remanone/bounty-report-tracker — explained in plain English
Analysis updated 2026-05-18
Get notified when a HackerOne triage team quietly views your report before replying publicly.
Track the status of your bug bounty reports across both HackerOne and Bugcrowd in one popup.
Send a Discord notification to your team when a bounty report changes status.
See at a glance which reports have new activity since you last checked.
| remanone/bounty-report-tracker | adindazu/fextractor | anonymousraid/osint-mapping-tool | |
|---|---|---|---|
| Stars | 15 | 15 | 15 |
| Language | JavaScript | JavaScript | JavaScript |
| Setup difficulty | easy | hard | easy |
| Complexity | 2/5 | 1/5 | 2/5 |
| Audience | developer | general | researcher |
Figures from each repo's GitHub metadata at analysis time.
Requires being signed into HackerOne and/or Bugcrowd in a browser tab, no API keys needed.
Bounty Report Tracker is a Chrome extension for people who submit bug bounty reports on HackerOne and Bugcrowd. It watches your reports and tells you when their status changes, with a particular focus on a signal called internal activity, which is when the program or triage team looks at your report behind the scenes without posting anything publicly visible. HackerOne already emails you about public events like new comments or status changes, but it does not notify you when someone quietly views or touches your report internally. That internal activity timestamp often moves days before any public reply shows up, so it can be an early sign that a report is being looked at. This extension polls that field regularly and alerts you when it changes, along with tracking regular status changes and new public activity as well. Bugcrowd does not expose an equivalent internal timestamp, so for Bugcrowd reports the extension instead tracks each submission's status and its last activity date. The extension runs entirely inside your own browser using the sessions you are already logged into on each platform. There is no server, no account to create, and no API key to enter. Because both platforms block direct API calls from an extension, it works by briefly opening or reusing a background tab on the platform's own site to make the request, then closing it again. A background timer checks your reports automatically, by default every 60 minutes, though this interval and which platforms are tracked can both be adjusted in settings, and you can also trigger a manual check. Results are compared against the previous check to detect any change, shown as a badge count on the toolbar icon and as a browser notification. Clicking the toolbar icon opens a popup listing your reports with their status, any bounty amount awarded, last public activity, and last internal activity, with sorting and filtering options. The extension can optionally send a message to a Discord channel through a webhook URL you provide whenever a report changes. Installation is done by loading the extension unpacked in Chrome, Brave, or another Chromium based browser through developer mode, then signing into HackerOne or Bugcrowd normally in a browser tab.
A Chrome extension that alerts you when your HackerOne or Bugcrowd bug bounty reports get internal or public activity.
Mainly JavaScript. The stack also includes JavaScript, Chrome Extension.
Setup difficulty is rated easy, with roughly 5min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
double-check against the repo, no cap.