Great results for a great price.
We use Bugcrowd for their on-demand crowd-sourced penetration test to test our SaaS application. This allows us to get a number of …
Bugcrowd
Bugcrowd
Bugcrowd
Overview
What is Bugcrowd?
San Francisco-based Bugcrowd offers a bug bounty platform, for vulnerability management.
Read moreRecent Reviews
Product Details
- About
- Integrations
- Competitors
- Tech Details
- FAQs
What is Bugcrowd?
Bugcrowd connects companies' security and dev teams to vetted and
talented security researchers worldwide to run crowd-powered private and
public bug bounty programs.
Companies like Tesla Motors, Barracuda Networks, and Western Union have teamed up with Bugcrowd to augment their security efforts and quickly realize clearer insights into fixing their application vulnerabilities.
Companies like Tesla Motors, Barracuda Networks, and Western Union have teamed up with Bugcrowd to augment their security efforts and quickly realize clearer insights into fixing their application vulnerabilities.
Bugcrowd Features
- Supported: Private Programs: Invitation-only program partnering you with 50 of our most winning, background-checked security researchers - and our industry veterans who direct the triage and validation of vulnerabilities. This kind of program is best if you're testing new products and apps that are harder to access. Depending on your security needs, private programs can be ongoing or one-time engagements.
- Supported: Public Programs: Through our crowd-powered platform, engage the collective ingenuity of thousands of security researchers. Simply define your scope of testing, and we will match your needs with the right researchers to find the biggest, baddest vulnerabilities. Similar to private programs, public programs can be ongoing or one-time engagements.
- Supported: Managed Triage and Validation Service: Add-on service that bolsters your security and dev teams' bandwidth during your program's flight.
Bugcrowd Integrations
Bugcrowd Competitors
Bugcrowd Technical Details
| Deployment Types | Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Unspecified |
| Mobile Application | No |
| Supported Countries | US, Canada, Australia, New Zealand, UK |
| Supported Languages | English |
Comparisons
View all alternativesCompare with
Reviews and Ratings
 (1)
Reviews
(1-1 of 1)- Popular Filters
Companies can't remove reviews or game the system. Here's why
June 13, 2019
Great results for a great price.
We use Bugcrowd for their on-demand crowd-sourced penetration test to test our SaaS application. This allows us to get a number of security researchers involved in looking at our product to find potential vulnerabilities.
- Having a pool of security researchers helps keep the penetration tests broad, getting the most bang for your buck.
- The integration with Slack makes it easy to keep tabs on the program and when new findings are submitted.
- The interface is pretty simple to use and fairly intuitive.
- The success of your program highly depends on the moderator that is assigned to your project. A good moderator will continue to find researchers until the quota is full. Less than stellar moderators will send out one invite and sees what sticks.
- Not all researchers are as professional as one might hope. This can ruin the experience.
- We have received some great results for a great price. We've also received some poor results at the same price.
- Bugcrowd is not always recognized as a "real" penetration test, but for the most part, we have not had any problems with customer accepting our reports.
- Overall, Bugcrowd has been an overall good experience, but we have had a poor moderator from time-to-time that has resulted in less than ideal results.
Budget was ultimately the reason we went with Bugcrowd initially. Bugcrowd allowed for us to come up with our own bounty scale to fit out budget. Most other companies had a fixed scale, or the scale was not as flexible as we wanted it. Traditional penetration testing companies were very expensive.