Bugcrowd vs. KeepSolid VPN Unlimited

Bugcrowd is great for bug bounty programs and as a cheaper alternative to a full-blown penetration test. Small to medium-sized companies who are serious about security, but don't have the budget for a $40,000 penetration test, this is a great solution. Bugcrowd isn't going to be able to do much of the white-box penetration testing (code reviews), as they are more suited for grey-box and black-box. A program like this will need at least one dedicated person to work with the moderator, verify findings, and decide on the severity of the finding.

Incentivized

If you need to access sites from your home country while travelling, a dedicated VPN is well worth your time and money. Free versions are limited, maybe useful if you only need to check email, but for ad-free consistent service, this is an excellent value. I suppose you could use a VPN to guard your privacy, but this doesn't fit my usage scenario.

Incentivized

• Having a pool of security researchers helps keep the penetration tests broad, getting the most bang for your buck.
• The integration with Slack makes it easy to keep tabs on the program and when new findings are submitted.
• The interface is pretty simple to use and fairly intuitive.

Incentivized

• No distractions, works quietly in the background.
• Dozens of servers to choose from.
• Lifetime access price well worth it.
• Covers multiple devices.

Incentivized

• The success of your program highly depends on the moderator that is assigned to your project. A good moderator will continue to find researchers until the quota is full. Less than stellar moderators will send out one invite and sees what sticks.
• Not all researchers are as professional as one might hope. This can ruin the experience.

Incentivized

• Streaming servers aren't the greatest, sometimes fail.
• Not quite so seamless on mobile devices.

Incentivized

Budget was ultimately the reason we went with Bugcrowd initially. Bugcrowd allowed for us to come up with our own bounty scale to fit out budget. Most other companies had a fixed scale, or the scale was not as flexible as we wanted it. Traditional penetration testing companies were very expensive.

Incentivized

I tried a few free VPN servers, some via webpages and others via apps, but nothing specific comes to mind, maybe HideMyAss.com and Windscribe. All the freebies had limitations, such as ad-supported, speed limitations, or not allowing scripts to run. KeepSolid VPN Unlimited doesn't have any of these limitations so I could get to work without distraction.

Incentivized

• We have received some great results for a great price. We've also received some poor results at the same price.
• Bugcrowd is not always recognized as a "real" penetration test, but for the most part, we have not had any problems with customer accepting our reports.
• Overall, Bugcrowd has been an overall good experience, but we have had a poor moderator from time-to-time that has resulted in less than ideal results.

Incentivized

• After a week of constant roadblocks, this VPN sped up my online research considerably.
• Travelling, I was unable to control my IP, the majority of which were blacklisted on the majority of American sites, but this VPN got me around that so I could get to work.

Incentivized