---
title: "Validate Bug Bounty Report"
method: POST
path: "/bug_bounty/program/{program_id}/report"
---

# Validate Bug Bounty Report

`POST /bug_bounty/program/{program_id}/report`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/bug_bounty/program/{program_id}/report`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `bug_bounty:write`

Validates a new bug bounty report for a given program.

## Path parameters

- `program_id` integer, required

## Request body

- object
  - `description` string, required: The description of the bug bounty report
  - `additional_file_data` object[]: Optional parameter. Files with additional context about the bug bounty report. Allowed files are: '.json', '.yaml', '.yml', '.txt', '.md', '.pdf', '.csv'.
    - `name` string: Filename including extension.
    - `data` string: Base64 encoded string of the file content

## Response `200`

The bug bounty report has been created

- object
  - `report_uuid` string: The uuid of the newly created bug bounty report

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)