Redact evidence for bug bounty submissions

Redact session cookies and PII from PoC evidence without losing triager metadata

Bug-bounty submissions when cookie leakage and unauthorized PII exposure risks matter.

• · screenshot/HAR/console transcript
• · cookie names to mask
• · PII fields in cross-account payload

• · redacted artifact with review-safe metadata visible
• · redaction checklist
• · post-submission credential rotation

• · jq for HAR sanitization
• · DevTools console capture
• · Burp panel hiding

PoC captures cookies or other-user data

Redacting triager-useful trace IDs; leaving session cookies unmasked

• · Cookie/PII categorization table (mask vs leave visible)
• · Burp-specific screenshot hygiene (hide request body, show Results table)