Bugcrowd
{{infobox company
| name = Bugcrowd
| logo = Bugcrowd.svg
| type = Private
| industry = Cybersecurity
| founded = 2012
| founders = Casey Ellis, Chris Raethke, Sergei Belokamen
| hq_location = San Francisco, California and Australia
| key_people = {{Unbulleted list| David Gerry (CEO)|Casey Ellis (Founder, Chief Strategy Officer)|Nick McKenzie (CI&SO)|Robert Taccini (CFO)}}
| website = {{URL|https://bugcrowd.com}}
}}
Bugcrowd is a crowdsourced security platform.{{cite web|url=https://www.securityweek.com/hackers-receive-500000-one-week-bugcrowd|title=Hackers Receive $500,000 in One Week via Bugcrowd|website=SecurityWeek.Com|date=11 November 2019 |accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102118/https://www.securityweek.com/hackers-receive-500000-one-week-bugcrowd|url-status=live}}{{Cite news|url=https://www.nytimes.com/2015/06/08/technology/hackerone-connects-hackers-with-companies-and-hopes-for-a-win-win.html?_r=0|title=HackerOne connects hackers with companies and hopes for a win-win.|date=June 7, 2015|work=The New York Times|access-date=October 28, 2015|archive-date=June 11, 2015|archive-url=https://web.archive.org/web/20150611094620/http://www.nytimes.com/2015/06/08/technology/hackerone-connects-hackers-with-companies-and-hopes-for-a-win-win.html?_r=0|url-status=live}}{{cite web|url=https://arstechnica.com/information-technology/2020/03/bugcrowd-tries-to-muzzle-hacker-who-found-netflix-account-compromise-weakness/|title=Here's the Netflix account compromise Bugcrowd doesn't want you to know about|website=Ars Technica|accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102108/https://arstechnica.com/information-technology/2020/03/bugcrowd-tries-to-muzzle-hacker-who-found-netflix-account-compromise-weakness/|url-status=live}} It was founded in 2012, and in 2019 it was one of the largest bug bounty and vulnerability disclosure companies on the internet.{{cite web|url=https://techcrunch.com/2019/05/31/bugcrowd-crowdsourcing-cybersecurity/|website=techcrunch.com|title=TechCrunch is now a part of Verizon Media|date=31 May 2019 |accessdate=March 22, 2020|archive-date=March 28, 2020|archive-url=https://web.archive.org/web/20200328043725/https://techcrunch.com/2019/05/31/bugcrowd-crowdsourcing-cybersecurity/|url-status=live}} Bugcrowd runs bug bounty programs and also offers a range of penetration testing services it refers to as "Penetration Testing as a Service" (PTaaS), as well as attack surface management.{{cite web|url=https://thehackernews.com/2021/02/top-5-bug-bounty-programs-to-watch-in.html|title=Top 5 Bug Bounty Platforms to Watch in 2021|date=8 February 2021|website=thehackernews.com|archive-url=https://web.archive.org/web/20210707100914/https://thehackernews.com/2021/02/top-5-bug-bounty-programs-to-watch-in.html|archive-date=7 July 2021|language=en}}{{cite web |title=Penetration Testing as a Service |url=https://www.bugcrowd.com/products/pen-test-as-a-service/ |website=Bugcrowd |access-date=17 October 2023}}{{cite web |title=Attack Surface Management |url=https://www.bugcrowd.com/products/attack-surface-management/ |website=Bugcrowd |access-date=17 October 2023}}
History
Bugcrowd was founded in Sydney, Australia in 2012. {{As of|2018}}, its main headquarters is in San Francisco, with other offices in Sydney and London.{{cite web|url=https://www.afr.com/technology/aussie-cyber-security-bounty-hunter-bugcrowd-has-big-plans-after-33m-round-20180302-h0wxtr|title=Aussie cyber security bounty hunter Bugcrowd has big plans after $33m round|date=5 March 2018|author=Michael Bailey|website=afr.com|publisher=Australian Financial Review|access-date=2021-07-07|archive-url=https://web.archive.org/web/20210707100103/https://www.afr.com/technology/aussie-cyber-security-bounty-hunter-bugcrowd-has-big-plans-after-33m-round-20180302-h0wxtr|archive-date=7 July 2021|language=en}}
In May 2024, Bugcrowd acquired attack surface management company, Informer.{{Cite web |last=Lunden |first=Ingrid |date=May 23, 2024 |title=Bugcrowd, the crowdsourced white-hat hacker platform, acquires Informer to ramp up its security chops |url=https://techcrunch.com/2024/05/23/bugcrowd-the-crowdsourced-white-hat-hacker-platform-acquires-informer-to-ramp-up-its-security-chops/ |website=Techcrunch}}
Funding
Bugcrowd has raised a total of $78.7 million in funding over 6 rounds. Their seed funding started in 2013 to increase their 3000 vetted security testers. This seed funding was primarily led by Rally Ventures and they were able to raise $1.6 million.{{cite web|url=https://techcrunch.com/2013/09/04/bugcrowd-raises-1-6-million-to-expand-bug-bounty-marketplace/|title=Bugcrowd Raises $1.6 Million To Expand Bug Bounty Marketplace|date=4 September 2013|website=techcrunch.com|publisher=TechCrunch|access-date=2021-07-07|language=en|author=Mahesh Sharma|archive-url=https://web.archive.org/web/20210707113327/https://techcrunch.com/2013/09/04/bugcrowd-raises-1-6-million-to-expand-bug-bounty-marketplace/|archive-date=7 July 2021}}
Series A funding round took place in 2015 and was led by Costanoa Ventures, raising $6 million.{{cite web|url=https://www.prnewswire.com/news-releases/bugcrowd-raises-6-million-in-series-a-funding-to-further-accelerate-enterprise-adoption-of-crowdsourced-security-300049528.html|title=Bugcrowd Raises $6 Million In Series A Funding To Further Accelerate Enterprise Adoption Of Crowdsourced Security|date=12 March 2015|website=prnewswire.com|publisher=PR Newswire|language=en|access-date=2021-07-07|archive-url=https://web.archive.org/web/20210707112427/https://www.prnewswire.com/news-releases/bugcrowd-raises-6-million-in-series-a-funding-to-further-accelerate-enterprise-adoption-of-crowdsourced-security-300049528.html|archive-date=7 July 2021}}
Blackbird Ventures led funding for their Series B round with $15 million raised in April 2016.{{cite web|url=https://www.networkworld.com/article/3057271/bugcrowd-raises-cash-because-of-the-power-of-the-people.html|title=Bugcrowd raises cash because of the power of the people|date=20 April 2016|language=en|author=Ben Kepes|website=networkworld.com|publisher=Network World|access-date=2021-07-07|archive-url=https://web.archive.org/web/20210707102519/https://www.networkworld.com/article/3057271/bugcrowd-raises-cash-because-of-the-power-of-the-people.html|archive-date=7 July 2021}}{{cite web|url=https://www.sfgate.com/business/article/Amid-bug-bounty-appeal-BugCrowd-raises-Series-B-7266430.php|title=Amid bug bounty appeal, Bugcrowd raises Series B|date=20 April 2016|website=sfgate.com|publisher=San Francisco Chronicle|language=en|access-date=2021-07-07|author=Sean Sposito|archive-url=https://web.archive.org/web/20210707103350/https://www.sfgate.com/business/article/Amid-bug-bounty-appeal-BugCrowd-raises-Series-B-7266430.php|archive-date=7 July 2021}}
In March 2018, it secured $26 million in a Series C funding round led by Triangle Peak Partners.{{cite web|url=https://www.securityweek.com/bugcrowd-raises-26-million-expand-vulnerability-hunting-business|title=Bugcrowd Raises $26 Million to Expand Vulnerability Hunting Business|website=SecurityWeek.Com|date=March 2018 |accessdate=March 22, 2020|archive-date=March 22, 2020|archive-url=https://web.archive.org/web/20200322102117/https://www.securityweek.com/bugcrowd-raises-26-million-expand-vulnerability-hunting-business|url-status=live}}
Bugcrowd announced Series D funding in April 2020 of $30 million led by previous investor Rally Ventures.{{Cite web|title=Bugcrowd raises $30M in Series D to expand its bug bounty platform|url=https://techcrunch.com/2020/04/09/bugcrowd-series-d/|access-date=2021-01-09|website=TechCrunch|date=9 April 2020 |language=en-US}}{{cite web|url=https://techcrunch.com/2020/04/09/bugcrowd-series-d/?guccounter=1|title=Bugcrowd raises $30M in Series D to expand its bug bounty platform|author=Zack Whittaker|date=9 April 2020|website=techcrunch.com|publisher=TechCrunch|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707101930/https://techcrunch.com/2020/04/09/bugcrowd-series-d/?guccounter=1|archive-date=7 July 2021}}
Clients
{{As of|2020}}, Bugcrowd worked with 65 industries across 29 countries. Their clients have included Tesla, Atlassian, Fitbit, Square, Mastercard, Amazon and eBay.{{cite web|url=https://www.cyberscoop.com/bugcrowd-series-c-funding/|title=Bugcrowd raises $26 million in latest funding round|date=1 March 2018|author=Zaid Shoorbajee|website=cyberscoop.com|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707114423/https://www.cyberscoop.com/bugcrowd-series-c-funding/|archive-date=7 July 2021}}
Bugcrowd's first partner in the financial industry was Western Union, in 2015. Originally a private, invite-only program, it was later opened to the public, with rewards varying between $100 and $5000 depending on the bug.{{cite web|url=https://www.prnewswire.com/news-releases/bugcrowd-enters-financial-sector-announces-managed-bug-bounty-program-for-western-union-300048497.html|title=Bugcrowd Enters Financial Sector, Announces Managed Bug Bounty Program for Western Union|date=11 March 2015|website=prnewswire.com|publisher=PR Newswire|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707120710/https://www.prnewswire.com/news-releases/bugcrowd-enters-financial-sector-announces-managed-bug-bounty-program-for-western-union-300048497.html|archive-date=7 July 2021}} In 2020, Bugcrowd helped National Australia Bank become one of the first banks in Australia to launch a bug bounty.{{cite web|url=https://news.nab.com.au/news_room_posts/nab-launches-cyber-bug-bounty-program/|title=NAB LAUNCHES CYBER BUG BOUNTY PROGRAM|date=25 September 2020|website=news.nab.com.au|publisher=National Australia Bank|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707121401/https://news.nab.com.au/news_room_posts/nab-launches-cyber-bug-bounty-program/|archive-date=7 July 2021}}
Samsung has also worked with Bugcrowd, rewarding a total of over $2 million in rewards to those who found bugs in Samsung's security.{{cite web|url=https://www.darkreading.com/mobile/bugcrowds-crowdsourced-cybersecurity-platform-helps-pay-over-$2m-to-researchers-for-samsung-mobile-rewards-program/d/d-id/1339480|title=Bugcrowd's Crowdsourced Cybersecurity Platform Helps Pay Over $2M to Researchers for Samsung Mobile Rewards Program|date=17 November 2020|website=darkreading.com|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20201202002827/https://www.darkreading.com/mobile/bugcrowds-crowdsourced-cybersecurity-platform-helps-pay-over-$2m-to-researchers-for-samsung-mobile-rewards-program/d/d-id/1339480|archive-date=2 December 2020}}
Job platform Seek has been using Bugcrowd since 2019 with the highest reward from their bug bounty program being $10,000.{{cite web|url=https://medium.com/seek-blog/get-involved-with-seeks-10k-bug-bounty-program-20933b310dca|title=Get involved with SEEK's $10K Bug Bounty Program|date=29 January 2019|website=medium.com|access-date=2021-07-07|language=en|author=Julian Berton|archive-url=https://web.archive.org/web/20210707124227/https://medium.com/seek-blog/get-involved-with-seeks-10k-bug-bounty-program-20933b310dca|archive-date=7 July 2021}}{{cite web|url=https://www.seek.com.au/reporting-security-vulnerabilities/|title=Reporting Security Vulnerabilities|website=seek.com.au|access-date=2021-07-07|language=en}}
In 2020, ExpressVPN worked with Bugcrowd, awarding $100 to $2500 depending on the severity of the vulnerabilities that were found, with 21 critical findings identified.{{cite web|url=https://www.techradar.com/news/calling-all-ethical-vpn-hackers-expressvpn-launches-new-look-bug-bounty-program|title=Calling all ethical VPN hackers: ExpressVPN launches new-look bug bounty program|date=16 July 2020|website=techradar.com|publisher=TechRadar|access-date=2021-07-07|language=en|author=Joel Khalili|archive-url=https://web.archive.org/web/20210707122759/https://www.techradar.com/news/calling-all-ethical-vpn-hackers-expressvpn-launches-new-look-bug-bounty-program|archive-date=7 July 2021}}
Bugcrowd also runs programs for the U.S. DOD, the Air Force, NASA and DDS.{{cite web|url=https://www.nextgov.com/cybersecurity/2018/10/dod-invests-34-million-hack-pentagon-expansion/152267/|title=DOD Invests $34 Million in Hack the Pentagon Expansion|date=24 October 2018|author=Aaron Boyd|website=nextgov.com|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20201126130209/https://www.nextgov.com/cybersecurity/2018/10/dod-invests-34-million-hack-pentagon-expansion/152267/|archive-date=26 November 2020}}{{cite web|url=https://businesschief.com/interviews/lauren-knausenberger-leading-innovation-in-the-us-air-force|title=Leading innovation in the US Air Forces|website=businesschief.com|author=Lauren Knausenberger|date=21 May 2020 |archive-url=https://web.archive.org/web/20210707125618/https://businesschief.com/interviews/lauren-knausenberger-leading-innovation-in-the-us-air-force|archive-date=7 July 2021}}
Other projects
In 2018, Bugcrowd and CipherLaw's Open Source Vulnerability Disclosure Framework, together with the #LegalBugBounty project, created the open-source project disclose.io, which aims to create an open-source standard for bug bounties and vulnerability disclosures to help hackers and organizations work together to make the Internet safer.{{cite web |last1=Gallagher |first1=Sean |title=New open source effort: Legal code to make reporting security bugs safer |url=https://arstechnica.com/information-technology/2018/08/new-open-source-effort-legal-code-to-make-reporting-security-bugs-safer/ |website=Ars Technica |access-date=17 October 2023 |language=en-us |date=2 August 2018}}{{cite web |last1=Haworth |first1=Jessica |title=Open source Disclose.io framework bridges legal gap in bug reporting |url=https://portswigger.net/daily-swig/open-source-disclose-io-framework-bridges-legal-gap-in-bug-reporting |website=The Daily Swig |publisher=PortSwigger Web Security |access-date=17 October 2023 |language=en |date=14 August 2018}}
The company also runs Bugcrowd University, which provides educational resources to help the public learn how to code, find bugs in security systems and patch them.{{cite web|url=https://searchsecurity.techtarget.com/tip/Top-10-cybersecurity-online-courses|title=Top 10 cybersecurity online courses for 2021|website=techtarget.com|publisher=TechTarget|access-date=2021-07-07|language=en|archive-url=https://web.archive.org/web/20210707123538/https://searchsecurity.techtarget.com/tip/Top-10-cybersecurity-online-courses|archive-date=7 July 2021}}{{cite web |title=Bugcrowd University Opens Its Doors to the Crowd |url=https://www.bugcrowd.com/press-release/bugcrowd-university-opens-its-doors-to-the-crowd/ |website=Bugcrowd |access-date=17 October 2023 |date=8 August 2018}}
See also
References
{{reflist}}
External links
- [https://www.bugcrowd.com Company Website]
Category:Companies based in San Francisco