During the lifecycle of submissions occasionally our triage team or the customer themselves may add messages to reports requesting additional feedback, at this point researchers will receive an email notification suggesting the particular report which requires attention. This could be for any number of reasons. It could be to clarify steps in the PoC (proof of concept), or possibly to further express the business security impact to name a few. Add a message in response to the request so the process can continue further with this additional feedback.

Alternatively researchers may want to include some more information to already submitted reports as additional evidence to further explain a specific step for instance. Or to express more detail about the impact the vulnerability has on the business as a security issue.

Researchers are also welcome to ask question about decisions if believed to be ambiguous. There is no harm in asking if unclear or if more clarity can be provided.

Be patient with the process too, these things can take time to be looked at and resolved.

If submissions are placed into archived status and a researcher is no longer able to message via the platform, reach out to support if there is any reason a submission needs to be relooked at.