their assets.
Who this article is for:
Company users responsible for managing bug bounty programs and program assets
How to add required skills to an asset
You can assign specific skills to your assets directly from the asset management page.
Navigate to the Admin section of your program and select Assets.
In the asset table, you will see a new column titled Required skill.
Click within this column for the asset you wish to update. A dropdown menu of available skills will appear.
Select one or more skills that are relevant for testing the asset. There is currently no limit to the number of skills you can add.
The selected skills are saved automatically and will now be associated with that asset.
How this impacts you and researchers
For your company: After adding the required skills, they will be visible in the asset table on your Admin > Assets page and on your public program detail page. This provides clear guidance on the expertise you are looking for.
For researchers: This feature significantly improves the experience for our researcher community in three ways:
Clear identification: They can see the required skills for each asset on your program detail page.
Targeted filtering: They can filter the program overview page to find programs that have assets matching their specific skills.
Personalized recommendations: The Intigriti platform will recommend your program to researchers who have listed matching skills in their profiles.
Best practices
Be specific: Choose skills that accurately reflect the technology and expertise needed for the asset to attract the most suitable researchers.
Keep skills updated: If an asset's technology or focus changes, remember to review and update the required skills accordingly.