January 2021 Summaries

Bug bounties are a pay-for-results approach to proactive security testing that utilizes thousands of highly skilled and vetted security researchers to discover high-impact vulnerabilities. This allows organizations to maximize their vulnerability discovery capabilities, often finding issues that other tools miss. The global nature of the Crowd enables 24/7 talent availability, with launch timelines that outpace traditional utilization-based models. Platform-powered solutions also provide 24/7 vulnerability visibility and reporting, researcher management, and integration with development teams' ticketing and vulnerability management solutions, helping organizations save time and resources.

The Bugcrowd platform has made significant enhancements in integrating with security workflows, providing on-demand security expertise, and personalizing the user experience. The new API supports versioning and improved documentation, allowing for seamless integration with existing workflows. Jira integration enhancements enable mapping of internal projects, customer notifications through integrations like Slack, and customizable session timeouts for customer accounts. Security expertise on-demand has been boosted with a payments engine that offers daily researcher payments, easy tax and compliance checks, and support for new countries. The proprietary matching engine, Crowdmatch, provides better matching and recommendations using platform-driven duplicate detection and holistic profiles of researchers and customer assets. Personalized user experience enhancements include self-service capabilities such as an onboarding welcome center, scoping for classic pen tests, target groups, and customer-initiated reward pool top-ups. Additionally, submissions workflows have been improved with private comments and the ability to edit them, while the customer task list streamlines work on the platform.