top of page

Strengthening the Signal: 15% mule accounts send to bin.

  • Writer: Anurag Tripathi
    Anurag Tripathi
  • Dec 8
  • 3 min read

In crowdsourced security, it is easy to celebrate growth and overlook noise. A large researcher community looks impressive, but size alone has never guaranteed value. What truly matters is the intent, authenticity and skill that each participant brings to the ecosystem.

Recently, we at Com Olho completed a significant internal audit of our researcher base. Out of more than fifteen thousand accounts, we removed close to 2,500 profiles that did not meet our standards for activity, integrity or compliance, which is roughly 15% of the total user base. At first glance this may seem drastic, but it reflects a commitment to reinforcing the trust and quality our ecosystem is built on.

Why This Cleanup Was Necessary

Over time, any open platform naturally accumulates users who do not contribute meaningfully. This includes bots, automated scrapers, dormant profiles and accounts that were not aligned with policy expectations. While these accounts are not harmful in isolation, together they distort the real picture of community engagement.

If today you visit the platform and find that you are unable to log in, it simply means your account did not meet our compliance criteria or was identified as part of the junk data we removed. This is intentional and ensures that the platform remains clean, trusted and aligned with the standards our ecosystem deserves.

If such noise is left unaddressed, it affects everything downstream:

  • Engagement metrics become misleading

  • Organizations may misjudge their true testing exposure

  • High-quality researchers compete with irrelevant or inactive profiles

  • Platform behavior models drift due to polluted data

Cleaning this was not an administrative sweep. It was a strategic effort to preserve the credibility of the ecosystem for both researchers and organisations.

Why It Was Important

Security programs rely on precision and trust. For organizations, the presence of bots or inactive users can make the surface appear larger than the actual testing community. For serious researchers, inflated user counts dilute recognition and reduce signal clarity.

This action ensures that:

  • Every program receives genuine human engagement

  • Researcher identity and behavior remain trustworthy

  • Platform analytics reflect real testing patterns

  • High-quality contributors gain visibility

By removing irrelevant accounts, we strengthened the integrity of the ecosystem rather than shrinking it.

What The Data Revealed

The most interesting insight is that 85% of our community was intact, active and aligned with our standards. This confirms that the heart of the Com Olho researcher base is vibrant and self-driven.

The cleanup clarified several important patterns:

  • The majority of researchers engage with intent, not curiosity alone

  • Testing cycles and behavioral models became more accurate once noise was removed

  • Signal-to-noise ratios improved across ongoing bug bounty programs

  • Engagement density is far more meaningful than raw headcount

In short, removing 2,500 accounts did not reduce our strength. It sharpened it.

What We Learned

Every audit teaches us something about human behavior and platform evolution. Three lessons stand out:

  1. Integrity has to be maintained consciously healthy ecosystems need pruning and recalibration. Quality is not static.

  2. Engagement is the true measure of community strength : A registered user is not the same as a contributing researcher.

  3. Clean data unlocks more powerful security insights : Better data makes our testing cycle models smoother, more predictive and more aligned with reality.

These insights are shaping how we think about the next phase of trust engineering on the platform.

What Comes Next

This cleanup is the first step in a larger initiative to build a more accountable and intelligence-driven community. We are now working on:

  • Adaptive trust scoring for researchers

  • More sophisticated signals for account risk detection

  • Automated hygiene checks for new registrations

  • Enhanced behavioral insights built on a cleaner dataset

The goal is simple. Ensure that every vulnerability discovered on Com Olho originates from a real researcher experimenting with curiosity and skill.

Closing Reflection

Binning 15% of our researcher accounts was not a reduction in community strength. It was an investment in clarity, trust and long-term resilience. By clearing nearly 2,500 irrelevant accounts, we amplified the visibility of genuine contributors and gave organizations a cleaner, more reliable view of their security posture.

Crowdsourced security is not defined by how many users sign up. It is defined by how many show up with purpose. With this cleanup, we move one step closer to building India's most dependable and intelligence-driven ethical hacking community.

 
 
 

Comments


Get Started with Listing of your Bug Bounty Program

  • Black LinkedIn Icon
  • Black Twitter Icon
bottom of page