SKJOLD.INTEL

BUG BOUNTY INTELLIGENCE · OFFLINE-FIRST v4.0
Starting…
WORKFLOW: Verify live scope before testingGITHUB: Watch a specific repository and revisionEVIDENCE: Preserve commit SHA, source, and reproduction stepsTRIAGE: Pattern matches are prompts for manual reviewWORKFLOW: Verify live scope before testingGITHUB: Watch a specific repository and revisionEVIDENCE: Preserve commit SHA, source, and reproduction stepsTRIAGE: Pattern matches are prompts for manual review
0
TRACKED PROGRAMS
0
NEW REPOSITORY SIGNALS
0
OPEN TRIAGE RECORDS
—
SOURCE CHECK STATUS

PRIORITY QUEUE

Add programs and monitored repositories to build your queue.

WORKFLOW

1. Confirm authorization and current scope.
2. Monitor a specific repository, not an entire org’s latest push.
3. Review changed code, tests, deployment/config changes, and dependencies.
4. Record source revision and reproducible evidence.
5. Check prior public reports and program exclusions before submission.

FIRST-SEEN PROGRAM LINKS

Newly observed on an official directory page; first-seen is our observation timestamp, not a confirmed launch date. Verify status, exact scope, eligibility, reward and rules on the linked program page.

Loading public directory feed…

RECENT ACTIVITY

No activity yet.

PROGRAM WATCHLIST · values remain unverified until you refresh the source

Freshness and score are analyst-maintained. No scraped bounty numbers are presented as current. Confirm the official scope, eligibility, disclosure policy, payout terms, and exclusions at the source.

PRIORITY*PROGRAM / PLATFORMMAX $FEE $REPOSOURCE STATUSCHECKEDACTIONS

*Heuristic score (0–100) weights your bounty, entry fee, recency of last verification, and whether a code repository is attached. It is a sorting aid only; no estimate of win probability or expected payout.

REPOSITORY ACTIVITY

Public GitHub REST API · unauthenticated limit applies · 1 request per repo

Checks the latest commit on each explicitly watched repository. It does not enumerate an organization, detect releases/scope changes, or guarantee alerts between manual checks. “New” means different from the last successful check on this device. API failures never create synthetic commits.

LOCAL SOURCE TRIAGE

Paste source below (or load a public raw GitHub file). Large files stay whole; files over 1 MB are rejected to keep the browser responsive.

FINDING / EVIDENCE REGISTER

Capture evidence as you investigate. Hashes are calculated locally using SHA-256 when Web Crypto is available. Exact duplicate fingerprints are flagged across saved items; semantic duplicates still require manual review.

VERIFIED INTELLIGENCE SOURCES

Links below were checked on 3 Oct 2026. Site contents, program data, and paths can change. The tool opens the source; it does not claim API integration or automatic ingestion unless a status explicitly says so.

SETTINGS & DATA

Data is stored in this browser profile using localStorage. It is not synced, encrypted, or backed up unless you export it. Do not store private keys, credentials, confidential target code, or sensitive unpublished reports here. GitHub is queried anonymously; no token is requested or stored.