Bugcrowd

“One of the biggest benefits of Bugcrowd for us is the Jira integration. When we first started with Bugcrowd, we didn’t have Jira in place. Then as we moved to Jira, I got really excited because Bugcrowd had an integration that allowed me to push issues and bugs directly into a Jira ticket.”

““Efficiency and effectiveness of the crowd is really why we bring them on… Because we have the crowd involved in the vulnerability management program, it’s helped in expanding of our team for a fraction of the cost. Now my internal resources are better utilized.””

“At Okta, we’re squarely focused on customer success. For my security team, that translates directly to customer security and assurance. Our private bug bounty program with Bugcrowd expanded coverage of my internal attack team by adding a solid bench of diversity and breadth of capabilities.”

““It supports our defence-in-depth strategy and helps us keep up with fast-changing security threats.””

““Working with the community gives us additional security opinions, different perspectives, and a broader view of our controls,””

““We receive a variety of submissions, many of which give us valuable insights into the ‘dark corners’ of our technology estate.””

““We’ve halved the response time for submissions, which helps us achieve a frictionless experience with our community, leaving no hacker waiting around!””

““Thanks to Bugcrowd’s wide reach, we can access a huge pool of hackers who are equipped to test the long list of technologies JET uses,””

““When it comes to hackers, we have made it simple and clear for them to understand our platform perimeter so they can focus their efforts on finding vulnerabilities.””

““We are really proud of the cross-team collaboration we’ve fostered along with new processes for efficiently managing the lifecycle of each report,””

““The flexible nature of the Bugcrowd Platform allows us to shape our strategy and continue to meet stakeholder expectations,””

“Working with the community gives us additional security opinions, different perspectives, and a broader view of our controls. It supports our defence-in-depth strategy and helps us keep up with fast-changing security threats.”

“As the innovative leader in connecting the world to the internet, NETGEAR must earn and maintain the trust of their users by protecting the privacy and security of their data. Being proactive when it comes to security is fundamental to NETGEAR’s approach. By adding a managed bug bounty program through Bugcrowd, we are adding one more layer to our security program.”

““By the end of the engagement with Bugcrowd, we are able to successfully detect and prevent 100% of attacks performed by regular user and IT administrator accounts,””

““Because we now have battle-tested this through the mindset of real attackers, we know that it’s more ready for the real world environment.””

““This approach gives us an advantage over the competition because we’re able to simulate what a real world attack scenario looks like. Rarely do you get to work with real world hackers, looking closely over their shoulder, seeing what they are doing, and monitoring what works for them and what doesn’t,””

“The Bugcrowd Platform, hosted on AWS, was extremely powerful to connect us with the very specific type of hackers that we wanted to gain access to our platform. It was very efficient in connecting us with the exact right type of hackers that we needed,”

“We have found our engagement with Bugcrowd to be valuable. We have received useful submissions that we would never have found with our automated scanning tools. It has been a great addition to our overall security toolkit.”

“Onboarding with Bugcrowd was really smooth. The team helped us introduce the program and align us on a crawl, walk, run approach. We’ve had fantastic results so far,”

“Being able to provide the different levels of data from the platform has been fantastic. We’ve really hit our objective to significantly improve visibility,”

“The Vulnerability Disclosure Program is one of the best value-for-money services that we have. The annual cost of the program is the same cost of one traditional penetration test for us, and the VDP has given us around a 100-fold increase in actionable intelligence,”

“There is a much lower operational overhead now. For individual penetration test engagements, you have to plan it out and involve multiple parties. A lot of time is spent doing that. The Bugcrowd offering reduces resource drain through validation, triage and prioritisation. You also get shared access to top talent with a good combination of skills and experience.”

“Bugcrowd gives us much more assurance that the right things are being tested all of the time by a group of vetted cybersecurity researchers. A once-a-year penetration test is very expensive, point-in-time and has a limited scope, where the very next day things could change. We have continuous visibility now,”

““Bugcrowd’s Vulnerability Disclosure Program is one of the best value-for-money services that we have. The annual cost of the program is the same cost of one traditional penetration test and the VDP has given us around a 100-fold increase in actionable intelligence.””

“When protecting against 21st century threats, you need a 21st century solution.”