51 Bugcrowd Testimonials

"When protecting against 21st century threats, you need a 21st century solution."

"An underrated benefit of Bugcrowd is the service their Application Security Engineers provide in triaging incoming reports. They free up our Security Engineering Team to focus attention on building security in by design and addressing issues directly with dev teams."

"Unlike a scheduled penetration test, time is not a factor. And given the number of researchers on the Bugcrowd platform this means eventually the majority of customer facing applications end up being discovered and further tested. This allows us to ‘even up’ the playing field between security testers and the technology teams."

“Intercom’s business relies on customer trust. To keep this trust we need to use the best tools available to keep our customers’ data secure. Our private bug bounty program with Bugcrowd allowed us to tap into the creativity and abilities of hundreds of security researchers to find and report the most complex bugs – the ones vulnerability scanners just can’t uncover. Now we’re expanding our program for access to a bigger pool of researchers to improve our ability to find and fix vulnerabilities.”

"Bugcrowd is a great partner for us—the researchers are like an extension of our own security team. Working together we can reduce duplication, coordinate responses, and continuously improve the quality and quantity of submissions. A crowd-sourced approach to security helps us to innovate faster and safeguard customer trust and our reputation."

"Magecart attacks, personal data exfiltration, and account takeovers are a concern in the travel industry, so we’re particularly interested in vulnerability reports relating to those areas to keep our customers safe."

"Their testers dig deep in their testing. Not only will they take a URL and test it for many days, but they have also found what other systems have not identified. No system can be proven to have zero vulnerabilities, so continuous testing at this level of depth is great."

"We now have greater peace of mind that our platforms and data are protected, which is invaluable to the business and our customers."

"We have products that cover a wide variety of applications that utilize various technologies, so we need security testing that can cover all those areas. Bugcrowd’s Ongoing Private Bug Bounty is the best way to get the coverage. Of course, this entire line of thinking starts with the premise that we think product security is of the utmost importance – we want to find the problems before someone else does so that we can help keep our customers secure."

“I could have called anyone to get a clean bill of health, but that`s not our business. We called Bugcrowd because we wanted the most in-depth vetting of our security posture. It`s beyond compliance it`s about true risk reduction.”

"Indeed’s Security and R&D teams were impressed by the results of our first Bug Bash event with Bugcrowd’s global community of security researchers,” said Anthony Moisant, Chief Security Officer, and Chief Information Officer for Indeed. “With the help of the Bugcrowd community and platform, we’ve been able to continue strengthening our security posture and work together to protect the information of job seekers and employers."

“With many companies doing continuous integration, pushing code every day, and utilizing new open source repositories, it's becoming a necessity to crowdsource testing. Utilizing Bugcrowd's researchers levels the playing field, and helps Pinterest find and fix vulnerabilities proactively instead of reactively.”

"Bugcrowd does a wonderful job weeding out the noise so we can get to the real issues."

“The biggest benefit we see from Bugcrowd is the team’s ability to help in managing the bug bounty program so that once reports get to our security team, the are already deduped, validated and triaged. All our security team has to do is fix the bug. Bugcrowd has the best managed services.”

"National Australia Bank wanted to establish a formal and uniform way for security researchers to disclose potential vulnerabilities."