Bugcrowd Discussions

Vulnerability disclosure programs give security researchers a way to report bugs and provide organizations a way to find and reward these submissions. There are no monetary rewards associated with vulnerability disclosure programs.

A bug bounty is a monetary reward a company provides to someone who reports a “bug” or software vulnerability through a crowdsourced security platform. Rewards can range from hundreds to thousands of dollars depending on the impact and severity of the vulnerability. Bugcrowd pays researchers... Read more

As researchers submit vulnerabilities into public programs, Bugcrowd reviews these researchers more deeply. Our points system also allows us to assess their skill sets and levels of trust. Only researchers that have proven their abilities via public programs get invited into private programs.... Read more

We believe that a layered approach to security is best.

A Next Gen Pen Test combines the collective creativity of the Crowd of pen testers and skilled, trusted hackers with methodology-driven reporting you need to meet compliance requirements.