🛡️ BugBounty Report Helper

Autonomous Assistant for Web Bug Bounty Reporting, Severity Triage, and Scope Verification.

📦 Dataset: BugBounty-Reports-Synthetic 🤖 Model: BugBounty-Triage-Assistant-3B

⚠️ Responsible & Defensive Use Only: This tool is designed strictly for authorized bug bounty reporting, application security verification, and triage research. Never test or report vulnerabilities on systems without explicit prior written authorization. All calculations occur strictly client-side in your browser; no researcher inputs or payloads are stored or logged.

📝 Report Improver

Convert disorganized researcher scratchpads or vague drafts into executive-ready, reproduction-grade reports.

Raw Notes / Draft Finding Vulnerability Class Target Language

Submission-Ready Structured Report

Click "Polish & Structure Report" to generate.

Itemized Changelog

No edits performed yet.

⚖️ Severity Helper (Programmatic CVSS v3.1 & CWE)

Compute canonical CVSS v3.1 base score, vector string, and CWE classification via deterministic formula.

Vulnerability Class

Attack Vector (AV)

Complexity (AC)

Privileges (PR)

User Interaction (UI)

Scope (S)

Conf (C)

Integ (I)

Avail (A)

CVSS v3.1 Base Score & Rating

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Triage Rationale

Network-accessible finding requiring user interaction with changed scope.

🎯 Scope Checker

Verify whether an asset and finding are in-scope or subject to exclusion rules.

Program Policy Target Asset Finding Summary

Verdict

Click "Check Eligibility" to evaluate.

Policy Clause Cited

📊 Dataset Explorer

Browse sample verified records from the BugBounty-Reports-Synthetic benchmark dataset.