Bugcrowd

Bugcrowd is a crowdsourced security platform. Companies use it to run bug bounty programs, penetration tests and vulnerability disclosure, with the work done by a community of security researchers.

Organisations publish a scope and invite researchers to test it. Reports are collected and triaged on one platform, so security teams can see what was found and what needs fixing. The company also offers managed services that combine testing with attack surface management.

• Bug bounty programs run with a crowd of researchers
• Penetration testing for web, mobile, API, network and cloud
• Vulnerability disclosure programs for public reports
• Attack surface management for outside-facing assets
• Leaderboard and community for hackers taking part

• Security buyers who want outside testing without building a large in-house team
• Security researchers who want to test approved targets
• Larger companies with regulated or high-risk systems

Get a quote from the company for pricing, since services are arranged per engagement. The platform is web-based. A bounty program needs clear rules of engagement and a plan for handling reports, or the results can be hard to act on.