Bugcrowd

“Integration options for developers were the deciding factor, not the price. With other providers, you can pull things out via API. With Bugcrowd, we simply already had a ready-made Slack-Jira integration. And those are the two that are important to us. We don’t have to develop it, it’s just already there and it’s used a lot.””

““If a company says it’s running a bug bounty program, then every security researcher and hacker already knows that the company has already done a lot of security work and has an entire security environment in place. A bug bounty program is one of the last measures in the chain, and it’s an indicator of how well a company manages its security.””

“The vulnerability information we receive from the program has proven to be a valuable tool in training our internal employees on what to look for, and how to use the tools associated with doing application security testing.”

“Unlike a scheduled penetration test, time is not a factor. And given the number of researchers on the Bugcrowd platform this means eventually the majority of customer facing applications end up being discovered and further tested. This allows us to ‘even up’ the playing field between security testers and the technology teams.”

“Security is the foundation on which users trust Schoology. We are committed to users privacy and it is important that we continue to be a platform that users trust. We partnered with Bugcrowd to make our security program stronger, harnessing the breadth and depth of skilled security testers matched with an incredibly powerful platform and team.”

““Bugcrowd is a win–win situation for hackers looking to make an impact on internet security while making money and for companies looking to improve their security by finding these security issues before they become bigger problems,””

“We quickly felt safe to take our program public with Bugcrowd. We value the way Bugcrowd finds the right hackers with the right expertise for our programs.”

“With the help of the Bugcrowd community and platform, we’ve been able to continue strengthening our security posture and work together to protect the information of job seekers and employers.”

“From day one, Bugcrowd has been a valued partner for us. Not only are they quick to respond, but with their security expertise, we can continue to strengthen our security posture and work together to protect the information of job seekers and employers”

“Indeed’s Security and R&D teams were impressed by the results of our first Bug Bash event with Bugcrowd’s global community of security researchers,” said Anthony Moisant, Chief Security Officer, and Chief Information Officer for Indeed. “With the help of the Bugcrowd community and platform, we’ve been able to continue strengthening our security posture and work together to protect the information of job seekers and employers.”

““It’s huge to be able to directly push vulnerabilities into our Jira queue. We don’t have to treat it any differently, depending on what part of our application is affected, a ticket is created and tasked to the team responsible for building it.””

“One of the biggest benefits of Bugcrowd for us is the Jira integration. When we first started with Bugcrowd, we didn’t have Jira in place. Then as we moved to Jira, I got really excited because Bugcrowd had an integration that allowed me to push issues and bugs directly into a Jira ticket.”

““It supports our defence-in-depth strategy and helps us keep up with fast-changing security threats.””

““Working with the community gives us additional security opinions, different perspectives, and a broader view of our controls,””

““We receive a variety of submissions, many of which give us valuable insights into the ‘dark corners’ of our technology estate.””

““We’ve halved the response time for submissions, which helps us achieve a frictionless experience with our community, leaving no hacker waiting around!””

““Thanks to Bugcrowd’s wide reach, we can access a huge pool of hackers who are equipped to test the long list of technologies JET uses,””

““When it comes to hackers, we have made it simple and clear for them to understand our platform perimeter so they can focus their efforts on finding vulnerabilities.””

““We are really proud of the cross-team collaboration we’ve fostered along with new processes for efficiently managing the lifecycle of each report,””

““The flexible nature of the Bugcrowd Platform allows us to shape our strategy and continue to meet stakeholder expectations,””

“Working with the community gives us additional security opinions, different perspectives, and a broader view of our controls. It supports our defence-in-depth strategy and helps us keep up with fast-changing security threats.”

“As the innovative leader in connecting the world to the internet, NETGEAR must earn and maintain the trust of their users by protecting the privacy and security of their data. Being proactive when it comes to security is fundamental to NETGEAR’s approach. By adding a managed bug bounty program through Bugcrowd, we are adding one more layer to our security program.”

““By the end of the engagement with Bugcrowd, we are able to successfully detect and prevent 100% of attacks performed by regular user and IT administrator accounts,””

““Because we now have battle-tested this through the mindset of real attackers, we know that it’s more ready for the real world environment.””

““This approach gives us an advantage over the competition because we’re able to simulate what a real world attack scenario looks like. Rarely do you get to work with real world hackers, looking closely over their shoulder, seeing what they are doing, and monitoring what works for them and what doesn’t,””