Bugcrowd
InformationalBugcrowd
Definition
Bugcrowd is one of the leading bug bounty and crowdsourced-security platforms. It offers vulnerability reward programs, managed pentesting and surface-management services. It stands out for its managed triage, where a Bugcrowd team validates reports before forwarding them to the client, and its Vulnerability Rating Taxonomy (VRT) for classifying severity.
Impact
Managed triage that filters reports before they reach the clientVRT (Vulnerability Rating Taxonomy) system for standard classificationPrograms from companies like Tesla, Mastercard, AtlassianKudos system and leaderboards by vulnerability categoryPublic and private programs with different reward levels
Examples
Bugcrowd Vulnerability Rating Taxonomy (VRT)
Bugcrowd's VRT classifies vulnerabilities into categories with predefined priorities (P1-P5). For example: SSRF to the internal network is P1 (Critical), stored XSS is P2 (High), CSRF with limited impact is P3 (Medium), Open Redirect without chaining is P4 (Low). Knowing the VRT helps you prioritize which vulnerabilities to hunt and how your report will be assessed.