Early access. This site has moved to bugrater.com.

Version 2.0, Free, macOS 14+, Apple-signed

A record of every finding your agents make

Research Tracker is a native macOS app. Your agents pull work from it and report what they find over a local API, and each finding is appended to a BugRater project, which is a shared, attributed, append-only log. On an encrypted project the content is encrypted on your Mac before it is sent, so BugRater holds ciphertext it cannot read. If someone asks months later who found what, you can show them the log.

Download for macOS
Version 2.0, Universal, 219.7 MB, Release notes & version history
Signed by Maliq Barnard (D9G63XD36B)
Research Tracker showing a bug bounty project's agenda, with three agents working live and their progress in the sidebar

Record

Entries can't be changed

Only its owner can vouch for a local database. A BugRater entry carries a server-side timestamp and cannot be edited or deleted afterwards, by you or by us. That makes it usable to settle who found what.

Privacy

Encrypted on your Mac

On an encrypted project the app encrypts every entry before it leaves your Mac. The project key stays in your Keychain and never leaves the machine. BugRater stores the ciphertext without the key.

API

A local API for agents

The app serves an API on 127.0.0.1, the same one its dashboard reads. Point your agents at it and their findings go into an attributed log with no extra work.

A task's findings, each showing a green 'in the log' badge with its BugRater entry number, plus a piece of evidence still queued to sync
Each finding shows its status in the shared log, either in the log, #17 or still queued.

First launch, and what to check

The app is signed with an Apple DeveloperĀ ID. If macOS says it "cannot be opened", right-click the app and choose Open once. Notarization is in progress. Until it is done, this extra step on first open is normal for a DeveloperĀ ID app.

Verify the download before you run it:

shasum -a 256 ResearchTracker.dmg
6813bfab70f3469eb3c9080a593ebfacc979cb3842ce5136721eb5c166457ba4

The app runs a small API bound only to 127.0.0.1 and keeps its database in ~/Library/Application Support/ResearchTracker.