explaingit

remanone/bounty-report-tracker

Analysis updated 2026-05-18

15JavaScriptAudience · developerComplexity · 2/5Setup · easy

TLDR

A Chrome extension that alerts you when your HackerOne or Bugcrowd bug bounty reports get internal or public activity.

Mindmap

mindmap
  root((bounty-report-tracker))
    What it does
      Watches HackerOne and Bugcrowd reports
      Detects internal activity changes
      Sends toolbar and Discord alerts
    Tech stack
      JavaScript
      Chrome Extension
    Use cases
      Catch early internal report activity
      Track reports across two platforms
      Notify a Discord channel on changes
    Audience
      Bug bounty hunters
      Security researchers

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Get notified when a HackerOne triage team quietly views your report before replying publicly.

USE CASE 2

Track the status of your bug bounty reports across both HackerOne and Bugcrowd in one popup.

USE CASE 3

Send a Discord notification to your team when a bounty report changes status.

USE CASE 4

See at a glance which reports have new activity since you last checked.

What is it built with?

JavaScriptChrome Extension

How does it compare?

remanone/bounty-report-trackeradindazu/fextractoranonymousraid/osint-mapping-tool
Stars151515
LanguageJavaScriptJavaScriptJavaScript
Setup difficultyeasyhardeasy
Complexity2/51/52/5
Audiencedevelopergeneralresearcher

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · easy Time to first run · 5min

Requires being signed into HackerOne and/or Bugcrowd in a browser tab, no API keys needed.

In plain English

Bounty Report Tracker is a Chrome extension for people who submit bug bounty reports on HackerOne and Bugcrowd. It watches your reports and tells you when their status changes, with a particular focus on a signal called internal activity, which is when the program or triage team looks at your report behind the scenes without posting anything publicly visible. HackerOne already emails you about public events like new comments or status changes, but it does not notify you when someone quietly views or touches your report internally. That internal activity timestamp often moves days before any public reply shows up, so it can be an early sign that a report is being looked at. This extension polls that field regularly and alerts you when it changes, along with tracking regular status changes and new public activity as well. Bugcrowd does not expose an equivalent internal timestamp, so for Bugcrowd reports the extension instead tracks each submission's status and its last activity date. The extension runs entirely inside your own browser using the sessions you are already logged into on each platform. There is no server, no account to create, and no API key to enter. Because both platforms block direct API calls from an extension, it works by briefly opening or reusing a background tab on the platform's own site to make the request, then closing it again. A background timer checks your reports automatically, by default every 60 minutes, though this interval and which platforms are tracked can both be adjusted in settings, and you can also trigger a manual check. Results are compared against the previous check to detect any change, shown as a badge count on the toolbar icon and as a browser notification. Clicking the toolbar icon opens a popup listing your reports with their status, any bounty amount awarded, last public activity, and last internal activity, with sorting and filtering options. The extension can optionally send a message to a Discord channel through a webhook URL you provide whenever a report changes. Installation is done by loading the extension unpacked in Chrome, Brave, or another Chromium based browser through developer mode, then signing into HackerOne or Bugcrowd normally in a browser tab.

Copy-paste prompts

Prompt 1
Walk me through loading this Chrome extension unpacked in developer mode.
Prompt 2
Help me set up a Discord webhook so this extension notifies my server when a report changes.
Prompt 3
Explain how this extension detects HackerOne's internal activity signal without an API key.
Prompt 4
Show me how to adjust the auto check interval and tracked platforms in the settings panel.

Frequently asked questions

What is bounty-report-tracker?

A Chrome extension that alerts you when your HackerOne or Bugcrowd bug bounty reports get internal or public activity.

What language is bounty-report-tracker written in?

Mainly JavaScript. The stack also includes JavaScript, Chrome Extension.

How hard is bounty-report-tracker to set up?

Setup difficulty is rated easy, with roughly 5min to a first successful run.

Who is bounty-report-tracker for?

Mainly developer.

Open on GitHub → Explain another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.