Reputation and your profile
The Proof score, levels, accuracy and your verified disclosure ledger, all built on verified impact rather than volume.
Your profile is a verifiable security résumé. Every entry comes from Proofline records, not from anything you type in.
Proof score
Proofline ranks researchers on verified impact. Submitting more reports earns nothing by itself.
| Component | Points |
|---|---|
| Verified bounty findings | 10 × Critical + 5 × High + 2 × Medium + 1 × Low |
| Remediated (fix verified by retest) | +2 each |
| Audit competitions | +4 per valid High, +1.5 per valid Medium |
| Signed project acknowledgements | +3 each |
| Spam outcome | −15 each |
| Duplicates, known issues, good-faith misses | 0: no reward, no penalty |
Levels
| Level | Proof score |
|---|---|
| Novice | 0 |
| Contributor | 10 |
| Specialist | 30 |
| Expert | 75 |
| Elite | 150 |
| Legend | 300 |
Accuracy
Accuracy is shown separately for bug bounties (BBP) and audit competitions (AC). It only counts reports you could have gotten right:
- Counted: valid, out of scope, impact not demonstrated, invalid, spam, and publicly known duplicates.
- Excluded: private duplicates and known issues you couldn't have known about.
Accuracy shows N/A until something has been decided.
Your public ledger
- Only fixed, valid findings appear publicly. Unfixed findings are never listed, so your profile can't reveal that a live program has an open vulnerability.
- A finding's title appears only if the project allows it or it's publicly disclosed. Otherwise the ledger shows the vulnerability class.
- Reward amounts appear only if you choose to disclose them. Contest awards are public.
- Your dashboard shows your full earnings (marked "only you see the total"). Your public profile shows only what's disclosed.
Acknowledgements
After resolution, a project can issue a signed acknowledgement, for example "responsibly disclosed…, supplied a reproducible PoC, and the issue was remediated". It's attached to your profile with a verifiable signature, even when no reward was paid.
Verified identity badge
Completing identity verification adds a Verified identity badge to your profile. It shows the status only.