Evolving our submission accuracy and throttling controls to protect triage speed

Bugcrowd is tightening submission-quality controls in response to a 388% median increase in triage volume, which it attributes partly to inaccurate, unverified AI-generated reports from new researchers. For Managed Bug Bounty programs, submission accuracy will now treat N/A outcomes as rejections, exclude informational reports, and include all submissions regardless of payout eligibility. Accounts with 10 submissions within 90 days may be throttled if their relevant accuracy rate is 50% or below, using the 90-day rate when at least five reports have been judged or the lifetime rate otherwise; inactive returning accounts will also be assessed by lifetime acceptance rate. Throttled accounts will remain restricted for at least seven days and be limited to six submissions weekly, while new accounts will begin under default throttling until they establish sufficient quality. Bugcrowd expects the changes to reduce queue delays, improve report quality, and allow triagers to focus on validated vulnerabilities, while advising affected researchers to submit clear, reproducible reports with verified proof of concept and impact.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.