> For the complete documentation index, see [llms.txt](https://docs.bountysecurity.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bountysecurity.ai/creating-profiles.md).

# Creating profiles

- [Create profiles in the graphical editor](https://docs.bountysecurity.ai/creating-profiles/overview.md): Build a check in the graphical editor. Save it once, then reuse the generated profile.
- [Create an active profile](https://docs.bountysecurity.ai/creating-profiles/creating-active-profile.md): Build a marker-reflection check using the controls in the Pro editor.
- [Create passive profiles](https://docs.bountysecurity.ai/creating-profiles/creating-passive-profile.md): Create request and response detectors from captured traffic.
- [Multi-step profiles](https://docs.bountysecurity.ai/creating-profiles/multi-step-profiles.md): Add a confirmation step and decide which result should produce an issue.
- [Payloads and positioning](https://docs.bountysecurity.ai/creating-profiles/payloads.md): Add probe values, choose where they go and preserve useful controls.
- [Insertion points](https://docs.bountysecurity.ai/creating-profiles/insertion-points.md): Select the request locations your active profile is allowed to mutate.
- [Match types](https://docs.bountysecurity.ai/creating-profiles/match-types.md): Choose the signal that distinguishes a meaningful result from a normal response.
- [Grep conditions, scope and filters](https://docs.bountysecurity.ai/creating-profiles/grep-options.md): Build readable matching conditions with table rows, operators and scope.
- [Redirections](https://docs.bountysecurity.ai/creating-profiles/redirections.md): Choose which response to inspect and how far the scanner may follow redirects.
- [Raw HTTP requests](https://docs.bountysecurity.ai/creating-profiles/raw-request.md): Use the request editor for a fixed endpoint or a specific HTTP structure.
- [Match and replace](https://docs.bountysecurity.ai/creating-profiles/match-and-replace.md): Transform request or payload text through the profile editor.
- [Payload encoding](https://docs.bountysecurity.ai/creating-profiles/payload-encoding.md): Build an encoding chain and inspect the bytes the application receives.
- [Variables](https://docs.bountysecurity.ai/creating-profiles/global-variables.md): Keep profiles reusable with context values, custom tokens and interaction IDs.
- [Issue properties](https://docs.bountysecurity.ai/creating-profiles/issue-properties.md): Write findings that explain the observation, evidence and practical impact.
- [Tags](https://docs.bountysecurity.ai/creating-profiles/tags.md): Organize profiles for discovery, menu selection and rule actions.
- [Exported file reference (technical)](https://docs.bountysecurity.ai/creating-profiles/field-reference.md): Technical lookup for the files generated by the graphical profile editor.
- [Pro and Server compatibility](https://docs.bountysecurity.ai/creating-profiles/compatibility.md): Check the differences before moving a profile between Pro and Server.
- [Validate and distribute saved profiles](https://docs.bountysecurity.ai/creating-profiles/validation.md): Reopen, test and distribute the profile generated by Pro.
- [Default profile inventory](https://docs.bountysecurity.ai/creating-profiles/default-profiles.md): Browse the reviewed pack by profile type, enabled state, tags and severity.
- [Examples and agent skills](https://docs.bountysecurity.ai/creating-profiles/examples.md): Open working examples in Pro and download companion tools for agents.