Announcing a major update to our program reporting within the Insights dashboard
Utilizing the knowledge gathered from our 4+ years of experience offering managed bug bounty services, coupled with extensive feedback from our customers, we’ve made significant improvements to provide actionable and educational bug bounty program metrics. These new updates to the Insights dashboard will empower customers to run healthy, efficient, and effective bug bounty programs.
A high-level view of your program’s performance and vulnerability trends is a vital part of running a successful bug bounty program. With this major update, Crowdcontrol gives program owners an in-depth view of program performance, team response time, bounty spend, and exportable results for custom reporting.
This update builds on many of our recent Crowdcontrol updates, such as the enhancement of the vulnerability submission form, enabling us to track bounty trends by specific targets, technical severity, and vulnerability types. The integration of our Vulnerability Rating Taxonomy provides rich information about the types of security flaws. These underlying enhancements make it simple to sort and filter results, delivering the most powerful reporting for bug bounty programs.
This report allows you to track your activity over time to see trends in submission volume, and severity. It further breaks down submissions by vulnerability type and target, allowing you to see where and how flaws are surfacing in your program.
Program performance gives an overview of how quickly submissions are moving through your processes. The breakdown by severity is key for organizations with SLAs around high-severity vulnerabilities.
Bounty Spending allows you to see where bounties are being rewarded by target, and provides high-level metrics about your rewards.
Specify a more granular view of the report by using extensive filtering functionality provided on the Insights dashboard.
In addition, you can now export a PDF or CSV file of the selected data - allowing for custom reports in Excel or your tool of choice.
We’ll be releasing a three-part blog series in the coming weeks to give even more detail in how program owners can use Insights to enhance their program performance.