Automated Filtering

At Immunefi, we work hard to prevent low-effort, out-of-scope reports from flooding your inbox by using our automated filtering process. In doing so, we’ve prevented countless out-of-scope reports from being escalated to projects.

What automated filtering does:

Our automated filtering process is able to filter out most out-of-scope reports by making sure that:

• The bug report’s claimed asset is in-scope
• The bug report’s claimed impact is in-scope
• The bug report’s claimed severity level is in-scope
• A PoC is provided when required
  

What automated filtering does not do:

• Check to see if a whitehat's claims are factually correct
• Check the PoC to understand the validity
• Assess the submission severity
• Determine if a suggested fix works
• Check for duplicate reports

 

How do I turn off automated filtering?

We understand that you might want to personally review each submission you receive with your team. That is why we give you the option to turn off the automated filtering feature. If you choose to do so, we will escalate all reports to you, including those that we would have previously closed as out of scope for your bug bounty program. All bug reports that you receive will be automatically added to your inbox.

To turn off automated filtering, the project administrator simply needs to log into the dashboard, go to 'Settings' and toggle the 'Automated Filtering' slider under the 'Triaging' tab.