The Programs section of the Admin Panel provides a centralized view of all your security initiatives on the YesWeHack platform.
From a single page, you can access and monitor all your programs, including:
Bug Bounty
Agentic Pentest
Exposure management
Pentest management
VDP/Featured VDP
Program Status
The status indicates the current state of the program and helps you quickly understand whether it is actively running, temporarily paused, or no longer active.
Enabled
The program is active and available to its intended participants. Reports can be submitted and processed normally.Disabled
The program has been created but is not currently active.Paused
The pentest campaign is temporarily paused. During this period, testing activities may be suspended while preserving the campaign and its existing data. The campaign can be resumed at any time.Stopped
The pentest campaign has been stopped. Deliverables can now be generated for the tested scope.
ℹ️ The Paused and Stopped statuses only apply to Pentest programs.
Published: The VDP or Featured VDP is accessible, allowing visitors to submit reports.
Unpublished: The VDP or Featured VDP is not visible to visitors.
Archived: The program is no longer active and has been archived for historical reference. Program information, reports, and metrics remain available for consultation, but no new activity can take place.
Program Metrics
The Programs page offers a comprehensive overview of all your programs launched through the YesWeHack platform, regardless of their type. This includes active programs, paused/stopped programs, and archived programs.
Each program card displays a set of key metrics tailored to the program type. These metrics are grouped into two categories:
Program Health: metrics that help you understand the overall status, participation, and performance of a program.
Report Activity: metrics related to reports submitted and processed within the program.
These indicators provide a high-level view of your security initiatives and help you quickly identify where attention, follow-up, or additional effort may be required.
Total Hunters/Pentesters : The number of Hunters or pentesters who have accepted an invitation to participate in the program.
Active Hunters/Pentesters: The number of Hunters or pentesters who have submitted at least one report within the program.
Reports activity: Comprehensive overview of report activity within the program, including the total number of reports submitted and their distribution across severity levels and workflow statuses.
Rewards: The total amount of rewards paid throughout the Bug Bounty program. This metric provides an overview of the rewards distributed to Hunters over the course of the program.
Report Activity
In Progress: The number of reports that are actively being assessed by the program. This includes reports in the following statuses:
New
Under Review
Need More Info
Assessed: The number of reports that have been reviewed by the YesWeHack triage team and assessed.
Accepted: The number of valid reports that have been accepted by the organisation.
Closed: The number of reports that have reached their final status and no longer require action.
Critical & High Reports: For each report status, the number of Critical and High severity reports is displayed. This helps prioritize the most impactful findings and focus remediation efforts where they are needed most.
Accessing Program Details
Click on a program to access its dedicated page and view additional information.
Depending on the program type, you may be able to:
Edit your program, including its scopes, configuration, policies, and settings.
ℹ️ To learn more about Bug Bounty Program creation, click here.
Manage Hunters and participants throughout the lifecycle of the program.
ℹ️ To learn more about key features for managing hunters, click here.
Track submitted reports and monitor their progression through the different report statuses.
Monitor rewards and program activity, including report volume and reward distribution over time.