Bugcrowd Discussions

Bugcrowd

(58)4.3/5

Bugcrowd frees organizations with a low tolerance for risk from chronic talent shortages, noisy tools that breed false positives, and the fear of critical hidden or emerging vulnerabilities. Our SaaS platform provides access to the unlimited capacity and skills of the global ethical hacker/pentester community for deeper, proactive risk reduction and faster regulatory compliance. With 12+ years of experience and 1200+ customers in every industry (including OpenAI, National Australia Bank, Indeed, USAA, Twilio, and CISA), we know what long-term with crowdsourced security looks like.

53.0

Nps Score

Already have Bugcrowd?

All Bugcrowd Discussions

# What is a Vulnerability Disclosure Program? Vulnerability disclosure programs give security researchers a way to report bugs and provide organizations a way to find and reward these submissions. There are no monetary rewards associated with vulnerability disclosure programs. ##### Post Metadata

- Posted at: over 6 years ago

- Net upvotes: 2

# What is a Bug Bounty program? A bug bounty is a monetary reward a company provides to someone who reports a “bug” or software vulnerability through a crowdsourced security platform. Rewards can range from hundreds to thousands of dollars depending on the impact and severity of the vulnerability. Bugcrowd pays researchers 100% of the bounties earned to ensure proper incentives within the ecosystem. ##### Post Metadata

- Posted at: over 6 years ago

- Net upvotes: 2

# How do you vet your researchers? As researchers submit vulnerabilities into public programs, Bugcrowd reviews these researchers more deeply. Our points system also allows us to assess their skill sets and levels of trust. Only researchers that have proven their abilities via public programs get invited into private programs. Researchers from around the world may participate, except for researchers from countries the U.S. has issued export sanctions or other trade restrictions against (ex. North Korea, Iran). ##### Post Metadata

- Posted at: over 6 years ago

- Net upvotes: 1

# How does crowdsourced security fit with traditional security assessment methods? We believe that a layered approach to security is best. ##### Post Metadata

- Posted at: over 6 years ago

- Net upvotes: 1

# What is a Next Gen Pen Test? A Next Gen Pen Test combines the collective creativity of the Crowd of pen testers and skilled, trusted hackers with methodology-driven reporting you need to meet compliance requirements. ##### Post Metadata

- Posted at: over 6 years ago

- Net upvotes: 1

Start a New Software Discussion

Have a software question?

Get answers from real users and experts

Start A Discussion

Top Contributors in Bugcrowd

Olivia B.

5 pts

53.0

All Bugcrowd Discussions

Start a New Software Discussion

Have you used Bugcrowd before?

Top Contributors in Bugcrowd

Olivia B.