Try our new research platform with insights from 80,000+ expert users

Bugcrowd vs Pentera comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Bugcrowd
Ranking in Penetration Testing Services
3rd
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
4
Ranking in other categories
Managed Security Services Providers (MSSP) (13th), Bug Bounty Platforms (2nd), Attack Surface Management (ASM) (18th), AWS Marketplace (44th)
Pentera
Ranking in Penetration Testing Services
2nd
Average Rating
7.8
Reviews Sentiment
7.2
Number of Reviews
9
Ranking in other categories
Breach and Attack Simulation (BAS) (1st)
 

Mindshare comparison

As of June 2025, in the Penetration Testing Services category, the mindshare of Bugcrowd is 16.9%, up from 15.5% compared to the previous year. The mindshare of Pentera is 14.0%, down from 14.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Penetration Testing Services
 

Featured Reviews

George Devasia - PeerSpot reviewer
Efficient reports simplify tracking and feedback for cybersecurity submissions
I am a developer working in cybersecurity, and I use Bugcrowd to help companies remove vulnerabilities from their websites. I report vulnerabilities found in applications or customer platforms through Bugcrowd's cloud platform. This allows the cloud team to track submissions, and then the client…
Jon Medvenics - PeerSpot reviewer
Useful in vulnerability management and can automate pen tests
One of the big issues we have is that the tool has an additional license for compromised credentials. Suppose compromised credentials for any of your domains appear in leaks, dumps, or are being sold. In that case, they try to aggregate that data and highlight that, for example, ten users appeared in recent dumps as compromised credentials. However, they don't provide much information about where those compromises came from or their source information, probably to protect their sources. Also, if you have credentials and want to check if they're still valid or can still be used, and you confirm they can't be used (maybe they're from a leak or a twenty-year-old database), there's no way for you to flag that these credentials aren't a problem anymore. The solution has a sort of flat report. It's annoying to go through lots of legwork only to see the same names or credentials still there, and you can't do anything about it in their portal. We've given them feedback, but I think it's probably on their long list of feature requests to address. For me, that would be a greater user configuration of the tests performed on a granular level. As I mentioned with Cymulate, they show you every line of code they will run and what tool is being used, step by step. Pentera is more closed in that regard. If Pentera released a feature that allows you to alter the attack path or change the command, that would be incredibly useful. Pentera might use one or a few different methods to do something, but if none of those work, it will just say everything is fine and secure. If Pentera could adapt or change based on what it finds in the environment, that would be very valuable. As a customer, we understand our environments better than an automated tool, so providing context to help the tool get better results would be valuable.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Bugcrowd's support team is very active and supportive."
"One of the features I like most about Bugcrowd is the ability to create a report in a very easy way."
"Working on Bugcrowd has made me a better security engineer since it provides a competitive environment to report successful vulnerabilities."
"Bugcrowd has programs that disclose rewards and invite researchers to new programs."
"I would rate Bugcrowd a ten out of ten."
"I believe Bugcrowd is highly stable."
"The most valuable aspect of Bugcrowd is that it provides a long list of different websites or web applications where I can report vulnerabilities."
"Pentera has many authentic features."
"The solution is SaaS-based. From a cloud perspective, it has Pentera Surface and Pentera Core. The Core is the on-prem deployed solution, while the Surface is the cloud-hosted solution that scans your public infrastructure. From the Surface perspective, the most valuable feature so far has been the attack surface mapping."
"The tool showed us that our ransomware protection wasn’t working on some machines."
"The vulnerability scanner, exploit achievements, and remediation actions are all great."
"What I like the most about Pentera is its solution-oriented approach."
"The most valuable feature of Pentera is that you can do continuous vulnerability assessment, which is automated."
"The platform's most valuable features are credential management and vulnerability management."
"The product is easy to use."
 

Cons

"Bugcrowd should provide more access to the reports, similar to HackerOne, allowing for full disclosure once a bug is resolved, so researchers can learn from them."
"The triaging process has slowed down compared to three years ago. It now takes more time to resolve a reported vulnerability and receive the payout."
"The triaging process has slowed down compared to three years ago."
"Bugcrowd should provide more access to the reports, similar to HackerOne, allowing for full disclosure once a bug is resolved, so researchers can learn from them. They should improve the responsibility type and response time of their customer support, especially when the issue is urgent."
"There is room for improvement in Bugcrowd's response time when customer input is needed for resolving tickets. If this time could be minimized, it would be very helpful."
"There is room for improvement in Bugcrowd's response time when customer input is needed for resolving tickets."
"The licensing and IP management need improvement."
"Pentera's general dashboards could be improved and made more specific in terms of vulnerabilities that I'm discovering."
"The licensing and IP management need improvement. When the IP is imported into a system, we cannot withdraw or revoke the license."
"One area for product improvement could be the inclusion of a dashboard to cover multiple branches and subsidiaries, allowing for centralized monitoring."
"The price could be improved."
"Maybe scalability. I know that the Pentera right now is high level in order to scan big deals over 500 IPs and not less, and not less. That can be more granular. This will be useful."
"The vulnerability scanner, exploit achievements, and remediation actions are all great."
"One of the big issues we have is that the tool has an additional license for compromised credentials. Suppose compromised credentials for any of your domains appear in leaks, dumps, or are being sold. In that case, they try to aggregate that data and highlight that, for example, ten users appeared in recent dumps as compromised credentials. However, they don't provide much information about where those compromises came from or their source information, probably to protect their sources."
 

Pricing and Cost Advice

Information not available
"It's not that expensive, but it could be more cost-effective."
"We have to pay a yearly licensing cost for Pentera."
"The tool is relatively cheap."
"The product's cost is reasonable. I rate the pricing a three out of ten."
report
Use our free recommendation engine to learn which Penetration Testing Services solutions are best for your needs.
859,129 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
11%
Computer Software Company
10%
University
10%
Manufacturing Company
9%
Financial Services Firm
14%
Computer Software Company
13%
Manufacturing Company
10%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Bugcrowd?
I understand the pricing, and it involves rewards of at least one thousand dollars.
What needs improvement with Bugcrowd?
The tool itself could be improved. I hope to improve next time and perform better.
What is your primary use case for Bugcrowd?
I use Bugcrowd ( /products/bugcrowd-reviews ) for finding bugs and vulnerabilities. I have been using it for two years. Besides Bugcrowd ( /products/bugcrowd-reviews ), I also use HackerOne ( /prod...
What do you like most about Pentera?
What I like the most about Pentera is its solution-oriented approach.
What needs improvement with Pentera?
The licensing and IP management need improvement. When the IP is imported into a system, we cannot withdraw or revoke the license.
What is your primary use case for Pentera?
I am using the OpenIntra solution for pentesting and managing candidates in my environment. I also use this solution for house customers.
 

Comparisons

 

Overview

 

Sample Customers

Zephyr Health, Barracuda Networks, Western Union, Instructure, Aruba Networks, Pinterest, CARD.com, WINK, (ISC)2, StatusPage, WHMCS, Movember
Blackstone Group Caterpillar Apria Healthcare Taylor Vinters Sandler Capital Management Drawbridge BNP Paribas British Red Cross
Find out what your peers are saying about Bugcrowd vs. Pentera and other solutions. Updated: June 2025.
859,129 professionals have used our research since 2012.