57 Bugcrowd Testimonials

“If a company says it’s running a bug bounty program, then every security researcher and hacker already knows that the company has already done a lot of security work and has an entire security environment in place. A bug bounty program is one of the last measures in the chain, and it’s an indicator of how well a company manages its security.”

"Bugcrowd provides a variety of resources to look at our site and have many different eyes looking at our security and vulnerabilities."

"Bugcrowd has helped our organization remediate potential security vulnerabilities with an estimated impact of $158 million, based on all triaged submissions."

“Security researchers help us by pointing out vulnerabilities that may not have yet been identified, contributing to an improved security posture.”

“We want to be transparent with existing and potential customers with the lengths we go to in order to protect their privacy and security and are excited to tap on the expertise of thousands of Bugcrowd researchers.”

“It’s a no brainer. You’re getting a much larger pool of people with different back grounds. Whether they’re cloud or mobile or firmware and they’re looking at the product. You get a much better sense of the quality and security of the device rather than going to one or two people.”

"Unlike a scheduled penetration test, time is not a factor. And given the number of researchers on the Bugcrowd platform this means eventually the majority of customer facing applications end up being discovered and further tested. This allows us to ‘even up’ the playing field between security testers and the technology teams."

"We quickly felt safe to take our program public with Bugcrowd. We value the way Bugcrowd finds the right hackers with the right expertise for our programs."

“Intercom’s business relies on customer trust. To keep this trust we need to use the best tools available to keep our customers’ data secure. Our private bug bounty program with Bugcrowd allowed us to tap into the creativity and abilities of hundreds of security researchers to find and report the most complex bugs – the ones vulnerability scanners just can’t uncover. Now we’re expanding our program for access to a bigger pool of researchers to improve our ability to find and fix vulnerabilities.”

"Softdocs’ partnership with Bugcrowd is a key strategy for securing the Etrieve product for our customers. In today’s threat landscape, focused, crowdsourced attention to our digital footprint is important to securing the integrity and privacy of their data."

"We have found our engagement with Bugcrowd to be valuable. We have received useful submissions that we would never have found with our automated scanning tools. It has been a great addition to our overall security toolkit."

“We have used other security programs in the past to supplement our internal security audits but these were costly and happened one to two times per year at best. With Bugcrowd, we’ve added an always-on approach to security.”

"An underrated benefit of Bugcrowd is the service their Application Security Engineers provide in triaging incoming reports. They free up our Security Engineering Team to focus attention on building security in by design and addressing issues directly with dev teams."

“It’s a win-win situation—either the Crowd finds something we didn’t see, in which case we can fix it. Or they don’t find anything, which validates our efforts.”

"Bugcrowd hit the ground running and partnered with us throughout the process. We saw the first batch of vulnerabilities just a week after finalizing our approach."