Bug Bounty Report Form — shared by the community

Who this template is for

Bug Bounty Report Form is built for engineering, IT and product teams who need to route technical requests with the context needed to triage them.

• Engineering, IT and product teams working in technology, saas & dev.
• Teams who need to route technical requests with the context needed to triage them without writing code or paying for a custom build.
• Anyone replacing vague reports that can't be reproduced or prioritised with one structured record per enquiry.
• Respondents are users, testers and internal stakeholders — the form asks them 12 questions across 2 screens.
• Mobile-heavy audiences, thanks to the one-question-per-screen card layout.

Why this form is useful

It removes the cost of vague reports that can't be reproduced or prioritised and turns each submission into a record your team can act on immediately.

• 8 questions are required, so submissions arrive complete instead of needing a follow-up email.
• It collects a verified email address so replies and confirmations land.
• It accepts a document or photo upload as evidence.
• It allows multiple selections without free text.
• Conditional logic hides 3 questions until they are relevant — shorter forms convert better than long ones.
• Splitting the form across 2 pages keeps each screen short and shows respondents how much is left.
• Every response is stored, searchable and exportable, so nothing depends on one person's inbox.

How to use this template

From copy to live form is a few minutes of work, and every step is reversible.

1. 1Press “Use this template” — a fresh copy of Bug Bounty Report Form lands in your workspace, ready to edit.
2. 2Rename or delete any question, and change what is required. Nothing here is fixed.
3. 3Open Notifications and add the email addresses that should be alerted on each submission; add an auto-reply to the respondent if the form collects an email address.
4. 4Check the upload limits on the file question so respondents can attach what you actually need.
5. 5Publish it, then either share the link directly or paste the embed snippet into your site — the embedded form resizes to fit and loads no marketing or advertising trackers.
6. 6Watch responses land in Submissions, where you can filter, label and export them to CSV or PDF.

Logic and conditions blueprint

Exactly how this form behaves as it is answered — 3 conditional rules ship with it.

• Features conditional validation: if “Severity (your assessment)” is Critical, “Steps to reproduce” becomes mandatory before the form can be sent.
• Features advanced show logic: if “Have you already disclosed this publicly?” is Yes, the form dynamically exposes “Where was it disclosed?”. Otherwise that question never appears.
• Features advanced show logic: if “Vulnerability type” is Other, the form dynamically exposes “Please describe the vulnerability type”. Otherwise that question never appears.
• All 3 rules are editable in the Logic tab, and the built-in checker warns about rules that contradict each other.