From SaaS shortlist to AI automation

Don't get left behind. Show Gralio how you work and our revolutionary new tool will return step-by-step guidance plus the exact software - or AI - to accelerate your work.

Logo of Bugcrowd

Bugcrowd

Website LinkedIn Twitter

Last updated on

Company health

Employee growth
13% increase in the last year
Web traffic
2% increase in the last quarter
Financing
May 2024 - $231M

Ratings

G2
4.3/5
(46)
Glassdoor
3.9/5
(113)

Bugcrowd description

Bugcrowd is a cybersecurity platform that connects businesses with a community of ethical hackers to find and fix software vulnerabilities. They offer various services, including bug bounty programs, penetration testing, and vulnerability disclosure management, all managed through a single platform. This approach aims to provide a comprehensive view of a company's security posture and help prioritize and fix the most critical weaknesses. Bugcrowd is trusted by companies of all sizes, from startups to large enterprises, and across various industries.


Who is Bugcrowd best for

Bugcrowd connects businesses with ethical hackers to uncover and fix software vulnerabilities. A valuable service for improving security posture with a diverse community of skilled hackers and an easy-to-use platform. Some users mention slow support response times and inconsistent communication. Best for companies looking to proactively enhance their security through bug bounty programs and vulnerability disclosure.

  • Ideal for businesses of all sizes, from startups to large enterprises.

  • Suitable for companies across various industries seeking enhanced cybersecurity.


Bugcrowd features

Supported

Bugcrowd connects businesses with a global network of security researchers to test and identify vulnerabilities.

Supported

Bugcrowd's engineered triage process helps prioritize vulnerabilities based on severity and potential impact.

Supported

CrowdMatch aligns specific security requirements with the most relevant and skilled security researchers in Bugcrowd's network.

Supported

Bugcrowd integrates with various development and security tools for streamlined workflows.

Supported

The Bugcrowd platform dashboard offers a central hub for managing various security programs and engagements.

Supported

Bugcrowd's vulnerability rating taxonomy provides a consistent framework for assessing and prioritizing identified vulnerabilities.


Bugcrowd reviews

We've summarised 47 Bugcrowd reviews (Bugcrowd TrustPilot reviews and Bugcrowd G2 reviews) and summarised the main points below.

Pros of Bugcrowd
  • Diverse community of skilled ethical hackers.
  • Helpful triage team and excellent customer support (when responsive).
  • Easy-to-use platform and API for integrations.
  • Flexible bounty programs and clear reward system.
  • Provides a valuable service for improving security posture.
Cons of Bugcrowd
  • Slow support response times, sometimes taking a long time.
  • Triaging system can be unresponsive after marking bugs as N/A or informative.
  • Inconsistent communication and feedback loop between researchers and program owners.
  • Difficulty integrating with tools like Jira.
  • UI/UX could be improved, particularly search and report customization.

Bugcrowd pricing

The commentary is based on 8 reviews from Bugcrowd G2 reviews.

Bugcrowd's pricing is generally considered reasonable and straightforward, though some find the structure confusing. One reviewer praised the flexible and generous pricing offered by their account team. However, another mentioned inconsistent bounty payouts as a concern.

Users sentiment

Strongly positive
+1

See the Bugcrowd pricing page.


Bugcrowd alternatives

  • Logo of HackerOne Attack Resistance Platform
    HackerOne Attack Resistance Platform
    Finds security weaknesses before the bad guys do.
    Read more
  • Logo of Cobalt
    Cobalt
    Finds and fixes security flaws in your website and apps, with expert help.
    Read more
  • Logo of Intigriti
    Intigriti
    Crowdsourced security testing, finding vulnerabilities before hackers do.
    Read more
  • Logo of HackerOne Bounty
    HackerOne Bounty
    Crowdsourced security testing finds vulnerabilities, strengthens defenses.
    Read more
  • Logo of YesWeHack
    YesWeHack
    Crowdsourced security platform. Find vulnerabilities before hackers do.
    Read more
  • Logo of HackerOne Pentest
    HackerOne Pentest
    Crowdsourced security testing finds vulnerabilities before attackers do.
    Read more

Bugcrowd FAQ

  • What is Bugcrowd and what does Bugcrowd do?

    Bugcrowd is a crowdsourced cybersecurity platform connecting businesses with ethical hackers to identify and fix vulnerabilities. It offers bug bounty programs, penetration testing, and vulnerability disclosure programs, providing a comprehensive view of a company's security posture. Bugcrowd helps prioritize and fix critical weaknesses, serving businesses of all sizes across various industries.

  • How does Bugcrowd integrate with other tools?

    Bugcrowd integrates with various development and security tools for streamlined workflows. It offers an API and integrates with platforms like Jira, Slack, and GitHub, enabling efficient vulnerability management and communication within existing workflows. This enhances collaboration and reduces friction in the remediation process.

  • What the main competitors of Bugcrowd?

    Bugcrowd's main competitors include HackerOne (with its Attack Resistance Platform, Bounty, and Pentest offerings), Cobalt, Intigriti, and YesWeHack. These platforms offer similar crowdsourced security testing and vulnerability disclosure programs.

  • Is Bugcrowd legit?

    Yes, Bugcrowd is a legitimate cybersecurity platform. It connects businesses with ethical hackers to identify vulnerabilities, offering bug bounty programs and other security testing services. Bugcrowd is trusted by various companies and boasts a diverse community of skilled security researchers. They offer an easy-to-use platform and a clear reward system.

  • How much does Bugcrowd cost?

    Bugcrowd doesn't publicly disclose its pricing. Contact their sales team for a customized quote based on your specific needs and to determine if Bugcrowd is worth the investment for your business.

  • Is Bugcrowd customer service good?

    Bugcrowd's customer service receives positive feedback, with users highlighting the helpfulness of the triage team and excellent support. However, some users mention slow response times and inconsistent communication, suggesting there's room for improvement in responsiveness and communication channels.


Reviewed by

MK
Michal Kaczor
CEO at Gralio

Michal has worked at startups for many years and writes about topics relating to software selection and IT management. As a former consultant for Bain, a business advisory company, he also knows how to understand needs of any business and find solutions to its problems.

TT
Tymon Terlikiewicz
CTO at Gralio

Tymon is a seasoned CTO who loves finding the perfect tools for any task. He recently headed up the tech department at Batmaid, a well-known Swiss company, where he managed about 60 software purchases, including CX, HR, Payroll, Marketing automation and various developer tools.