Jump to content

Bugcrowd: Difference between revisions

From Wikipedia, the free encyclopedia
Browse history interactively
← Previous edit
Content deleted Content added
VisualWikitext
Schaudry (talk | contribs)
13 edits
Added a publications section to the Wikipedia page.
Reverting edit(s) by RefferenceGuru (talk) to rev. 1261917281 by Rudradas01: rv spammer and obvious Btw Santosh sock (UV 0.1.6)
 
(41 intermediate revisions by 25 users not shown)
Line 1: Line 1:
{{infobox company
{{infobox company
| name = Bugcrowd
| name = Bugcrowd
| logo = Bugcrowd.svg
| type = Private
| type = Private
| industry = [[Cybersecurity]]
| industry = [[Cybersecurity]]
| founded = 2011
| founded = 2012
| founders = Casey Ellis, Chris Raethke, Sergei Belokamen
| founders = Casey Ellis, Chris Raethke, Sergei Belokamen
| hq_location = San Francisco, California
| hq_location = [[San Francisco, California]] and [[Australia]]
| key_people = Ashish Gupta (CEO), Casey Ellis (Chairman, CTO), Nick McKenzie (CI&SO)
| key_people = {{Unbulleted list| David Gerry (CEO)|Casey Ellis (Founder, Chief Strategy Officer)|Nick McKenzie (CI&SO)|Robert Taccini (CFO)}}
| website = {{URL|https://bugcrowd.com}}
| website = {{URL|https://bugcrowd.com}}
}}
}}


'''Bugcrowd''' is a [[crowdsourcing|crowdsourced]] security platform.<ref name="securityweek">{{cite web|url=https://www.securityweek.com/hackers-receive-500000-one-week-bugcrowd|title=Hackers Receive $500,000 in One Week via Bugcrowd|website=SecurityWeek.Com|accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102118/https://www.securityweek.com/hackers-receive-500000-one-week-bugcrowd|url-status=live}}</ref><ref name=":0">{{Cite news|url=https://www.nytimes.com/2015/06/08/technology/hackerone-connects-hackers-with-companies-and-hopes-for-a-win-win.html?_r=0|title=HackerOne connects hackers with companies and hopes for a win-win.|date=June 7, 2015|work=The New York Times|access-date=October 28, 2015|archive-date=June 11, 2015|archive-url=https://web.archive.org/web/20150611094620/http://www.nytimes.com/2015/06/08/technology/hackerone-connects-hackers-with-companies-and-hopes-for-a-win-win.html?_r=0|url-status=live}}</ref><ref name="arstechnica">{{cite web|url=https://arstechnica.com/information-technology/2020/03/bugcrowd-tries-to-muzzle-hacker-who-found-netflix-account-compromise-weakness/|title=Here's the Netflix account compromise Bugcrowd doesn't want you to know about|website=Ars Technica|accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102108/https://arstechnica.com/information-technology/2020/03/bugcrowd-tries-to-muzzle-hacker-who-found-netflix-account-compromise-weakness/|url-status=live}}</ref>
'''Bugcrowd''' is a [[crowdsourcing|crowdsourced]] security platform.<ref name="securityweek">{{cite web|url=https://www.securityweek.com/hackers-receive-500000-one-week-bugcrowd|title=Hackers Receive $500,000 in One Week via Bugcrowd|website=SecurityWeek.Com|date=11 November 2019 |accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102118/https://www.securityweek.com/hackers-receive-500000-one-week-bugcrowd|url-status=live}}</ref><ref name=":0">{{Cite news|url=https://www.nytimes.com/2015/06/08/technology/hackerone-connects-hackers-with-companies-and-hopes-for-a-win-win.html?_r=0|title=HackerOne connects hackers with companies and hopes for a win-win.|date=June 7, 2015|work=The New York Times|access-date=October 28, 2015|archive-date=June 11, 2015|archive-url=https://web.archive.org/web/20150611094620/http://www.nytimes.com/2015/06/08/technology/hackerone-connects-hackers-with-companies-and-hopes-for-a-win-win.html?_r=0|url-status=live}}</ref><ref name="arstechnica">{{cite web|url=https://arstechnica.com/information-technology/2020/03/bugcrowd-tries-to-muzzle-hacker-who-found-netflix-account-compromise-weakness/|title=Here's the Netflix account compromise Bugcrowd doesn't want you to know about|website=Ars Technica|accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102108/https://arstechnica.com/information-technology/2020/03/bugcrowd-tries-to-muzzle-hacker-who-found-netflix-account-compromise-weakness/|url-status=live}}</ref> It was founded in 2012, and in 2019 it was one of the largest bug bounty and vulnerability disclosure companies on the internet.<ref name="techcrunch">{{cite web|url=https://techcrunch.com/2019/05/31/bugcrowd-crowdsourcing-cybersecurity/|website=techcrunch.com|title=TechCrunch is now a part of Verizon Media|date=31 May 2019 |accessdate=March 22, 2020|archive-date=March 28, 2020|archive-url=https://web.archive.org/web/20200328043725/https://techcrunch.com/2019/05/31/bugcrowd-crowdsourcing-cybersecurity/|url-status=live}}</ref> Bugcrowd runs [[bug bounty program]]s and also offers a range of [[penetration testing]] services it refers to as "Penetration Testing as a Service" (PTaaS), as well as [[attack surface]] management.<ref name="thehackernews">{{cite web|url=https://thehackernews.com/2021/02/top-5-bug-bounty-programs-to-watch-in.html|title=Top 5 Bug Bounty Platforms to Watch in 2021|date=8 February 2021|website=thehackernews.com|archive-url=https://web.archive.org/web/20210707100914/https://thehackernews.com/2021/02/top-5-bug-bounty-programs-to-watch-in.html|archive-date=7 July 2021|language=en}}</ref><ref>{{cite web |title=Penetration Testing as a Service |url=https://www.bugcrowd.com/products/pen-test-as-a-service/ |website=Bugcrowd |access-date=17 October 2023}}</ref><ref>{{cite web |title=Attack Surface Management |url=https://www.bugcrowd.com/products/attack-surface-management/ |website=Bugcrowd |access-date=17 October 2023}}</ref>
It was one of the first companies to embrace and utilize crowd-sourced security and cybersecurity researchers as linchpins of its business model.
It was founded in 2011 and in 2019 it was one of the largest bug bounty and vulnerability disclosure companies on the internet.<ref name="techcrunch">{{cite web|url=https://techcrunch.com/2019/05/31/bugcrowd-crowdsourcing-cybersecurity/|website=techcrunch.com|title=TechCrunch is now a part of Verizon Media|accessdate=March 22, 2020|archive-date=March 28, 2020|archive-url=https://web.archive.org/web/20200328043725/https://techcrunch.com/2019/05/31/bugcrowd-crowdsourcing-cybersecurity/|url-status=live}}</ref>
⚫
In March 2018 it secured $26&nbsp;million in a [[Series C financing|Series C funding]] round led by Triangle Peak Partners.<ref name="securityweek2">{{cite web|url=https://www.securityweek.com/bugcrowd-raises-26-million-expand-vulnerability-hunting-business|title=Bugcrowd Raises $26 Million to Expand Vulnerability Hunting Business|website=SecurityWeek.Com|accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102117/https://www.securityweek.com/bugcrowd-raises-26-million-expand-vulnerability-hunting-business|url-status=live}}</ref>Bugcrowd announced [[Series D|Series D funding]] in April 2020 of $30 million led by previous investor [https://www.rallyventures.com Rally Ventures].<ref>{{Cite web|title=Bugcrowd raises $30M in Series D to expand its bug bounty platform|url=https://social.techcrunch.com/2020/04/09/bugcrowd-series-d/|access-date=2021-01-09|website=TechCrunch|language=en-US}}</ref>In total, Bugcrowd has raised nearly $80 million in venture funding since 2011.<ref>{{Cite web|title=Bugcrowd - Crunchbase Company Profile & Funding|url=https://www.crunchbase.com/organization/bugcrowd|access-date=2021-01-09|website=Crunchbase|language=en}}</ref>


== Publications ==
== History ==
Bugcrowd was founded in [[Sydney]], [[Australia]] in 2012. {{As of|2018}}, its main headquarters is in [[San Francisco]], with other offices in Sydney and [[London]].<ref>{{cite web|url=https://www.afr.com/technology/aussie-cyber-security-bounty-hunter-bugcrowd-has-big-plans-after-33m-round-20180302-h0wxtr|title=Aussie cyber security bounty hunter Bugcrowd has big plans after $33m round|date=5 March 2018|author=Michael Bailey|website=afr.com|publisher=[[Australian Financial Review]]|access-date=2021-07-07|archive-url=https://web.archive.org/web/20210707100103/https://www.afr.com/technology/aussie-cyber-security-bounty-hunter-bugcrowd-has-big-plans-after-33m-round-20180302-h0wxtr|archive-date=7 July 2021|language=en}}</ref>
In 2020 Bugcrowd published "Inside the Mind of a Hacker," an extensive study of global hackers and the economics of security research.<ref>{{Cite web|title=2020 Inside the Mind of a Hacker Report {{!}} Bugcrowd|url=http://itmoah.bugcrowd.com/|access-date=2021-07-08|website=2020 Inside the Mind of a Hacker Report {{!}} Bugcrowd}}</ref>

In May 2024, Bugcrowd acquired attack surface management company, Informer.<ref>{{Cite web |last=Lunden |first=Ingrid |date=May 23, 2024 |title=Bugcrowd, the crowdsourced white-hat hacker platform, acquires Informer to ramp up its security chops |url=https://techcrunch.com/2024/05/23/bugcrowd-the-crowdsourced-white-hat-hacker-platform-acquires-informer-to-ramp-up-its-security-chops/ |website=Techcrunch}}</ref>

== Funding ==
Bugcrowd has raised a total of $78.7&nbsp;million in funding over 6 rounds. Their seed funding started in 2013 to increase their 3000 vetted security testers.<ref name="techcrunch1" /> This seed funding was primarily led by Rally Ventures and they were able to raise $1.6&nbsp;million.<ref name="techcrunch1">{{cite web|url=https://techcrunch.com/2013/09/04/bugcrowd-raises-1-6-million-to-expand-bug-bounty-marketplace/|title=Bugcrowd Raises $1.6 Million To Expand Bug Bounty Marketplace|date=4 September 2013|website=techcrunch.com|publisher=[[TechCrunch]]|access-date=2021-07-07|language=en|author=Mahesh Sharma|archive-url=https://web.archive.org/web/20210707113327/https://techcrunch.com/2013/09/04/bugcrowd-raises-1-6-million-to-expand-bug-bounty-marketplace/|archive-date=7 July 2021}}</ref>

[[Series A]] funding round took place in 2015 and was led by Costanoa Ventures, raising $6&nbsp;million.<ref>{{cite web|url=https://www.prnewswire.com/news-releases/bugcrowd-raises-6-million-in-series-a-funding-to-further-accelerate-enterprise-adoption-of-crowdsourced-security-300049528.html|title=Bugcrowd Raises $6 Million In Series A Funding To Further Accelerate Enterprise Adoption Of Crowdsourced Security|date=12 March 2015|website=prnewswire.com|publisher=[[PR Newswire]]|language=en|access-date=2021-07-07|archive-url=https://web.archive.org/web/20210707112427/https://www.prnewswire.com/news-releases/bugcrowd-raises-6-million-in-series-a-funding-to-further-accelerate-enterprise-adoption-of-crowdsourced-security-300049528.html|archive-date=7 July 2021}}</ref>

Blackbird Ventures led funding for their [[Series B]] round with $15&nbsp;million raised in April 2016.<ref>{{cite web|url=https://www.networkworld.com/article/3057271/bugcrowd-raises-cash-because-of-the-power-of-the-people.html|title=Bugcrowd raises cash because of the power of the people|date=20 April 2016|language=en|author=Ben Kepes|website=networkworld.com|publisher=[[International Data Group|Network World]]|access-date=2021-07-07|archive-url=https://web.archive.org/web/20210707102519/https://www.networkworld.com/article/3057271/bugcrowd-raises-cash-because-of-the-power-of-the-people.html|archive-date=7 July 2021}}</ref><ref>{{cite web|url=https://www.sfgate.com/business/article/Amid-bug-bounty-appeal-BugCrowd-raises-Series-B-7266430.php|title=Amid bug bounty appeal, Bugcrowd raises Series B|date=20 April 2016|website=sfgate.com|publisher=[[San Francisco Chronicle]]|language=en|access-date=2021-07-07|author=Sean Sposito|archive-url=https://web.archive.org/web/20210707103350/https://www.sfgate.com/business/article/Amid-bug-bounty-appeal-BugCrowd-raises-Series-B-7266430.php|archive-date=7 July 2021}}</ref>

⚫
In March 2018, it secured $26&nbsp;million in a [[Series C financing|Series C funding]] round led by Triangle Peak Partners.<ref name="securityweek2">{{cite web|url=https://www.securityweek.com/bugcrowd-raises-26-million-expand-vulnerability-hunting-business|title=Bugcrowd Raises $26 Million to Expand Vulnerability Hunting Business|website=SecurityWeek.Com|date=March 2018 |accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102117/https://www.securityweek.com/bugcrowd-raises-26-million-expand-vulnerability-hunting-business|url-status=live}}</ref>

Bugcrowd announced [[Series D|Series D funding]] in April 2020 of $30&nbsp;million led by previous investor Rally Ventures.<ref>{{Cite web|title=Bugcrowd raises $30M in Series D to expand its bug bounty platform|url=https://techcrunch.com/2020/04/09/bugcrowd-series-d/|access-date=2021-01-09|website=TechCrunch|date=9 April 2020 |language=en-US}}</ref><ref name="techcrunch2">{{cite web|url=https://techcrunch.com/2020/04/09/bugcrowd-series-d/?guccounter=1|title=Bugcrowd raises $30M in Series D to expand its bug bounty platform|author=Zack Whittaker|date=9 April 2020|website=techcrunch.com|publisher=[[TechCrunch]]|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707101930/https://techcrunch.com/2020/04/09/bugcrowd-series-d/?guccounter=1|archive-date=7 July 2021}}</ref>

== Clients ==
{{As of|2020}}, Bugcrowd worked with 65 industries across 29 countries.<ref name="techcrunch2" /> Their clients have included [[Tesla, Inc.|Tesla]], [[Atlassian]], [[Fitbit]], [[Square, Inc.|Square]], [[Mastercard]], [[Amazon (company)|Amazon]] and [[eBay]].<ref>{{cite web|url=https://www.cyberscoop.com/bugcrowd-series-c-funding/|title=Bugcrowd raises $26 million in latest funding round|date=1 March 2018|author=Zaid Shoorbajee|website=cyberscoop.com|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707114423/https://www.cyberscoop.com/bugcrowd-series-c-funding/|archive-date=7 July 2021}}</ref><ref name="thehackernews" />

Bugcrowd's first partner in the financial industry was [[Western Union]], in 2015. Originally a private, invite-only program, it was later opened to the public, with rewards varying between $100 and $5000 depending on the bug.<ref name="prnewswire">{{cite web|url=https://www.prnewswire.com/news-releases/bugcrowd-enters-financial-sector-announces-managed-bug-bounty-program-for-western-union-300048497.html|title=Bugcrowd Enters Financial Sector, Announces Managed Bug Bounty Program for Western Union|date=11 March 2015|website=prnewswire.com|publisher=[[PR Newswire]]|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707120710/https://www.prnewswire.com/news-releases/bugcrowd-enters-financial-sector-announces-managed-bug-bounty-program-for-western-union-300048497.html|archive-date=7 July 2021}}</ref> In 2020, Bugcrowd helped [[National Australia Bank]] become one of the first banks in Australia to launch a bug bounty.<ref>{{cite web|url=https://news.nab.com.au/news_room_posts/nab-launches-cyber-bug-bounty-program/|title=NAB LAUNCHES CYBER BUG BOUNTY PROGRAM|date=25 September 2020|website=news.nab.com.au|publisher=[[National Australia Bank]]|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707121401/https://news.nab.com.au/news_room_posts/nab-launches-cyber-bug-bounty-program/|archive-date=7 July 2021}}</ref>

[[Samsung]] has also worked with Bugcrowd, rewarding a total of over $2&nbsp;million in rewards to those who found bugs in Samsung's security.<ref>{{cite web|url=https://www.darkreading.com/mobile/bugcrowds-crowdsourced-cybersecurity-platform-helps-pay-over-$2m-to-researchers-for-samsung-mobile-rewards-program/d/d-id/1339480|title=Bugcrowd's Crowdsourced Cybersecurity Platform Helps Pay Over $2M to Researchers for Samsung Mobile Rewards Program|date=17 November 2020|website=darkreading.com|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20201202002827/https://www.darkreading.com/mobile/bugcrowds-crowdsourced-cybersecurity-platform-helps-pay-over-$2m-to-researchers-for-samsung-mobile-rewards-program/d/d-id/1339480|archive-date=2 December 2020}}</ref>

Job platform [[Seek Limited|Seek]] has been using Bugcrowd since 2019 with the highest reward from their bug bounty program being $10,000.<ref>{{cite web|url=https://medium.com/seek-blog/get-involved-with-seeks-10k-bug-bounty-program-20933b310dca|title=Get involved with SEEK's $10K Bug Bounty Program|date=29 January 2019|website=medium.com|access-date=2021-07-07|language=en|author=Julian Berton|archive-url=https://web.archive.org/web/20210707124227/https://medium.com/seek-blog/get-involved-with-seeks-10k-bug-bounty-program-20933b310dca|archive-date=7 July 2021}}</ref><ref>{{cite web|url=https://www.seek.com.au/reporting-security-vulnerabilities/|title=Reporting Security Vulnerabilities|website=seek.com.au|access-date=2021-07-07|language=en}}</ref>

In 2020, [[ExpressVPN]] worked with Bugcrowd, awarding $100 to $2500 depending on the severity of the vulnerabilities that were found, with 21 critical findings identified.<ref>{{cite web|url=https://www.techradar.com/news/calling-all-ethical-vpn-hackers-expressvpn-launches-new-look-bug-bounty-program|title=Calling all ethical VPN hackers: ExpressVPN launches new-look bug bounty program|date=16 July 2020|website=techradar.com|publisher=[[TechRadar]]|access-date=2021-07-07|language=en|author=Joel Khalili|archive-url=https://web.archive.org/web/20210707122759/https://www.techradar.com/news/calling-all-ethical-vpn-hackers-expressvpn-launches-new-look-bug-bounty-program|archive-date=7 July 2021}}</ref>

Bugcrowd also runs programs for the U.S. [[United States Department of Defense|DOD]], the [[United States Air Force|Air Force]], [[NASA]] and DDS.<ref>{{cite web|url=https://www.nextgov.com/cybersecurity/2018/10/dod-invests-34-million-hack-pentagon-expansion/152267/|title=DOD Invests $34 Million in Hack the Pentagon Expansion|date=24 October 2018|author=Aaron Boyd|website=nextgov.com|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20201126130209/https://www.nextgov.com/cybersecurity/2018/10/dod-invests-34-million-hack-pentagon-expansion/152267/|archive-date=26 November 2020}}</ref><ref>{{cite web|url=https://businesschief.com/interviews/lauren-knausenberger-leading-innovation-in-the-us-air-force|title=Leading innovation in the US Air Forces|website=businesschief.com|author=Lauren Knausenberger|date=21 May 2020 |archive-url=https://web.archive.org/web/20210707125618/https://businesschief.com/interviews/lauren-knausenberger-leading-innovation-in-the-us-air-force|archive-date=7 July 2021}}</ref>

== Other projects ==
In 2018, Bugcrowd and CipherLaw's Open Source Vulnerability Disclosure Framework, together with the #LegalBugBounty project, created the open-source project disclose.io, which aims to create an open-source standard for bug bounties and vulnerability disclosures to help hackers and organizations work together to make the Internet safer.<ref>{{cite web |last1=Gallagher |first1=Sean |title=New open source effort: Legal code to make reporting security bugs safer |url=https://arstechnica.com/information-technology/2018/08/new-open-source-effort-legal-code-to-make-reporting-security-bugs-safer/ |website=Ars Technica |access-date=17 October 2023 |language=en-us |date=2 August 2018}}</ref><ref>{{cite web |last1=Haworth |first1=Jessica |title=Open source Disclose.io framework bridges legal gap in bug reporting |url=https://portswigger.net/daily-swig/open-source-disclose-io-framework-bridges-legal-gap-in-bug-reporting |website=The Daily Swig |publisher=PortSwigger Web Security |access-date=17 October 2023 |language=en |date=14 August 2018}}</ref>

The company also runs Bugcrowd University, which provides educational resources to help the public learn how to code, find bugs in security systems and patch them.<ref name="techtarget">{{cite web|url=https://searchsecurity.techtarget.com/tip/Top-10-cybersecurity-online-courses|title=Top 10 cybersecurity online courses for 2021|website=techtarget.com|publisher=[[TechTarget]]|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707123538/https://searchsecurity.techtarget.com/tip/Top-10-cybersecurity-online-courses|archive-date=7 July 2021}}</ref><ref>{{cite web |title=Bugcrowd University Opens Its Doors to the Crowd |url=https://www.bugcrowd.com/press-release/bugcrowd-university-opens-its-doors-to-the-crowd/ |website=Bugcrowd |access-date=17 October 2023 |date=8 August 2018}}</ref>

== See also ==

* [[ANY.RUN]]
* [[Imprivata]]


==References==
==References==
{{reflist|1}}
{{reflist}}


==External links==
==External links==
* [https://www.bugcrowd.com Company Website]
* [https://www.bugcrowd.com Company Website]
* [https://www.crunchbase.com/organization/bugcrowd Company Profile: Crunchbase]
* [https://www.bloomberg.com/profile/company/1580901D:US Company Profile: Bloomberg]


[[Category:Companies based in San Francisco]]
[[Category:Companies based in San Francisco]]

Latest revision as of 23:46, 8 December 2024

Bugcrowd
Company typePrivate
IndustryCybersecurity
Founded2012
FoundersCasey Ellis, Chris Raethke, Sergei Belokamen
HeadquartersSan Francisco, California and Australia
Key people
  • David Gerry (CEO)
  • Casey Ellis (Founder, Chief Strategy Officer)
  • Nick McKenzie (CI&SO)
  • Robert Taccini (CFO)
Websitebugcrowd.com

Bugcrowd is a crowdsourced security platform.[1][2][3] It was founded in 2012, and in 2019 it was one of the largest bug bounty and vulnerability disclosure companies on the internet.[4] Bugcrowd runs bug bounty programs and also offers a range of penetration testing services it refers to as "Penetration Testing as a Service" (PTaaS), as well as attack surface management.[5][6][7]

History

[edit]

Bugcrowd was founded in Sydney, Australia in 2012. As of 2018, its main headquarters is in San Francisco, with other offices in Sydney and London.[8]

In May 2024, Bugcrowd acquired attack surface management company, Informer.[9]

Funding

[edit]

Bugcrowd has raised a total of $78.7 million in funding over 6 rounds. Their seed funding started in 2013 to increase their 3000 vetted security testers.[10] This seed funding was primarily led by Rally Ventures and they were able to raise $1.6 million.[10]

Series A funding round took place in 2015 and was led by Costanoa Ventures, raising $6 million.[11]

Blackbird Ventures led funding for their Series B round with $15 million raised in April 2016.[12][13]

In March 2018, it secured $26 million in a Series C funding round led by Triangle Peak Partners.[14]

Bugcrowd announced Series D funding in April 2020 of $30 million led by previous investor Rally Ventures.[15][16]

Clients

[edit]

As of 2020, Bugcrowd worked with 65 industries across 29 countries.[16] Their clients have included Tesla, Atlassian, Fitbit, Square, Mastercard, Amazon and eBay.[17][5]

Bugcrowd's first partner in the financial industry was Western Union, in 2015. Originally a private, invite-only program, it was later opened to the public, with rewards varying between $100 and $5000 depending on the bug.[18] In 2020, Bugcrowd helped National Australia Bank become one of the first banks in Australia to launch a bug bounty.[19]

Samsung has also worked with Bugcrowd, rewarding a total of over $2 million in rewards to those who found bugs in Samsung's security.[20]

Job platform Seek has been using Bugcrowd since 2019 with the highest reward from their bug bounty program being $10,000.[21][22]

In 2020, ExpressVPN worked with Bugcrowd, awarding $100 to $2500 depending on the severity of the vulnerabilities that were found, with 21 critical findings identified.[23]

Bugcrowd also runs programs for the U.S. DOD, the Air Force, NASA and DDS.[24][25]

Other projects

[edit]

In 2018, Bugcrowd and CipherLaw's Open Source Vulnerability Disclosure Framework, together with the #LegalBugBounty project, created the open-source project disclose.io, which aims to create an open-source standard for bug bounties and vulnerability disclosures to help hackers and organizations work together to make the Internet safer.[26][27]

The company also runs Bugcrowd University, which provides educational resources to help the public learn how to code, find bugs in security systems and patch them.[28][29]

See also

[edit]

References

[edit]
  1. ^ "Hackers Receive $500,000 in One Week via Bugcrowd". SecurityWeek.Com. 11 November 2019. Archived from the original on March 22, 2020. Retrieved March 22, 2020.
  2. ^ "HackerOne connects hackers with companies and hopes for a win-win". The New York Times. June 7, 2015. Archived from the original on June 11, 2015. Retrieved October 28, 2015.
  3. ^ "Here's the Netflix account compromise Bugcrowd doesn't want you to know about". Ars Technica. Archived from the original on March 22, 2020. Retrieved March 22, 2020.
  4. ^ "TechCrunch is now a part of Verizon Media". techcrunch.com. 31 May 2019. Archived from the original on March 28, 2020. Retrieved March 22, 2020.
  5. ^ a b "Top 5 Bug Bounty Platforms to Watch in 2021". thehackernews.com. 8 February 2021. Archived from the original on 7 July 2021.
  6. ^ "Penetration Testing as a Service". Bugcrowd. Retrieved 17 October 2023.
  7. ^ "Attack Surface Management". Bugcrowd. Retrieved 17 October 2023.
  8. ^ Michael Bailey (5 March 2018). "Aussie cyber security bounty hunter Bugcrowd has big plans after $33m round". afr.com. Australian Financial Review. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  9. ^ Lunden, Ingrid (May 23, 2024). "Bugcrowd, the crowdsourced white-hat hacker platform, acquires Informer to ramp up its security chops". Techcrunch.
  10. ^ a b Mahesh Sharma (4 September 2013). "Bugcrowd Raises $1.6 Million To Expand Bug Bounty Marketplace". techcrunch.com. TechCrunch. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  11. ^ "Bugcrowd Raises $6 Million In Series A Funding To Further Accelerate Enterprise Adoption Of Crowdsourced Security". prnewswire.com. PR Newswire. 12 March 2015. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  12. ^ Ben Kepes (20 April 2016). "Bugcrowd raises cash because of the power of the people". networkworld.com. Network World. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  13. ^ Sean Sposito (20 April 2016). "Amid bug bounty appeal, Bugcrowd raises Series B". sfgate.com. San Francisco Chronicle. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  14. ^ "Bugcrowd Raises $26 Million to Expand Vulnerability Hunting Business". SecurityWeek.Com. March 2018. Archived from the original on March 22, 2020. Retrieved March 22, 2020.
  15. ^ "Bugcrowd raises $30M in Series D to expand its bug bounty platform". TechCrunch. 9 April 2020. Retrieved 2021-01-09.
  16. ^ a b Zack Whittaker (9 April 2020). "Bugcrowd raises $30M in Series D to expand its bug bounty platform". techcrunch.com. TechCrunch. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  17. ^ Zaid Shoorbajee (1 March 2018). "Bugcrowd raises $26 million in latest funding round". cyberscoop.com. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  18. ^ "Bugcrowd Enters Financial Sector, Announces Managed Bug Bounty Program for Western Union". prnewswire.com. PR Newswire. 11 March 2015. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  19. ^ "NAB LAUNCHES CYBER BUG BOUNTY PROGRAM". news.nab.com.au. National Australia Bank. 25 September 2020. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  20. ^ "Bugcrowd's Crowdsourced Cybersecurity Platform Helps Pay Over $2M to Researchers for Samsung Mobile Rewards Program". darkreading.com. 17 November 2020. Archived from the original on 2 December 2020. Retrieved 2021-07-07.
  21. ^ Julian Berton (29 January 2019). "Get involved with SEEK's $10K Bug Bounty Program". medium.com. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  22. ^ "Reporting Security Vulnerabilities". seek.com.au. Retrieved 2021-07-07.
  23. ^ Joel Khalili (16 July 2020). "Calling all ethical VPN hackers: ExpressVPN launches new-look bug bounty program". techradar.com. TechRadar. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  24. ^ Aaron Boyd (24 October 2018). "DOD Invests $34 Million in Hack the Pentagon Expansion". nextgov.com. Archived from the original on 26 November 2020. Retrieved 2021-07-07.
  25. ^ Lauren Knausenberger (21 May 2020). "Leading innovation in the US Air Forces". businesschief.com. Archived from the original on 7 July 2021.
  26. ^ Gallagher, Sean (2 August 2018). "New open source effort: Legal code to make reporting security bugs safer". Ars Technica. Retrieved 17 October 2023.
  27. ^ Haworth, Jessica (14 August 2018). "Open source Disclose.io framework bridges legal gap in bug reporting". The Daily Swig. PortSwigger Web Security. Retrieved 17 October 2023.
  28. ^ "Top 10 cybersecurity online courses for 2021". techtarget.com. TechTarget. Archived from the original on 7 July 2021. Retrieved 2021-07-07.
  29. ^ "Bugcrowd University Opens Its Doors to the Crowd". Bugcrowd. 8 August 2018. Retrieved 17 October 2023.
[edit]
Retrieved from "https://en.wikipedia.org/enwiki/w/index.php?title=Bugcrowd&oldid=1261977017"