Targets added to the Organization Target Directory are added at the Organization Level as a part of a customer’s target repository. The targets added to the Organization Target Directory may be used on any of the customer’s bounty programs or engagements.
An Organization Owner can add targets at the organizational level following these steps:
-
Click Attack surface on the menu bar.
The Targets page is displayed.
-
Click Add target.
The Add a target dialog box is displayed.
-
Specify the following:
- Name: Select a pre-existing target or fill-in the name of the to be created target.
- Tags(optional): Select tags to indicate the skills and technologies that will be helpful in testing this target.
- URL / Location (optional): Provide the complete URL for researchers to access this target. It must be a valid example of an instance of this target such as a website, application, API, or the app store link to the mobile application. Bugcrowd’s servers will occasionally poll these targets to test connectivity and composition.
- Category: Select the category that best fits your target.
-
Click Add.
The Target was created message is displayed and the new target is displayed on the Targets page.
You can assign the targets listed on this page to any of your organization’s programs on Crowdcontrol.
To delete and archive a target, click the red color icon. If the delete icon is in gray color, it indicates you cannot delete that target since it is an in-scope target, which is assigned to a program.
The following message is displayed.
Program Owners will no longer be able to add this target to their programs. Any submissions associated with this target will continue to be accessible across the platform but researchers will no longer be able to submit reports against this target. This can only be undone under organization settings. Do you wish to proceed?
Click Archive.
The target no longer displays on the Targets page.
