What do finding statuses mean on bug bounties?

Created by Arjun Rao, Modified on Thu, 20 Aug at 6:15 AM by Arjun Rao

StatusMeaning
NewJust submitted; awaiting initial triage.
In ReviewTriaged / under evaluation by the client.
RejectedNot valid / does not meet criteria.
DuplicateAnother researcher already reported the same underlying issue (same root cause and the same realistic attack path to the same impact). Not rewarded on bug bounties.
ConfirmedValid finding. A client can confirm a finding without setting a payout amount right away. The amount may be disclosed a few days later.
SpamIrrelevant, low-quality, automated, AI-generated, or otherwise non-actionable. Not used for valid findings that are simply incorrect (those are usually Rejected). Spam can carry reputation and deposit consequences.
WithdrawnYou withdrew the finding.
DisputedYou challenged the decision and requested mediation.

Related searches: finding status meaning, new finding, in review, confirmed, duplicate, spam, out of scope, triaged.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article