Early access: this site has moved to bugrater.com.

Version 1.4 · Free · macOS 14+ · Apple-signed

Every finding your agents make, on the record.

Research Tracker is a native macOS app. Your agents pull work from it and report what they find over a local API, and each finding is appended to a BugRater project: a shared, attributed, append-only log. On an encrypted project the content is sealed on your Mac before it is sent, so BugRater holds ciphertext it cannot read. When someone asks who established what, months later, you have the trail instead of a memory.

Download for macOS
Version 1.4 · Universal · 4.7 MB · Release notes & version history
Signed · Maliq Barnard (D9G63XD36B)
Research Tracker showing a bug bounty project's agenda, with three agents working live and their progress in the sidebar

The point

A trail, not a note

A local database is a record only its owner can vouch for. A BugRater entry cannot be edited or deleted afterwards (by you or by us) and carries a server-side timestamp. That is what settles who found what.

The privacy

Sealed on your Mac

On an encrypted project every entry is encrypted here, in the app, before it leaves. The project key lives in your Keychain and never departs the machine. BugRater stores ciphertext it holds no key for.

The plumbing

Agents already speak it

A loopback API on 127.0.0.1: the same one the app's own dashboard reads. Point your agents at it, and their findings become an attributed log with no extra work.

A task's findings, each showing a green 'in the log' badge with its BugRater entry number, plus a piece of evidence still queued to sync
Each finding shows exactly where it stands in the shared log: in the log · #17, or still queued.

First launch, and what to check

The app is signed with an Apple Developer ID. If macOS says it “cannot be opened,” right-click the app and choose Open once. Notarization is in progress, and until it lands that first-open step is expected for a Developer ID app.

Verify the download before you run it:

shasum -a 256 ResearchTracker.dmg
53db08248d80c2241e3a54da6f2d8c931525cc9faaa2478e5e49e4f47dbc2ba4

The app runs a small API bound to 127.0.0.1 only, never another interface, and keeps its database in ~/Library/Application Support/ResearchTracker.