Programs and Recon Monitoring
Keep every bug-bounty program in one place, with its scope, rules, notes and every asset XHack finds. Re-check programs daily or weekly in the background, with no AI and no tokens, and see exactly what is new since the last recon.
Every Program, in One Place
Bug-bounty work gets messy fast: scope in one tab, rules in another, recon output in a folder, notes somewhere else. Programs puts it all together. Each program keeps:
- its scope and out-of-scope list;
- its rules of engagement;
- your notes;
- every asset XHack finds: subdomains, live URLs and JavaScript files.
Add the in-scope root domains, and recon only ever looks inside them.
See Exactly What Is New
XHack remembers everything it found before. Run recon again and the What's new tab shows only the assets that appeared since the last run. New and changed assets are where first-to-find bugs usually are, so you start where it counts.
Recon runs in the background. Close the window, keep chatting, and check the log whenever you like.
Monitoring That Costs No Tokens
Set a program to be re-checked daily or weekly. Monitoring runs in the background, uses no AI and no tokens, and notifies you when new assets appear. Busy programs daily, quiet ones weekly. You hear about changes without lifting a finger.
From Program to Hunt in One Click
When you are ready, hand the program to the AI. Start full hunt gives it everything: scope, rules, assets and what is new. Hunt the new assets points it straight at what changed. The AI reads your scope, out-of-scope list and rules before it starts, and stays inside them.
Learn More
Try it on your own stack
Run this against a target you own and judge it on what it finds, not on a description.
Try XHack AIQuestions about this?
You get a researcher on the call, not a sales engineer reading the same page back to you.
Contact supportMore in XHack AI
Capabilities that sit alongside this one.