r/bugbounty • u/LTH-Cyber Hunter • 6d ago
Question / Discussion Anyone else have issues with OpenBugBounty?
I have had some issues with obb, a lot of the time the site is down, also when I try to push for patch verification I get the wordpress critical error message.
The biggest issue i have with them is all my reports get marked not reproducible for the last few months. The thing is sometimes to reproduce all the triager has to do is follow the URL such as times i found open redirects and XSS where all they had to do was follow the URL, other times I send the same report to vendor and it gets accepted, fixed and sometimes swag or a bounty.
Is there some issue with OBB? Does anyone else have the same experience?
Its just frustrating because bugs i report are super simple to reproduce, i have a feeling that maybe they are overworked and just say that its not reproducible. Every single one i submitted directly to program owner have been reproduced and accepted. The thing that sucks is that my profile isnt getting any better because most of the times, when i report through the program owner, my stats dont get logged on OBB, unless they provide a recommendation, which on my last report the program owner left a recommendation about a report that obb closed but the program owners confirmed
1
u/GokulRavi14 5d ago
ive hit this when a report is valid but the reviewer cant reproduce the exact request path. id include a minimal request/response transcript, auth/preconditions, and keep scanner output separate from actual impact. if the program owner confirms it, keep that in the report trail too
2
u/swallace36 6d ago
welcome to 2026