Bugcrowd Reviews, Ratings & Features 2026 | Gartner Peer Insights

The purpose of this market is to cover the crowdsourcing marketplace for testing, which we will refer to as crowdtesting. There are two main categories of crowdtesting services; vetted communities and unvetted communities. Vetted implies that the individuals have been vetted and verified by the crowdsourcing firm before connecting them with a client. There are also full service providers offering crowdtesting. This market concentrates on the pure-play vetted and unvetted providers.

Active

Find the top Application Crowdtesting Services with Gartner. Compare and filter by verified Offering reviews and choose the service that’s right for your organization.

Application Crowdtesting Services

Bugcrowd

IT SECURITY ENGINEER L2

Bugcrowd is one of the most recognized companies in the cyber security industry. Bugcrowd provides a leading platform to manage bug bounty programs for many organizations through bug bounty programs and crowdsourced security testing. Bugcrowd provides a streamlined workflow for identifying vulnerabilities and how to remediate them. Bugcrowd provides integration capabilities with tools like JIRA and Slack which can be helpful in streamlining the overall vulnerability process. 

500M - 1B USD

<50M USD

1B - 3B USD

50M - 250M USD

Gov't/PS/ED 5,000 - 50,000 Employees

250M - 500M USD

3B - 10B USD

10B - 30B USD

30B + USD

VP Engineering

At the end of Q2 2018 I contacted a sales rep at Bugcrowd to see if they were able to do a price cut to hit sales numbers.  They obliged and gave me a great deal.  The handoff to the Solutions Architect was smooth but soon after working with him I started to see the problems.  I had very explicit scope I did not want tested. This scope was immediately ignored by the solutions architect and every single person I dealt with after.  The scope was very explicit not to make new accounts, but to use the ones created for them.  Multiple internal Bugcrowd employees ignored my request, and then followed by multiple researchers who had this scope explicit in their req.  I let them know every time they didn’t follow this process, informing them it is not acceptable as they were entering our sales channels.  I informed them if it continued to happen, that the benefit of using Bugcrowd would be outweighed by the negatives of researchers not following this outlined process.  I then informed Bugcrowd if it continued to happen I will request a refund.  The issue continued so I requested a pro-rated refund.  I was denied and then was asked if I could do something on my end to prevent their process of not following directions.  I informed Bugcrowd to pause the program because it doesn’t make sense for me to hardcode around their email addresses for their own lack of control and that the Bugcrowd platform from now moving forward has no use to me.   

Over the 5 months I have been using their program I did not see material results until month 4.  In that month they were all very low priority bugs, some worth fixing, some not. 

I do not recommend their products if you want anything more than a rubber stamp of having a ‘bug bounty program.’  


CHIEF INFORMATION SECURITY OFFICER

Bugcrowd researchers have provided an excellent level of service building confidence that the most difficult to reach vulnerabilities are identified which enables our team to resolve and uplift controls in an efficient manner.  I consider BugCrowd my most important security control as it addresses where we have the highest level of risk-our external attack surface.

HackerOne

Other...

Synack

YesWeHack

Cobalt

crowdsprint (a Revolution IT company)

Rainforest QA

Mob4Hire

test IO

Intigriti

Testunity

Bugcrowd is a San Francisco-based security company specializing in crowdsourced security solutions. The company offers organizations a proactive approach against potential threats. By using an AI-driven platform, Bugcrowd unites the organization with trusted hackers who aim to safeguard assets ahead of malicious attacks, offering control against such actions. This cohesive approach enables an anticipative breach prevention, helping organizations stay ahead of sophisticated threat actors.

We are a crowdsourced security company that safeguards organizations' assets from sophisticated threat actors before they can strike‚Äîby uniting our customers with trusted hackers via our AI-powered platform to take back control and stay ahead of attackers. 

Based in San Francisco, Bugcrowd is backed by Blackbird Ventures, Costanoa Ventures, Industry Ventures, Paladin Capital Group, Rally Ventures, Salesforce Ventures and Triangle Peak Partners. 

Reviews

Ratings Overview

Overall experience with

Favorable Review

Detailed Vulnerability Reports From Bugcrowd Reduce Investigation Time for Security Teams

Critical Review

Extremely disappointed with with Support and Ops Management.

Likes and dislikes about

likes

dislikes