Managing a bug bounty program involves attracting the right talent to test your assets effectively. Previously, there was no direct way to communicate the specific technical skills needed to find vulnerabilities in a particular asset. This could lead to a mismatch between a researcher's skills and an asset's requirements.
The "Required Skills" feature allows you to define the expertise needed for each asset. This helps researchers quickly identify programs that match their skillset and enables them to attract the most qualified individuals to test their assets.
Who this article is for:
Company users responsible for managing bug bounty programs and program assets
How to add required skills to an asset
You can assign specific skills to your assets directly from the asset management page.
Navigate to the Admin section of your program and select Assets.
In the asset table, you will see a new column titled Required skill.
Click within this column for the asset you wish to update. A dropdown menu of available skills will appear.
Select one or more skills that are relevant for testing the asset. There is currently no limit to the number of skills you can add.
The selected skills are saved automatically and will now be associated with that asset.
AI-powered required skills suggestions
To make managing your assets even easier, Intigriti also provides AI-powered suggestions. This feature analyzes past submissions to recommend adding or removing skills, helping you maintain accurate asset profiles with minimal effort.
How skill suggestions work
The system analyzes accepted and resolved submissions for each asset over the past 90 days to generate daily recommendations.
We suggest adding a required skill to an asset when a number of submissions have used that skill recently.
We suggest removing a required skill when there has been a low number of submissions on the asset that have demonstrated the skill.
How to manage your skill suggestions
You can find and manage these new suggestions directly on your Assets page.
On the Admin > Assets page, look for a new icon in the Required skills column. This icon indicates that AI-powered suggestions are available for that asset.
Click the dropdown menu for the specific asset to view the suggestions. Recommendations to
Add or Remove skills will be clearly marked.
From here, you have several options:
Apply an individual suggestion by clicking it.
Select Apply all to accept all current suggestions for that asset at once.
Select Ignore all if you do not want to act on the suggestions. Once a suggestion is ignored, it will not be shown again for that asset.
You will also be notified when suggestions are available via a message on your company dashboard.
How this impacts you and researchers
For your company: After adding the required skills, they will be visible in the asset table on your Admin > Assets page and on your public program detail page. This provides clear guidance on the expertise you are looking for.
For researchers: This feature significantly improves the experience for our researcher community in three ways:
Clear identification: They can see the required skills for each asset on your program detail page.
Targeted filtering: They can filter the program overview page to find programs that have assets matching their specific skills.
Personalized recommendations: The Intigriti platform will recommend your program to researchers who have listed matching skills in their profiles.
Best practices
Be specific: Choose skills that accurately reflect the technology and expertise needed for the asset to attract the most suitable researchers.
Keep skills updated: If an asset's technology or focus changes, remember to review and update the required skills accordingly.