I’ve been on Bugcrowd since 2016, and it’s the only platform I actively hunt on. I’ve tried other platforms over the years, but Bugcrowd still feels the best in terms of usability, transparency, and fairness. The dashboard is simple to navigate, programs are clearly explained, and the triage team has always been professional and helpful. I also like how transparent they are with communication and how easy it is to keep track of submissions and payouts. It just feels like they’ve built it with both researchers and customers in mind. Review collected by and hosted on G2.com.

Overall, my experience has been very positive, but sometimes the triage process can take longer than I’d like, especially during busy program periods. Also, there are moments when I wish there was a more direct way to talk to program owners for quick clarifications. Reward processing has been smooth most of the time, but on rare occasions it can be delayed. None of these are dealbreakers, though — just areas where I think Bugcrowd could make an already great platform even better. Review collected by and hosted on G2.com.

It helps me connects with real-world security challenges being a QA tester. The platform’s triage workflow is structured, transparent, and efficient, which helps testers focus on finding impactful vulnerabilities instead of chasing admin overhead. Review collected by and hosted on G2.com.

The resources to become a security researcher is not structured. It becomes very difficult for beginner to learn & grow. Review collected by and hosted on G2.com.

The triage quality is solid, response times are fair, and the platform doesn’t get in my way when I’m focused on practical impact. I also like that programs are often more receptive to critical exploit chains, not just single-issue bugs. Review collected by and hosted on G2.com.

Lack of asset clarity in some programs wastes time. I also wish analytics and submission filtering had more depth to support hunters who operate at scale. Review collected by and hosted on G2.com.

The best thing is that you’ll receive email updates whenever there are any changes or updates in the program. Review collected by and hosted on G2.com.

Triagers at Bugcrowd may downgrade your P4 to a P5, and that’s really annoying. Review collected by and hosted on G2.com.

Bugcrowd provides efficient triage, prompt and helpful support, and access to skilled researchers. The platform also delivers detailed vulnerability insights, which contribute to improved security overall. Review collected by and hosted on G2.com.

At times, report validation can be slow, and delays in platform updates or communication may further impact the overall response time. Review collected by and hosted on G2.com.

TPM, colleagues, support

Imagine what you want in view of support and you get it here Review collected by and hosted on G2.com.

Nothing is there which can be called as dislike Review collected by and hosted on G2.com.

What I appreciate most about Bugcrowd is its collaborative approach to cybersecurity. The platform brings together a diverse community of ethical hackers and security professionals, empowering them to contribute to real-world security challenges. This collective intelligence not only enhances the security posture of organizations but also creates a dynamic environment where continuous learning and skill development are encouraged. Additionally, Bugcrowd's focus on transparency, fairness in rewards, and providing a platform for both experienced and novice hackers to contribute makes it a unique and impactful leader in the field of crowdsourced security. Review collected by and hosted on G2.com.

One area of improvement for Bugcrowd could be enhancing the communication and feedback loop between researchers and program owners. At times, the response times or clarity of feedback can be inconsistent, which may lead to frustration for researchers who are seeking more timely or detailed guidance on their submissions. Review collected by and hosted on G2.com.

Their account team helped us grow our discoosure program over time into something that we aim to evolve even further into an eventual Bug Bounty program. They help identify and engage the right researchers to get disclosures, without creating duplicate submissions via their triage team.

The account team are flexible and generous in their pricing in order to foster a good partnership, and to remain our vendor of choice for the long term. Review collected by and hosted on G2.com.

Their integrations are somewhat difficult to set up for things like Jira, and could do with an overhaul to the more modern toolchain service in Jira.

Initial engagement on our program was very slow, and required a lot of convincing of product owners to move to a public program without much evidence of eengagement beforehand. Review collected by and hosted on G2.com.

We are running a bug bounty program with Bugcrowd. It turns out that the technical team triaging incoming submissions is very skilled and helps a lot in efficiently identify and track vulnerabilities in our products so that we can patch them. It is really a pleasure to work with the Bugcrowd team, we have really established a direct, uncomplicated and simple way of working together. It is just fun! Review collected by and hosted on G2.com.

Really nothing comes to our mind that we dislike about the service that we have been receiving from Bugcrowd. Review collected by and hosted on G2.com.

It's it security architecture that I have studied especially the big bounty program Review collected by and hosted on G2.com.

They can have more such incentives and add more bounties that can help people and companies grow Review collected by and hosted on G2.com.