Try our new research platform with insights from 80,000+ expert users
Bugcrowd Logo

Bugcrowd Reviews

Vendor: Bugcrowd
4.3 out of 5
Badge Leader
278 followers
Start review

What is Bugcrowd?

By combining a vast and diverse workforce with a results-driven model, crowdsourced security programs outperform traditional methods-every time.

Get the Managed Security Services Providers (MSSP) Buyer's Guide and find out what your peers are saying about Bugcrowd and more!
Buyer's Guide
Managed Security Services Providers (MSSP)
January 2025
Get the category report
Helped 845,960 peers since 2012

Featured Bugcrowd reviews

Read more reviews

Bugcrowd mindshare

Product category:
Managed Security Services Providers (...
As of April 2025, the mindshare of Bugcrowd in the Managed Security Services Providers (MSSP) category stands at 1.1%, up from 0.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Managed Security Services Providers (MSSP)
 
 
Key learnings from peers

Valuable Features

Bugcrowd offers significant features such as reward programs with disclosed incentives, a pen test for top hackers, and the Collections feature for targeting specific companies. Users appreciate the extensive list of websites and web applications for reporting vulnerabilities, guaranteed payments, and a competitive environment. The report creation process using markdown and image drag-and-drop is efficient. Users value the high bounties, hall of fame, stickers, and platform usability.
  • "I would rate Bugcrowd a ten out of ten."
  • "Bugcrowd's support team is very active and supportive."
  • "One of the features I like most about Bugcrowd is the ability to create a report in a very easy way."

Room for Improvement

Bugcrowd requires enhancement in report access for full disclosure after bug resolution to aid learning, similar to HackerOne. Improvements are needed in customer support, particularly in addressing urgency and reducing response time. The triaging process has become slower, increasing time to vulnerability resolution and payouts. New users face challenges accessing private programs. Reducing time required for customer input during ticket resolution would be beneficial. The platform itself demands enhancements for better performance.
  • "There is room for improvement in Bugcrowd's response time when customer input is needed for resolving tickets. If this time could be minimized, it would be very helpful."
  • "There is room for improvement in Bugcrowd's response time when customer input is needed for resolving tickets."
  • "Bugcrowd should provide more access to the reports, similar to HackerOne, allowing for full disclosure once a bug is resolved, so researchers can learn from them. They should improve the responsibility type and response time of their customer support, especially when the issue is urgent."

Pricing

Pricing for Bugcrowd pleases security researchers as it appears inexpensive and often free of fees or commissions. Bounty tables are well-regarded, while public engagements are accessible without cost. Private arrangements require invitations. Organizations reported setups involving rewards starting at one thousand dollars, but specific customer pricing remains less understood among respondents.

Popular Use Cases

Bugcrowd serves as a platform for security researchers and developers in cybersecurity to identify and report security vulnerabilities on websites. It acts as an intermediary between ethical hackers and companies, facilitating the communication of vulnerabilities to sites like Facebook or Twitter. Users log in, select programs for security auditing, report vulnerabilities, and receive bounties if validated. Bugcrowd also supports companies in tracking vulnerability submissions and obtaining feedback.

Service and Support

Bugcrowd customer service receives mixed feedback. Many indicate their support team is active and supportive but highlight delays in response time, ranging from one to seven days, particularly for report mediation. A portion rates their service as seven out of ten, suggesting a need for quicker ticket responses. Some report smooth interactions without any issues, describing the support as quite good, yet the desire for timelier communication persists among users.

Deployment

Users found Bugcrowd's initial setup very easy, rating it highly. They appreciated the straightforward process of creating an account with an email and password, adding a bank account, and waiting for verification. Although simple, the requirement to complete a tax form for bounty payments affected ratings slightly. They described it as intuitive and above expectations, with minimal steps needed to start using Bugcrowd without any significant hurdles or complications in the onboarding process.

Stability

Bugcrowd is perceived as highly stable with most users rating its stability highly. Users rarely encounter outages or significant issues. Although some report minor issues like broken links, these are quickly addressed through support tickets. Many emphasize its reliability, stating they have not faced any problems impacting their usage.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Managed Security Services Providers (MSSP) Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews
Computer Software Company
12%
University
11%
Comms Service Provider
10%
Financial Services Firm
9%
Manufacturing Company
9%
Educational Organization
7%
Retailer
7%
Media Company
5%
Energy/Utilities Company
4%
Healthcare Company
3%
Non Profit
3%
Government
3%
Real Estate/Law Firm
2%
Insurance Company
2%
Performing Arts
2%
Legal Firm
1%
Leisure / Travel Company
1%
Construction Company
1%
Wholesaler/Distributor
1%
Outsourcing Company
1%
Recreational Facilities/Services Company
1%
Aerospace/Defense Firm
1%

Bugcrowd customers

Zephyr Health, Barracuda Networks, Western Union, Instructure, Aruba Networks, Pinterest, CARD.com, WINK, (ISC)2, StatusPage, WHMCS, Movember

Related questions

  • 571
Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
  • 80
What types of Security Operations Center (SOC) deployment models do exist?
  • 5
Why is Managed Security Services important for companies?
  • 1
When evaluating Managed Security Services, what aspect do you think is the most important to look for?
  • 26
How Managed Security Services (MSS) secure your organization?

Product Categories

Product Categories
Managed Security Services Providers (MSSP)
Bug Bounty Platforms
Penetration Testing Services
Attack Surface Management (ASM)
AWS Marketplace