Bugcrowd vs. REVE Antivirus

Bugcrowd is great for bug bounty programs and as a cheaper alternative to a full-blown penetration test. Small to medium-sized companies who are serious about security, but don't have the budget for a $40,000 penetration test, this is a great solution. Bugcrowd isn't going to be able to do much of the white-box penetration testing (code reviews), as they are more suited for grey-box and black-box. A program like this will need at least one dedicated person to work with the moderator, verify findings, and decide on the severity of the finding.

Incentivized

Suited for both personal and organizational use

• Having a pool of security researchers helps keep the penetration tests broad, getting the most bang for your buck.
• The integration with Slack makes it easy to keep tabs on the program and when new findings are submitted.
• The interface is pretty simple to use and fairly intuitive.

Incentivized

• Strengths: Quick scan
• Parental control
• Mobile app notification
• Weakness: Limited free trial

• The success of your program highly depends on the moderator that is assigned to your project. A good moderator will continue to find researchers until the quota is full. Less than stellar moderators will send out one invite and sees what sticks.
• Not all researchers are as professional as one might hope. This can ruin the experience.

Incentivized

• Improvement in the UI would be more helpful
• $19 for the base package is a little high, though you get an antivirus for 2 PCs. A reduction in price would be more preferable.

Budget was ultimately the reason we went with Bugcrowd initially. Bugcrowd allowed for us to come up with our own bounty scale to fit out budget. Most other companies had a fixed scale, or the scale was not as flexible as we wanted it. Traditional penetration testing companies were very expensive.

Incentivized

I used Norton in the past. Norton does not need any introduction as it is number 1 when it comes to cyber security. However, I had heard about REVE Antivirus from a friend so I decided to use it and found it great! Additionally, I got Reve Antivirus for 2 PCs for $19 which boils down to 9.50 USD for each PC, whereas Norton is selling for 11.50 USD for 1 PC.

• We have received some great results for a great price. We've also received some poor results at the same price.
• Bugcrowd is not always recognized as a "real" penetration test, but for the most part, we have not had any problems with customer accepting our reports.
• Overall, Bugcrowd has been an overall good experience, but we have had a poor moderator from time-to-time that has resulted in less than ideal results.

Incentivized