CrowdStream is Bugcrowd’s public activity feed and displays the activities for unresolved, resolved, or coordinated disclosed submissions depending on the configured level of visibility for a program.
An activity feed displays the program name, researcher name, priority, target, date of resolution or acceptance, and/or reward amount based on the configured visibility settings.
The CrowdStream activity feed is displayed at the following locations for a researcher:
- Application-wide activity feed
- Researcher specific activity feed
- Program specific activity feed
You can choose to display or hide your username and/or reward amount you have received for a submission in the CrowdStream activity feed.
Coordinated Disclosure allows program owners and researchers to work together and publicly disclose details about a submission. When a Program Owner enables researchers to disclose submissions, Researchers with a valid submission can create a request for disclosure and the Program Owners are notified. The Program Owner and the Researcher start collaborating on the disclosure details and after both the parties have agreed on the reported details, the disclosure is finalized and displayed in CrowdStream.
When requesting disclosure, Researchers must provide a summary and choose whether they want limited or full information to be disclosed. Program Owners can accept or deny any request. They can also change the visibility level and add more details for the summary.
You can manage visibility of the submission details at a global and per submission level for all programs regardless of the program’s current settings.
The following image shows disclosed and accepted submissions.
