🤝Whitelist

Enabling, managing, and processing whitelist requests for in-scope assets.

The whitelist feature allows companies to authorize bounty hunters' credentials, such as phone numbers, emails, or both, on specific in-scope assets. Whitelisting is applied on a per-asset basis, ensuring targeted access control. Bounty hunters can request whitelisting through the programs they are part of, enabling seamless collaboration while maintaining security and compliance.

Enable Whitelisting

To enable whitelisting for an asset, companies should follow these steps:

1. Navigate to Assets: Go to /company/assets.

2. Edit an Asset: Select the asset you want to edit.

   • Locate the Require Whitelist dropdown option.

   • Choose the appropriate whitelisting requirement, such as phone, email, or both, from the dropdown.

Managing Whitelist Requests

To manage whitelist requests after authorizing on the platform, follow these steps:

1. Navigate to Whitelist Requests: Go to /company/assets/whitelist.

2. View Requests: All users who have requested whitelisting will be listed here.

3. Filter Requests:

   • Use filters to view requests by specific assets or across all assets.

   • Further refine results by request status: Requested, Approved, or Rejected.

4. Approve or Reject Requests:

   • Select one or multiple users.

   • Click on the Approve or Reject button to take action.