Bug Bounty Campaigns
Bug Bounty campaigns on Joinable let you invite users to test your web application before launch, identify bugs or UI issues, and reward participants for high-quality reports — all in one place.
This guide walks you through how to create, launch, and manage a Bug Bounty campaign on Joinable.
What is a Bug Bounty Campaign?
A Bug Bounty campaign allows you to:
Invite users to test your web application or website
Collect structured bug reports and feedback
Record real user sessions to see exactly where issues occur
Review, approve, or reject submissions
Reward contributors with points (convertible to cash)
Bug Bounty campaigns are ideal for pre-launch testing, QA, usability checks, and identifying edge-case issues before releasing to a wider audience.
Note: Bug Bounty campaigns currently support web-based applications only (websites and web apps). Mobile app support is on the roadmap.
Creating a Bug Bounty Campaign
1. Navigate to Bug Bounty Campaigns
Log in at platform.joinable.ai
From the left-hand menu:
Click Bug Bounty, or
Click New → Bug Bounty
You’ll see a list of your existing campaigns and the option to create a new one.
2. Basic Campaign Setup
When creating a new campaign, you’ll be asked to configure the following:
Campaign Name
Give your campaign a clear name, for example:
Find bugs in my website
This is what contributors will see when browsing the campaign.
Record User Testing Sessions (Optional but Recommended)
Enable Record user testing session to capture full session recordings.
This allows you to:
Watch a video of each user’s testing session
See clicks, navigation paths, and friction points
Understand bugs in full context, not just written descriptions
3. App URL
Add the URL of the web application you want users to test.
Example:
This is where contributors will be directed when they start testing.
4. Audience Selection
Choose who can access your campaign:
Public Anyone on Joinable can participate.
Invite Only Limit access to a specific group:
Upload a CSV of email addresses, or
Invite users individually by email
Invite-only campaigns are useful for internal testing or trusted user groups.
5. Task Description & Responsibilities
Task Description
Provide a short overview explaining what users should test and what kind of feedback you’re looking for.
Example:
“Please explore the website and report any UI issues, broken flows, or unexpected behavior.”
Custom Responsibilities (Optional)
You can add bullet-point instructions to guide contributors, such as:
Identify broken links or buttons
Report layout or responsiveness issues
Highlight confusing user flows
This helps improve the quality and relevance of submissions.
6. Budgets & Rewards
Bug Bounty rewards are managed using points, which contributors can later convert into cash on the platform.
Average Reward per Bug
Set how many points you want to award per approved bug.
Example:
100 points ≈ $10 per bug
Total Campaign Budget
Define your total campaign budget in points.
Example:
2,000 points ≈ $200 total budget
You retain full control over which bug reports are approved and rewarded.
7. Campaign Duration
Choose one of the following:
Ongoing – no end date
Fixed End Date – select a specific campaign end date
Session Recording Setup (Tracking Snippet)
To enable session recordings, you must install the Joinable tracking snippet.
Copy the tracking code provided in the final setup step
Paste it into:
Your website
<head>section, orYour web app’s global layout or entry file
Deploy your application with the snippet installed
This enables:
User session videos
Interaction tracking
Rich metadata for each bug report
Campaign Review & Approval
Once submitted, your campaign enters review.
Before becoming publicly available:
The Joinable team reviews the campaign
We ensure it complies with platform policies
Once approved, the campaign goes live and starts accepting submissions
Managing Bug Submissions
After your campaign is live, all submissions appear in your campaign dashboard.
For each submission, you can view:
Bug description
User metadata (device, browser, etc.)
Full session recording
Timeline of user actions
Approving or Rejecting Bugs
For each reported bug, you can:
Approve
The contributor receives the reward points
The bug moves to the Approved section
Reject
No reward is issued
The bug appears in the Rejected section
This gives you full control over quality and spending.
Summary
With Joinable Bug Bounty campaigns, you can:
Launch structured bug-finding campaigns in minutes
See real user behavior through session recordings
Centralize all bug reports in one dashboard
Reward contributors fairly and transparently
If you have questions or need help setting up your campaign, feel free to reach out to the Joinable team anytime.
Happy bug hunting! 🐞
Last updated