Choose a kit
Research Kits help acquire resources, public scope, guidance, and rules during workspace creation. The implemented choices include Manual Security, HackerOne, Bugcrowd, Apple Security Bounty, Google OSS VRP, MSRC, and Meta Bug Bounty. A kit can supply a public program lookup, a bundled repository or resource catalog, or starting rules, depending on the integration.
Review every imported item before creating the workspace. Public program terms, eligible assets, and reward rules can change; the kit provides a starting point and does not authorize an unlisted target. The Research Kit view can refresh supported imports later, while the selected kit identity remains fixed for the workspace.
When to use Manual Security
Choose Manual Security when no bundled program matches. Enter the authorized scope, resources, and constraints yourself. Keep precise target identifiers in the private workspace, never in reusable public documentation.