Bugcrowd
Crowdsourced bug bounty pioneer founded in 2012 by Casey Ellis, offering managed programs and crowd-powered penetration testing from hundreds of thousands of ethical hackers.
- Based in
- San Francisco, United States
- Founded
- 2012
- Size
- 201-500 staff
- Ownership
- Private
- Certifications
- ISO 27001, FedRAMP, SOC 2, PCI-DSS
About Bugcrowd
Bugcrowd provides a crowdsourced cybersecurity platform that connects organisations with a global network of hackers and pentesters. The company sells access to this community for finding and fixing vulnerabilities, aiming to stop breaches before attackers can exploit them. It serves security buyers who want to uncover hidden weaknesses in their attack surface. The platform offers various programs such as bug bounty, vulnerability disclosure, penetration testing as a service, and red team as a service. These programs are designed to reduce risk, meet compliance goals, and improve security resilience. Bugcrowd uses its CrowdMatch engine and engineered triage to match researchers to targets and manage submissions. Bugcrowd also provides continuous attack surface visibility through Savant Vista, which discovers and assesses external assets, then validates exploitability with offensive testing. The company emphasises proactive security and pay-for-results models, where customers only pay for valid findings. It serves multiple industries including automotive, healthcare, government, retail, and financial services.
Products
- Bug BountyA program that continuously hunts for hidden vulnerabilities and only charges for results.
- Vulnerability DisclosureA managed solution for receiving, prioritising, and remediating vulnerability reports from hackers.
- Pen Testing as a ServiceAgile and transparent penetration testing informed by external attack surface management.
- Red Team as a ServiceSimulates real-world attacks using a global network of vetted operators with flexible engagement models.
- Savant VistaProvides ongoing visibility into the external attack surface and validates exploitability with offensive testing.
- CrowdMatchAn engine that matches security researchers to appropriate programs based on skills and environment.
Ownership and deals
- Bugcrowd acquired Mayhem SecurityReport on Bugcrowd buying Mayhem Security (opens in a new tab)
- Raised $50mInvestor Silicon Valley BankReport on the Bugcrowd funding round of October 2024 (opens in a new tab)
- Bugcrowd acquired InformerReport on Bugcrowd buying Informer (opens in a new tab)
- Raised $102m in a Series E roundInvestor General CatalystReport on the Bugcrowd funding round of February 2024 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.