Reputation is earned one finding at a time.

Each accepted or resolved report adds points by severity — critical 50, high 25, medium 10, low 5 — plus 5 when it is publicly disclosed. Private profiles are left out.