Try our new research platform with insights from 80,000+ expert users
Bugcrowd Logo

Bugcrowd Reviews

Vendor: Bugcrowd
4.3 out of 5
Badge Leader
Leave a review

What is Bugcrowd?

By combining a vast and diverse workforce with a results-driven model, crowdsourced security programs outperform traditional methods-every time.

Get the Managed Security Services Providers (MSSP) Buyer's Guide and find out what your peers are saying about Bugcrowd, HackerOne, Intigriti and more!
Bugcrowd is the #2 ranked solution in top Bug Bounty Platforms, #3 ranked solution in top Penetration Testing Services, #16 ranked solution in top Managed Security Services Providers (MSSP) solutions, and #17 ranked solution in top Attack Surface Management (ASM) solutions. PeerSpot users give Bugcrowd an average rating of 8.6 out of 10. Bugcrowd is most commonly compared to HackerOne: Bugcrowd vs HackerOne. Bugcrowd is popular among the large enterprise segment, accounting for 55% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 12% of all views.
Buyer's Guide
Managed Security Services Providers (MSSP)
January 2025
Get the category report
Helped 866,088 peers since 2012

Featured Bugcrowd reviews

Read more reviews

Bugcrowd mindshare

Product category:
Managed Security Services Providers (...
As of August 2025, the mindshare of Bugcrowd in the Managed Security Services Providers (MSSP) category stands at 1.4%, up from 0.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Managed Security Services Providers (MSSP) Market Share Distribution
ProductMarket Share (%)
Bugcrowd1.4%
Secureworks Taegis Managed XDR / MDR6.6%
Laburity6.1%
Other85.9%
Managed Security Services Providers (MSSP)
 
 
Key learnings from peers

Valuable Features

Bugcrowd offers significant features such as reward programs with disclosed incentives, a pen test for top hackers, and the Collections feature for targeting specific companies. Users appreciate the extensive list of websites and web applications for reporting vulnerabilities, guaranteed payments, and a competitive environment. The report creation process using markdown and image drag-and-drop is efficient. Users value the high bounties, hall of fame, stickers, and platform usability.
  • "I would rate Bugcrowd a ten out of ten."
  • "Bugcrowd's support team is very active and supportive."
  • "One of the features I like most about Bugcrowd is the ability to create a report in a very easy way."

Room for Improvement

Bugcrowd requires enhancement in report access for full disclosure after bug resolution to aid learning, similar to HackerOne. Improvements are needed in customer support, particularly in addressing urgency and reducing response time. The triaging process has become slower, increasing time to vulnerability resolution and payouts. New users face challenges accessing private programs. Reducing time required for customer input during ticket resolution would be beneficial. The platform itself demands enhancements for better performance.
  • "There is room for improvement in Bugcrowd's response time when customer input is needed for resolving tickets. If this time could be minimized, it would be very helpful."
  • "There is room for improvement in Bugcrowd's response time when customer input is needed for resolving tickets."
  • "Bugcrowd should provide more access to the reports, similar to HackerOne, allowing for full disclosure once a bug is resolved, so researchers can learn from them. They should improve the responsibility type and response time of their customer support, especially when the issue is urgent."

Pricing

Pricing for Bugcrowd pleases security researchers as it appears inexpensive and often free of fees or commissions. Bounty tables are well-regarded, while public engagements are accessible without cost. Private arrangements require invitations. Organizations reported setups involving rewards starting at one thousand dollars, but specific customer pricing remains less understood among respondents.

Popular Use Cases

Bugcrowd serves as a platform for security researchers and developers in cybersecurity to identify and report security vulnerabilities on websites. It acts as an intermediary between ethical hackers and companies, facilitating the communication of vulnerabilities to sites like Facebook or Twitter. Users log in, select programs for security auditing, report vulnerabilities, and receive bounties if validated. Bugcrowd also supports companies in tracking vulnerability submissions and obtaining feedback.

Service and Support

Bugcrowd customer service receives mixed feedback. Many indicate their support team is active and supportive but highlight delays in response time, ranging from one to seven days, particularly for report mediation. A portion rates their service as seven out of ten, suggesting a need for quicker ticket responses. Some report smooth interactions without any issues, describing the support as quite good, yet the desire for timelier communication persists among users.

Deployment

Users found Bugcrowd's initial setup very easy, rating it highly. They appreciated the straightforward process of creating an account with an email and password, adding a bank account, and waiting for verification. Although simple, the requirement to complete a tax form for bounty payments affected ratings slightly. They described it as intuitive and above expectations, with minimal steps needed to start using Bugcrowd without any significant hurdles or complications in the onboarding process.

Stability

Bugcrowd is perceived as highly stable with most users rating its stability highly. Users rarely encounter outages or significant issues. Although some report minor issues like broken links, these are quickly addressed through support tickets. Many emphasize its reliability, stating they have not faced any problems impacting their usage.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Managed Security Services Providers (MSSP) Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews
Computer Software Company
12%
Comms Service Provider
10%
University
9%
Manufacturing Company
9%
Financial Services Firm
7%
Retailer
7%
Educational Organization
5%
Government
4%
Energy/Utilities Company
4%
Media Company
4%
Performing Arts
4%
Real Estate/Law Firm
3%
Healthcare Company
2%
Non Profit
2%
Wholesaler/Distributor
2%
Construction Company
2%
Hospitality Company
2%
Outsourcing Company
2%
Insurance Company
2%
Recreational Facilities/Services Company
1%
Leisure / Travel Company
1%
Recruiting/Hr Firm
1%
Aerospace/Defense Firm
1%
Legal Firm
1%
Marketing Services Firm
1%

Compare Bugcrowd with alternative products

Go!

Learn more about Bugcrowd

Bugcrowd customers

Zephyr Health, Barracuda Networks, Western Union, Instructure, Aruba Networks, Pinterest, CARD.com, WINK, (ISC)2, StatusPage, WHMCS, Movember

Related questions

  • 250
Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
  • 27
What types of Security Operations Center (SOC) deployment models do exist?
  • 15
Why is Managed Security Services important for companies?
  • 3
When evaluating Managed Security Services, what aspect do you think is the most important to look for?
  • 17
How Managed Security Services (MSS) secure your organization?

Product Categories

Product Categories
Managed Security Services Providers (MSSP)
Bug Bounty Platforms
Penetration Testing Services
Attack Surface Management (ASM)

Popular Comparisons

Popular Comparisons
HackerOne vs Bugcrowd Logo
HackerOne vs Bugcrowd
Intigriti vs Bugcrowd Logo
Intigriti vs Bugcrowd
Synack vs Bugcrowd Logo
Synack vs Bugcrowd
YesWeHack vs Bugcrowd Logo
YesWeHack vs Bugcrowd
Cobalt vs Bugcrowd Logo
Cobalt vs Bugcrowd
CIPHER vs Bugcrowd Logo
CIPHER vs Bugcrowd
Crowdcurity vs Bugcrowd Logo
Crowdcurity vs Bugcrowd
See all alternatives
 
Bugcrowd Reviews Summary
Author infoRatingReview Summary
dApp Auditor at Hacken4.0I use Bugcrowd to report security vulnerabilities, benefiting from its extensive list of websites and guaranteed payments. While it has slowed in triaging, it enhances my skills. I've also tried HackerOne and Integrity, but Bugcrowd remains unmatched.
DevOps Team Lead at Tata Consultancy4.0I am a developer in cybersecurity who uses Bugcrowd to report platform vulnerabilities efficiently through their easy-to-use cloud platform. However, I find there is room for improvement in their response time when customer input is necessary.
Security Researcher at HackerOne4.0As a security researcher using Bugcrowd, I find vulnerabilities, report them, and receive bounties for valid findings. Bugcrowd offers valuable features like program collections, but needs improvement in report access and customer support response time. I also work with HackerOne.
Bug bounty hunter at HackerOne5.0I have been using Bugcrowd for two years to find bugs and vulnerabilities. I like the high bounties, hall of fame, and stickers. Although it's helpful and user-friendly, I feel there is room for improvement in the tool itself.