Company
Date Published
Author
Ryan Black
Word count
819
Language
English
Hacker News points
None

Summary

Bugcrowd has been managing bug bounty programs for 6 years and has a team of diverse industry professionals with various backgrounds who validate and triage bugs on customer's programs, ensuring qualified and experienced team members are involved in the process. The company operates on a first-to-find basis and provides transparency through its Crowdcontrol dashboard, allowing customers to see all interactions and vulnerabilities. The Security Operations team consists of high-trust security professionals, both background-checked and under NDA, with most being US-based. Bugcrowd prioritizes triage accuracy, with an acceptance rate post-triage to submission resolution of ~92%, and provides a clear process for handling concerns or escalations, including open channels of communication and arbitration.