Bugcrowd connects companies' security and dev teams to vetted and talented security researchers worldwide to run crowd-powered private and public bug bounty programs.
N/A
Dashlane Password Manager
Score 9.1 out of 10
N/A
Dashlane is a credential manager that secures every credential, every user, and every employee device to proactively protect against breaches. Brands worldwide can use Dashlane to stay ahead of evolving threats.
Bugcrowd is great for bug bounty programs and as a cheaper alternative to a full-blown penetration test. Small to medium-sized companies who are serious about security, but don't have the budget for a $40,000 penetration test, this is a great solution. Bugcrowd isn't going to be able to do much of the white-box penetration testing (code reviews), as they are more suited for grey-box and black-box. A program like this will need at least one dedicated person to work with the moderator, verify findings, and decide on the severity of the finding.
I think Dashlane is a great service for anyone who uses the internet. We need to create accounts on almost every website, and Dashlane helps generate secure passwords and store them safely, but easily accessible through its seamless browser extension. Any business or personal lifestyle can benefit from Dashlane when you go online
The success of your program highly depends on the moderator that is assigned to your project. A good moderator will continue to find researchers until the quota is full. Less than stellar moderators will send out one invite and sees what sticks.
Not all researchers are as professional as one might hope. This can ruin the experience.
The mobile app works fine for quick access, but autofill across different apps can be inconsistent. Sometimes it doesn’t recognize the login field, which slows people down when they’re on the go.
Occasionally the browser extension logs users out or doesn’t sync immediately with the desktop app, which causes frustration if someone just updated a password.
Dashlane is usable, but there are 2 key issues that annoy me. 1. The mobile app and the browser extension are not synced and i cannot find passwords in the app that are clearly in the extension. 2. The system doe snot make it easy to assign a password to a specific subdomain. I get hundreds of passwords that i have to go through any time i go to any subdomain on my main site because of the nature of my business. I need the option back to assign a password to only work with a specific subdomain (and all related paged on that subdomain) note: The search features have been annoying in the past. I just went to test them to verify my issues and found that notes inside of a password are finally searchable. This helps
We've had no issues with Dashlane. I can't speak to their customer service because I have not personally needed to contact them. I guess that speaks about their product if we've not had any issues to reach out about. Great for supporting data/information on multiple platforms that are shared among team members.
Budget was ultimately the reason we went with Bugcrowd initially. Bugcrowd allowed for us to come up with our own bounty scale to fit out budget. Most other companies had a fixed scale, or the scale was not as flexible as we wanted it. Traditional penetration testing companies were very expensive.
Dashlane’s customer support is often rated higher, providing more responsive and helpful assistance. LastPass has a slightly steeper learning curve than Dashlane, but it offers more flexibility with user permissions, which can benefit teams. Dashlane includes unlimited passkey support and a clean breach history, while LastPass is more accommodating for smaller teams.
We have received some great results for a great price. We've also received some poor results at the same price.
Bugcrowd is not always recognized as a "real" penetration test, but for the most part, we have not had any problems with customer accepting our reports.
Overall, Bugcrowd has been an overall good experience, but we have had a poor moderator from time-to-time that has resulted in less than ideal results.
