You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Time to first response | The elapsed time from report creation to the first public activity on a report. The first public activity includes adding a public comment, changing the report state, or changing the report severity.
12
12
Time to triage | The elapsed time from when a report is created to when a report is changed to a triaged state. A report can skip the triaged state and move directly to a closed state (e.g. resolved).
13
-
Time to bounty | *(Bounty programs only)* The elapsed time from when a report is triaged to when a bounty is paid. Only reports that are eligible for a bounty will be tracked as part of this metric. The time to bounty timer will run until the report is either marked as ineligible or closed as a state where it’s not normal to award a bounty (e.g. spam).
13
+
Time to bounty | *(Bounty programs only)* The elapsed time from when a report is triaged to when a bounty is paid. Only reports that are eligible for a bounty will be tracked as part of this metric. The time to bounty timer will run until the report is either marked as ineligible or closed as a state where it’s not normal to award a bounty (e.g. spam).<br><br><i>Awarding swag in lieu of a bounty won't stop the timer. If you only award a report with swag, you must mark the report as ineligible for bounty to stop the timer</i>.
14
14
Time to resolution | The elapsed time between report triaged and report closed. These five closed report states will stop the timer: resolved, informative, not applicable, duplicate, and spam.
15
15
16
16
All response target times are tracked and reported in business days. Business days are defined to be:
@@ -25,13 +25,13 @@ Some response target definitions to keep in mind when configuring your program's
25
25
Term | Detail
26
26
----- | ------
27
27
Response Standard | The maximum acceptable response times as defined by HackerOne. These standards only apply for time to first response and time to triage. HackerOne may temporarily pause new report submissions for programs with reports that don't meet the response standards. When these programs address the reports violating the response standards, report submissions will automatically resume.
28
-
Target | Goal response times set by an individual program. Performance against targets are displayed internally in the Inbox and Program Health dashboard. Program targets can't be set to exceed the response standards.
29
-
Recommended | The default setting for all new programs and HackerOne's suggested setting for best practice.
28
+
Target | Goal response times set by an individual program. Performance against targets are displayed internally in the Inbox and Program Health dashboard. Program targets can't be set to exceed the response standards.
29
+
Recommended | The default setting for all new programs and HackerOne's suggested setting for best practice.
30
30
31
31
### Healthy Response Target Times
32
32
HackerOne recommends your program to follow the following response target times to ensure a healthy program:
33
33
34
-
Response Efficiency Metric | Recommended | Response Standard | Target
34
+
Response Efficiency Metric | Recommended | Response Standard | Target
0 commit comments