Bugcrowd Blog

Top 2017 AppSec Challenges and Investment Areas

Posted by Payton O'Neal on Jan 11, 2017 12:37:37 PM

At the close of 2016, we surveyed 100 CISOs and decision makers to get a sense of their 2017 security priorities. The full report will be released at a later date. In the meantime, you can learn more about a few of the top application security focus areas and challenges in this post.

Read More

NETGEAR®, Inc. Launches Public Bug Bounty Program

Posted by Bugcrowd on Jan 9, 2017 7:10:09 PM

We're excited to share that NETGEAR®, Inc. has launched a public bug bounty program with us to help them stay in front of the latest threats and improve the security of the company's products. 

Read More
New Program Announcements

Product Update: Role-Based Access Update

Posted by Travis Andrade on Jan 6, 2017 1:00:00 PM

Bugcrowd is happy to announce a new update to Crowdcontrol’s user permissions that now provides customers a much more customizable experience. A company may now segment their team members’ roles to specific programs. 

Read More
Product Updates

A Hacker at CES

Posted by Jason Haddix on Jan 5, 2017 3:05:00 PM

Today is the first day of another Consumer Electronics Show–CES. Launched 50 years ago the show has been the place to see the latest gadgets, but over the last several years the scope of the show has grown. From cars to drones to personal fitness devices, the show once named for the consumer “electronics” it showcased now features all things consumer technology. 

Read More

Case Study: The ROI of Okta's Bug Bounty Program

Posted by Payton O'Neal on Jan 5, 2017 11:21:42 AM

A few months ago we celebrated the launch of Okta's public bug bounty program after having run a private program for years. Today, we're taking a closer look at how their bug bounty program has influenced their application security program.

Read More
Case Study

December 2016 Hall of Fame!

Posted by Kaila Pollart on Jan 4, 2017 2:26:16 PM

Bugcrowd is excited to announce our December 2016 Hall of Fame winners! 

Read More
Researcher Resources

2017 Bug Bounty Resolutions

Posted by Sam Houston on Jan 3, 2017 12:21:59 PM

The new year is a great time to reflect on the past year and set new goals for the year ahead. To help the Bugcrowd community achieve success in 2017, we've outlined a few New Year's resolutions for bug hunters and bug bounty program managers. Have other resolutions? We want to hear what they are! Tweet us.

Read More
Interesting

Thick Client Promotion: October and November Winners

Posted by Chloe Brown on Dec 29, 2016 11:56:30 AM

Throughout October, November and December 2016, we've challenged our crowd to submit bugs against some challenging targets–thick client applications. Learn more about the competition here.

Read More
Researcher Resources

Bugcrowd in 2016: Transparency, Education, and Quality

Posted by Payton O'Neal on Dec 20, 2016 9:03:00 AM

It goes without saying that it has been a HUGE year for appsec. We’ve seen yet another record breaking year of breaches, we had the largest breach in recorded history–Yahoo, and we also witnessed the largest DDoS attack as far as we know at 1.2TB–Mirai. 

Read More
Bugcrowd News

2017 Predictions: Three Experts Discuss Security Challenges for the Coming Year

Posted by Payton O'Neal on Dec 14, 2016 1:36:31 PM

This week we chatted with three security heavyweights to talk about the top security risks and concerns in the upcoming year. The panel of industry experts includes Jeremiah Grossman, Founder of WhiteHat Security and Chief of Security Strategy with SentinelOne, Daniel Miessler, Project Leader: OWASP IoT Security Project and Richard Rushing, CISO at Motorola Mobility.

Read More