Bounty Operator
Account

Free bug bounty tools

Check a report, a proof or a scanner dump before it leaves your machine. No account, no key.

Your content never leaves the browser.

  1. Bug bounty report check

    Paste a draft and see which of 14 checks it passes: pinned commit, quoted impact row, inline proof, trusted roles, leftover secrets.

    draft report14 checks

  2. Verify a review packet

    Drop a packet and its source files and get match, mismatch or missing for every SHA-256.

    packet + fileshash per file

  3. Check a PoC or gist for secrets before you publish

    Drop a PoC folder and get every key, token, seed phrase and private report link as file:line.

    PoC filesfile:line hits

  4. Which bug classes get accepted

    Twelve bug classes ranked by how often judges accepted them, with the sample size on every row.

    1,032 findingsrate per class

  5. Slither triage queue

    Drop Slither’s JSON and get a ranked Markdown queue of the 13 detectors worth a manual pass.

    slither.jsonranked queue

Where each one fits

The order follows a finding from first lead to filed report.

  1. Before you dig. Acceptance rates show which bug classes judges accepted and which they closed. Slither triage queue cuts a scanner dump to the detectors worth reading.
  2. Before you publish a proof. Secret check lists every key, token and private link by file and line.
  3. Before you submit. Report check reads the draft for the things a triager looks for first.
  4. After a review. Packet verifier proves the files in a review packet are the files on disk.

What they are built from

Twelve checks, distilled from 105 real case files across five platforms. The wins and the closures. Every check exists because real reports were closed for that reason. The method page has all twelve: the question each one asks, why reports die on it and the verdict it leads to.

The tools read text and hash files. The workbench goes further: your own model argues against the finding and returns one verdict.

Built by Tradi3: 2nd of 133 in Immunefi’s Firelight competition, 8th of 65 in Quantus.

Find the hole in your report before the triager does

Hand a draft to the workbench and get the sentence it would be closed on. One hosted review per UTC day is free.

Open the workbench Read the report guide