Why Isn’t My Program Getting Submissions?

A crowdsourced cybersecurity program's output typically decreases over time due to the "program aging" effect, where the initial chaotic period of finding numerous vulnerabilities calms down as low-hanging fruit is picked and many researchers move on. To address this, it's essential to understand that researchers optimize for return on investment (ROI) and will participate in programs with higher relative value and lower time investment. Increasing the sample size of testers can help validate against the average crowd Pp threshold, but going public is the most effective way to engage the entire security community. High-value testers have higher Pp thresholds, and focusing exclusively on critical findings can diminish ROI and reduce overall engagement. Reviewing the sample size, relative value, and potential rV are crucial first steps in addressing diminishing output, with adjustments needed every 30 days or 60 days after three consecutive raises, depending on priority levels.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.