Public Project Performance Metrics

Project performance metrics are integrated into the Explore Bounties page and the Bug Bounty pages on our website. 

As you scroll through the Explore Bounties page, you will see information for a few key performance metrics on each project. This information includes:

• Max Bounty: The maximum bounty that is currently being offered by the project.
• Vault TVL: The amount stored in the project’s vault.
• Total Paid: The total amount of money that the project has paid out for bug bounty rewards.
• Total Reports paid: the total number of reports the  project has paid out for bug bounty rewards
• Paid Last 4 Months: The amount paid in the last 4 months.
• Last Paid: The last time the project paid out a bounty
• Median Resolution Time: The median time for a project to resolve a report (i.e. time for a report to be advanced from ‘Escalated’ to either the ‘Closed’ or ‘Paid’ status).
• Last Update: The day that the project’s bug bounty program was last updated.
• Top % of X tag: The tags exist to celebrate projects that excel in a given category (i.e. Top 10 Vault Size). These tags are only visible when a project has enabled visibility for all of their performance metrics. 

The Explore Bounties Page also includes filters that allow users to sort projects based on any of the categories listed above.  

Furthermore, the ‘Total report paid’ metric can be viewed on the Bug Bounty page when it is enabled by the project.

This feature benefits projects by allowing them to compare themselves to others based on the aforementioned metrics. Projects who feel they are not receiving enough submissions can use this information to identify areas that need improvement and make bug bounty programs more attractive to whitehats.

Enabling/Disabling Your Performance Metrics

Your metrics are disabled by default, which means that they will not be visible publicly. If you would like to change the visibility of your project metrics, you can do so by going to the project settings menu and clicking the ‘Metrics’ tab. There you can enable/disable each of the metrics by clicking the appropriate slider.

Please note that while you will see your project’s metrics updated in real time in your project settings, the metrics on the ‘Explore Bounties’ page will only be updated after a two week delay.

Remember, whitehats prefer projects that have a track record of rewarding good submissions in a timely manner, so enabling these metrics can be a good way of making your bug bounty program stand out.