Reducing Noise in Crowdsourced Security

Crowdsourced security models can provide numerous benefits but also increase the risk of false positives and wasted resources. To mitigate this, it's essential to establish a strong signal-to-noise ratio through effective triage services, which filter out invalid submissions and highlight valid ones. Bugcrowd, a popular crowdsourced security platform, uses various strategies to improve its signal-to-noise ratio, including matching researchers with suitable projects, providing training for their in-house triage team, and utilizing technology to scale workflows during periods of high submission volumes. By focusing on quality over quantity, Bugcrowd has achieved significant improvements in its researcher matching, time to value, and number of critical findings, setting a new standard for crowdsourced security programs.