• SUBMISSION
  • DRAFT
  • HUMAN
  • LOG

How to submit vulnerability reports with your AI

Connect Bugcrowd to your AI client to turn raw security findings into formal program submissions without leaving your chat window.

Ask AI about this page

Short answer

How do I submit vulnerability reports with my AI?

You give your findings to your AI, which then uses the Bugcrowd Connector to format and send the report to your program. This turns messy notes into structured submissions. You'll see the results in your Bugcrowd dashboard.

Where findings land.

The outcome of your report.

The AI handles the technical formatting, but you control the final submission.

SUBMISSION

New report created

The AI uses create_submission to push your findings into Bugcrowd. The report appears in your program's queue immediately.

DRAFT

Review before sending

You can ask your AI to refine technical details or severity levels. It keeps the report in your chat until you're ready to send it.

HUMAN

Final verification

You must confirm the program ID and the specific vulnerability details. The AI won't guess which program a finding belongs to.

LOG

Chat history kept

Your conversation stays in your AI client. You have a local record of the technical details used to build the report.

The workflow

What your AI does when a finding arrives.

The AI acts as the bridge between your raw notes and the Bugcrowd API.

  1. Parse findings

    Your AI reads your raw notes or logs to extract the core vulnerability details.

    create_submission

  2. Structure report

    The AI organizes the data into the specific fields required by Bugcrowd, like title and severity.

    create_submission

  3. Execute submission

    The AI sends the structured data to the Bugcrowd platform to create the official record.

    create_submission

  4. Confirm status

    The AI tells you once the submission is successful and provides the necessary confirmation.

    create_submission

Try it

Copy these to start.

Use these prompts to kick off the submission process.

Starting points

Swap out the bracketed text with your actual vulnerability details and program IDs.

Bugcrowd Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Bugcrowd capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "bugcrowd-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp"
    }
  }
}
Copy into chat04

  • Create a Bugcrowd submission for program ID 12345 using these notes: [paste notes]

  • Draft a vulnerability report for the 'Acme Corp' program based on this finding: [paste finding]

  • I found a SQL injection in the login endpoint. Help me format this for a Bugcrowd submission.

  • Submit this new security issue to my active Bugcrowd program: [paste details]

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Bugcrowd once, then ask.

Link your Bugcrowd account via Vinkius. Your credentials stay encrypted, and you can start submitting reports immediately.

Connect Bugcrowd to your AI

FAQ

How this task behaves

  • 01

    Can the AI submit reports without me seeing them first?

    No. You should always review the drafted report in your chat before telling the AI to execute the submission.

  • 02

    Does the AI choose the severity level for me?

    The AI suggests a severity level based on your description, but you have the final say on how the finding is classified.

  • 03

    Can the AI delete existing reports in Bugcrowd?

    No. This Connector only has the ability to create new submissions.

  • 04

    Do I need to manually log into Bugcrowd every time?

    No. Once you connect the Bugcrowd MCP through Vinkius, your AI client can communicate with the platform directly.

  • 05

    Can the AI find my program IDs automatically?

    No. You need to provide the specific program ID in your prompt to ensure the report goes to the right place.

  • More questions about Bugcrowd? See everything the Bugcrowd Connector can do

Connect Bugcrowd to Claude, Cursor, ChatGPT & more