Reviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
51 reviews
from
External reviews are not included in the AWS star rating for the product.
Working with Bugcrowd since 2016
What do you like best about the product?
I’ve been on Bugcrowd since 2016, and it’s the only platform I actively hunt on. I’ve tried other platforms over the years, but Bugcrowd still feels the best in terms of usability, transparency, and fairness. The dashboard is simple to navigate, programs are clearly explained, and the triage team has always been professional and helpful. I also like how transparent they are with communication and how easy it is to keep track of submissions and payouts. It just feels like they’ve built it with both researchers and customers in mind.
What do you dislike about the product?
Overall, my experience has been very positive, but sometimes the triage process can take longer than I’d like, especially during busy program periods. Also, there are moments when I wish there was a more direct way to talk to program owners for quick clarifications. Reward processing has been smooth most of the time, but on rare occasions it can be delayed. None of these are dealbreakers, though — just areas where I think Bugcrowd could make an already great platform even better.
What problems is the product solving and how is that benefiting you?
Bugcrowd connects me with a wide range of real-world security programs from companies I’d never have direct access to otherwise. They take care of the legal, payment, and coordination side of things, so I can focus on hunting and improving my skills. The triage team filters reports and handles communication with program owners, which saves me time and avoids misunderstandings. Over the years, this has helped me grow as a researcher, stay motivated, and earn a steady stream of rewards while working on challenging and interesting targets.
Review from 9 years of hunting on Bugcrowd
What do you like best about the product?
I've been hunting on Bugcrowd since a long time. And through all these years, the one quality I observed in the overall proceedings of Bugcrowd is about the sense of cooperation and supportive attitude that their team possess towards the crowd. Now whether it's about a support ticket or triage processes. "Cooperation" from the platform was one of the major reasons that even as a full time bug hunter, I invest a major part of my time bug hunting for the programs available on the "Bugcrowd".
What do you dislike about the product?
I dislike it when, even for a simple reported bug, the triage team places multiple blockers on researchers without fully reading the report or attempting the provided steps.
What problems is the product solving and how is that benefiting you?
Bugcrowd owns the expertise of a crowd which constitutes hundreds of thousands of skilled ethical hackers and cyber security researchers from all across the globe. This massive crowd is capable of uncovering the most unanticipated and never before seen security flaws (or bugs) in organizations critical assets which would otherwise never be possible to determine using the traditional pentests.
Efficient and rewarding platform for responsible disclosure
What do you like best about the product?
Bugcrowd streamlines vulnerability disclosure through a clean interface, actionable scopes, and responsive triage. The platform makes it easy to stay focused on testing thanks to solid integrations, detailed target info, and good researcher communication. I also appreciate the integrity and professionalism of the triage team — they’re security-aware and fairly fast with updates, which keeps momentum going.
What do you dislike about the product?
Some programs still suffer from poor response times or unclear scoping, and rewards can vary drastically between targets with similar risk. I’d like to see better transparency around disclosure timelines and program-side SLAs. Additionally, the analytics or reporting dashboard for researchers could use a revamp for clearer visibility into submission trends and reward patterns.
What problems is the product solving and how is that benefiting you?
Bugcrowd bridges the gap between security researchers and organizations by providing a structured, centralized platform for responsible vulnerability disclosure. It eliminates the friction of cold outreach, legal uncertainty, and unclear expectations by enforcing clear scopes and communication workflows. This lets me focus entirely on testing and reporting, knowing there’s a process in place to ensure findings are reviewed and handled. It also opens access to a wide range of programs that would otherwise be difficult to engage with directly — expanding both learning opportunities and financial incentives.
Amazing platform
What do you like best about the product?
TPM, colleagues, support
Imagine what you want in view of support and you get it here
Imagine what you want in view of support and you get it here
What do you dislike about the product?
Nothing is there which can be called as dislike
What problems is the product solving and how is that benefiting you?
As a product security engineer i don’t get much time to look into todays hack world, bugcrwod provides me with the clients who want applications to be tested and this is what make me feel back in the game
Bugcrowd Helps Me as a Full-Time Hunter
What do you like best about the product?
The triage quality is solid, response times are fair, and the platform doesn’t get in my way when I’m focused on practical impact. I also like that programs are often more receptive to critical exploit chains, not just single-issue bugs.
What do you dislike about the product?
Lack of asset clarity in some programs wastes time. I also wish analytics and submission filtering had more depth to support hunters who operate at scale.
What problems is the product solving and how is that benefiting you?
Bugcrowd bridges the gap between skilled hunters and companies with real attack surfaces. It gives me legal, structured access to targets I’d never get otherwise, and that turns raw exploit chains into paid outcomes.
Review for G2 bugcrowd
What do you like best about the product?
It's it security architecture that I have studied especially the big bounty program
What do you dislike about the product?
They can have more such incentives and add more bounties that can help people and companies grow
What problems is the product solving and how is that benefiting you?
It can help me in catching bugs
Using bugcrowd for security research and bug hunting.
What do you like best about the product?
The triage response and also the platform itself.
What do you dislike about the product?
I have seen no downsides about using bugcrowd.
What problems is the product solving and how is that benefiting you?
Finding vulnerabilities using the crowdsourced ethical hackers.
Collaborative Crowdsourcing for Enhanced Cybersecurity
What do you like best about the product?
What I appreciate most about Bugcrowd is its collaborative approach to cybersecurity. The platform brings together a diverse community of ethical hackers and security professionals, empowering them to contribute to real-world security challenges. This collective intelligence not only enhances the security posture of organizations but also creates a dynamic environment where continuous learning and skill development are encouraged. Additionally, Bugcrowd's focus on transparency, fairness in rewards, and providing a platform for both experienced and novice hackers to contribute makes it a unique and impactful leader in the field of crowdsourced security.
What do you dislike about the product?
One area of improvement for Bugcrowd could be enhancing the communication and feedback loop between researchers and program owners. At times, the response times or clarity of feedback can be inconsistent, which may lead to frustration for researchers who are seeking more timely or detailed guidance on their submissions.
What problems is the product solving and how is that benefiting you?
Bugcrowd addresses the challenge of identifying and mitigating security vulnerabilities by leveraging a global network of skilled ethical hackers. This crowdsourced approach allows organizations to detect and resolve security issues more efficiently than traditional methods. For me, it provides access to diverse security expertise, ensuring a more comprehensive and robust security posture, ultimately reducing the risk of breaches and enhancing overall system resilience.
Bugcrowd is a great security partner
What do you like best about the product?
The Bugcrowd team and community is fantastic. I highly recommend using Bugcrowd for bug bounty, vulnerability disclosure and pen testing programs.
What do you dislike about the product?
I have no notes. I love the service and the system that's built around it.
What problems is the product solving and how is that benefiting you?
Bugcrowd has delivered a managed bug bounty and vulnerability disclosure program that has been maintainable with the help of the Bugcrowd team.
Excellent customer support with well thought-out bounty programs.
What do you like best about the product?
Attack validation and prioritization. Customer support is excellent. The platform is easy to use and provides a number of features that make it easy to integrate with Slack, JIRA, and other platforms.
What do you dislike about the product?
The workflow, especially the names of each stage, was not intuitive and required some coaching.
What problems is the product solving and how is that benefiting you?
Bugcrowd platform enabled us to expose multiple platforms/solutions to many ethical hackers to gain a fresh perspective on our security posture and identify issues that we have missed with internal security testing, SAST, and DAST tooling. In a short period, they managed to detect issues that went by unnoticed even by the external penetration testing and we are now in a much better shape.
showing 1 - 10