Press

Bugcrowd Nets $15M for Bug Bounties With Hackers

Bugcrowd runs programs where hackers compete in bounties

Listen to the community of experts that are already at the table to help, and put real effort into understanding how this community interacts with your constituents and your economy to make it safer. - Casey Ellis, CSO Online

Bug bounties provide something that is increasingly absent in security solutions, which is a human element. We founded Bugcrowd in 2012 with a simple thesis; the only logical way to compete with an army of adversaries is with an army of allies. - Infosecurity Magazine

It's extremely valuable to have a group of people from all over the world, with a variety of skill sets and creativity, who have a different perspective from the internal team. - Tech.Mic

A Bugcrowd report that examines 30 months of bug bounty submissions across 166 programs finds crowdsourced bug discovery is gaining adoption across the industry. - eWeek

Given the bandwidth constraints of the Pinterest Security Team, we decided to leverage the white hat community for reporting vulnerabilities. - Paul Moreno, security team lead at Pinterest | Forbes

We call it the million-person problem - the Cisco report last year saying there are a million unfilled roles in this industry globally. How do we build an army, but then also how do we find a way to connect them to the demand more efficiently than now? - Careers Info Security

Bugcrowd takes out a lot of the legwork for our teams. We can focus on the findings and other projects while Bugcrowd leverages the world to crowdsource information and find bugs on our site. - David Levin, Western Union | Help Net Security

Bugcrowd's testers dig deep in their testing. Not only will they take a URL and test it for many days, but they have also found what other systems have not identified. No system can be proven to have zero vulnerabilities, so continuous testing at this level of depth is great. - David Levin, Western Union | Security Week

Companies are scared of hackers, lurking in the shadow of the Internet--they instill fear because you don’t know where they’re coming from. That’s why you want people who have the same mindset on your side...[T]he more eyes you have looking on your behalf, the better off you are. - Wade Billings, Instructure | edSurge

The testing process was intensive, and justifiably so -- it gave us peace of mind to know we were putting our best foot forward. After all is said and done, we can't imagine going through the launch process without the aid of bug bounty. - Mark Richards, founder and CEO of Homeboy | DarkReading

The goal for us is we need as many eyes on our product as we possibly can get. - Daniel Ford, Blackphone | VentureBeat

As soon as you introduce that kind of incentive you engage more testers and you engage a better quality of researcher. Everyone should have a bug bounty programme of some sort. - BBC

If there's an issue in software, the bad guy is already looking for it. - E-Commerce Times