In order to obtain a higher rank in the leaderboard, you will want to score as many reputation points as possible while also maintaining a high validity ratio. These metrics are one of the crucial factors that are looked at when being picked for a private program by its administrators.
Reputation points
One part of researcher quality is indicated by the amount of reputation points this specific researcher has acquired on the platform.
At Intigriti, we have chosen to award our researchers for valid submissions rather than punish them for occasional errors. Therefore, any researcher's reputation points will only increase upon acceptance of valid submissions (and never decrease for invalid submissions).
For which submissions are reputation points awarded?
Acceptance of a submission (valid vulnerability)
Duplicate of a valid submission
How many reputation points will be awarded?
The amount of reputation points will vary according to the submission severity, first report/duplicate / accepted risk and the following:
None: 0 reputation points
Low: 5 reputation points
Medium: 20 reputation points
High: 25 reputation points
Critical: 40 reputation points
Exceptional: 50 reputation points
Duplicate: 1/5th of the reputation points of the parent submission
Different visualisations of these reputation points
Throughout the platform, we will use the reputation points in different visualisations:
All-time reputation points show the total of reputation points gathered by the researcher during his/her entire lifecycle on the platform. This metric gives an indication of seniority for the dependent researcher
90-day reputation points show the number of reputation points that is gathered by the researcher in the last 90 days (reputation points are awarded upon submission acceptance). This metric gives an indication of recent activity on the platform and allows us to give recent talent a chance to be noticed
Validity ratio
Another indicator used to measure a researcher's quality is his/her personal validity ratio. This ratio will provide us with an insight into the % of submissions that are considered to be valid in relation to the total amount of submissions that were submitted by this researcher.
What is considered to be a valid submission?
All accepted submissions
A submission that is rejected as a duplicate of a valid submission
A submission that is rejected as an accepted risk
A submission that is rejected as informative
What is considered to be an invalid submission?
A submission that is rejected as SPAM
A submission that is rejected as Not applicable
A submission that is rejected as Out of scope
Streak
A third metric on the platform is the streak. This metric shows us the top severity of all submissions that were submitted by this researcher in the last 90 days, given that these submissions were:
Accepted by the company
Rejected as a duplicate
Since the origin for this metric is the submission severity, possible values for the streak are:
Low
Medium
High
Critical
Exceptional
Leaderboard ranking
Throughout the platform, different leaderboards exist:
All time leaderboard
Leaderboard from the last 90 days
Leaderboard per quarter
Leaderboard per month
Leaderboard per program
How do we rank our researchers?
The leaderboard ranking is always determined by reputation points (which are applicable to that specific leaderboard). In the case of an ex aequo, streak will be used to break the tie.