Bugcrowd Reviews

Name: Bugcrowd
Brand: Bugcrowd
Rating: 4.3 (4 reviews)

4.3 out of 5

4 reviews
100% willing to recommend

What is Bugcrowd?

By combining a vast and diverse workforce with a results-driven model, crowdsourced security programs outperform traditional methods-every time.

Get the Managed Security Services Providers (MSSP) Buyer's Guide and find out what your peers are saying about Bugcrowd, HackerOne, Intigriti and more!

Bugcrowd is the #2 ranked solution in top Bug Bounty Platforms, #3 ranked solution in top Penetration Testing Services, #16 ranked solution in top Managed Security Services Providers (MSSP) solutions, and #17 ranked solution in top Attack Surface Management (ASM) solutions. PeerSpot users give Bugcrowd an average rating of 8.6 out of 10. Bugcrowd is most commonly compared to HackerOne: Bugcrowd vs HackerOne. Bugcrowd is popular among the large enterprise segment, accounting for 56% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 12% of all views.

Buyer's Guide

Managed Security Services Providers (MSSP)

January 2025

Get the category report

Helped 864,155 peers since 2012

Featured Bugcrowd reviews

George Devasia

DevOps Team Lead at Tata Consultancy

I am a developer working in cybersecurity, and I use Bugcrowd to help companies remove vulnerabilities from their websites. I report vulnerabilities found in applications or customer platforms through Bugcrowd's cloud platform. This allows the cloud team to track submissions, and then the client…

Read full review

Faizan Nehal

dApp Auditor at Hacken

The most valuable aspect of Bugcrowd is that it provides a long list of different websites or web applications where I can report vulnerabilities. Bugcrowd ensures that if vulnerabilities are reported through their platform, payment is guaranteed. Additionally, the platform aids in transferring money directly into my bank account, making the entire process smooth. Working on Bugcrowd has made me a better security engineer since it provides a competitive environment to report successful vulnerabilities.

Read full review

Hisham Osman

Security Researcher at HackerOne

Bugcrowd has programs that disclose rewards and invite researchers to new programs. There is a pen test feature for top hackers on the platform, and they have a new feature called Collections, which provides multiple programs in one collection. This collection feature is beneficial for targeting specific companies like Cisco, allowing easy identification of targets.

Read full review

Bugcrowd mindshare

Product category:

As of August 2025, the mindshare of Bugcrowd in the Managed Security Services Providers (MSSP) category stands at 1.4%, up from 0.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Managed Security Services Providers (MSSP)

Key learnings from peers

Valuable Features

Bugcrowd offers significant features such as reward programs with disclosed incentives, a pen test for top hackers, and the Collections feature for targeting specific companies. Users appreciate the extensive list of websites and web applications for reporting vulnerabilities, guaranteed payments, and a competitive environment. The report creation process using markdown and image drag-and-drop is efficient. Users value the high bounties, hall of fame, stickers, and platform usability.

"I would rate Bugcrowd a ten out of ten."
"Bugcrowd's support team is very active and supportive."
"One of the features I like most about Bugcrowd is the ability to create a report in a very easy way."

Room for Improvement

Bugcrowd requires enhancement in report access for full disclosure after bug resolution to aid learning, similar to HackerOne. Improvements are needed in customer support, particularly in addressing urgency and reducing response time. The triaging process has become slower, increasing time to vulnerability resolution and payouts. New users face challenges accessing private programs. Reducing time required for customer input during ticket resolution would be beneficial. The platform itself demands enhancements for better performance.

"There is room for improvement in Bugcrowd's response time when customer input is needed for resolving tickets. If this time could be minimized, it would be very helpful."
"There is room for improvement in Bugcrowd's response time when customer input is needed for resolving tickets."
"Bugcrowd should provide more access to the reports, similar to HackerOne, allowing for full disclosure once a bug is resolved, so researchers can learn from them. They should improve the responsibility type and response time of their customer support, especially when the issue is urgent."

Pricing

Pricing for Bugcrowd pleases security researchers as it appears inexpensive and often free of fees or commissions. Bounty tables are well-regarded, while public engagements are accessible without cost. Private arrangements require invitations. Organizations reported setups involving rewards starting at one thousand dollars, but specific customer pricing remains less understood among respondents.

Popular Use Cases

Bugcrowd serves as a platform for security researchers and developers in cybersecurity to identify and report security vulnerabilities on websites. It acts as an intermediary between ethical hackers and companies, facilitating the communication of vulnerabilities to sites like Facebook or Twitter. Users log in, select programs for security auditing, report vulnerabilities, and receive bounties if validated. Bugcrowd also supports companies in tracking vulnerability submissions and obtaining feedback.

Service and Support

Bugcrowd customer service receives mixed feedback. Many indicate their support team is active and supportive but highlight delays in response time, ranging from one to seven days, particularly for report mediation. A portion rates their service as seven out of ten, suggesting a need for quicker ticket responses. Some report smooth interactions without any issues, describing the support as quite good, yet the desire for timelier communication persists among users.

Deployment

Users found Bugcrowd's initial setup very easy, rating it highly. They appreciated the straightforward process of creating an account with an email and password, adding a bank account, and waiting for verification. Although simple, the requirement to complete a tax form for bounty payments affected ratings slightly. They described it as intuitive and above expectations, with minimal steps needed to start using Bugcrowd without any significant hurdles or complications in the onboarding process.

Stability

Bugcrowd is perceived as highly stable with most users rating its stability highly. Users rarely encounter outages or significant issues. Although some report minor issues like broken links, these are quickly addressed through support tickets. Many emphasize its reliability, stating they have not faced any problems impacting their usage.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Managed Security Services Providers (MSSP) Buyer's Guide for additional reliable information.