Bugcrowd Blog

Moving Fast with Security

Posted by Ron White on Sep 18, 2017 10:15:00 AM

Our driving purpose at Ibotta is to reward our users with cash rebates that make a difference in their lives. They have entrusted their earnings with us, and it’s our responsibility to do our best to safeguard their accounts.

Read More
Guest Blog, Case Studies

Case Study: Barracuda's Fully Managed Bug Bounty Program

Posted by Payton O'Neal on Mar 23, 2017 9:00:00 AM

In 2010, Barracuda Networks was one of the first organizations to launch a formal bug bounty program. Since then, Barracuda has paved the way for other organizations to launch programs in order to collaborate with the independent research community and improve their overall product security programs.

Read More
Case Studies

Industry Spotlight: How Security Vendors Use Bug Bounty Programs

Posted by Payton O'Neal on Mar 21, 2017 8:49:19 AM

Bugcrowd bug bounty programs launched by security vendors have tripled over the past two years and represent the fifth largest industry on the Bugcrowd platform.

Read More
Case Studies

Case Study: Twilio's Bug Bounty Program Over the Years

Posted by Payton O'Neal on Jan 17, 2017 6:37:00 AM

After two and a half years of running an outstanding bug bounty program with Bugcrowd, we’d like to shine a spotlight on one of our most engaged customers–Twilio.

Read More
Case Studies

Case Study: The ROI of Okta's Bug Bounty Program

Posted by Payton O'Neal on Jan 5, 2017 11:21:42 AM

A few months ago we celebrated the launch of Okta's public bug bounty program after having run a private program for years. Today, we're taking a closer look at how their bug bounty program has influenced their application security program.

Read More
Case Studies

Case Study: Aruba's Private Bug Bounty Program

Posted by Payton O'Neal on Dec 1, 2016 8:01:00 AM
After over two years of running an outstanding bug bounty program with Bugcrowd, we’d like to give some recognition to one of our longest standing and committed customers–Aruba Networks.
 
Since 2014, Aruba has successfully leveraged Bugcrowd’s most skilled and trusted researchers through a private bug bounty program for their web applications and hardware devices. Download the Aruba Case Study to learn more about their success.

 

Read More
Case Studies

[Guest Blog] Skyscanner's Adventures in Bug Bounties

Posted by Payton O'Neal on Apr 27, 2016 11:07:19 AM

Posted originally on by Stuart Hirst on Skyskanner's Code Voyager Blog

Skyscanner has a culture of innovation and continuous improvement. For our IT security function, the ‘Security Squad’, it is no different. External security testing had previously taken the form of standard penetration testing, which brought considerable value and helped improve security posture. However, our Squad wanted to look at new ways of testing the products that we help secure on a daily basis. In early 2015, we began to investigate the possibility of a crowd-sourced testing mechanism.

Read More
Guest Blog, Running Your Own Program, Case Studies

Increasing pen test results by 8x: The Instructure Story

Posted by Bugcrowd on Feb 5, 2015 3:04:00 AM

Since 2011, Instructure has proactively publicized the results of their annual penetration test reports to provide transparency around the security of their learning management system. From 2011 to 2013, these pen tests discovered an average 7.6 valid vulnerabilities each year.

Read More
Running Your Own Program, Case Studies