bugcrowd

The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™

[bugcrowd @Bugcrowd]

@monkehack Full video:
https://t.co/ztsvbd1RjT

[bugcrowd @Bugcrowd]

Everyone has their own unique bug bounty starting story. 📖 

@monkehack shares how he started and how bug bounty helped him land a job!

[bugcrowd @Bugcrowd]

2 truths and a lie: government VDP edition 👀

1️⃣ Good-faith hackers need a safe way to report vulnerabilities
2️⃣ Launching a VDP during an election year can show proactive leadership
3️⃣ Opening a VDP means your team will be flooded with unmanageable reports

If you guessed #3 as the lie, you're correct.

A managed VDP is built to help reduce noise, not add to it 🫣

With scope, rules of engagement, triage, and deduplication built in, state and local governments can create a clear path for responsible disclosure without overwhelming their teams.

See the 3 full myths: https://t.co/ODu6WUPLDt

[bugcrowd @Bugcrowd]

EU security teams shouldn’t have to choose between global security expertise and regional data requirements.

With Bugcrowd’s EU data residency option, organizations can access our global crowd and expert support while keeping PII and vulnerability data in the EU.

🔗 https://t.co/xhLp7EE9Sc

[bugcrowd @Bugcrowd]

@hbenja_m Full video:
https://t.co/2xorBiHAd5

[bugcrowd @Bugcrowd]

You shouldn’t settle for alert(1) ❌ 

But, how do you escalate impact?

@hbenja_m shows how to increase the impact of reflected XSS.

Check it out. 👇

[bugcrowd @Bugcrowd]

Most security teams have plenty of findings. What they need is confidence in what to fix first.

That’s where a mature bug bounty program starts to look different. Not as another stream of tickets, but as a way to bring trusted hacker insight into the places your team needs more visibility 🤏🥽

Join our live AMA to hear how Trustpilot thinks about program maturity, better hacker engagement, and turning vulnerability discovery into business-ready action.

We’ll talk through how the right program helps teams move from more findings to better decisions.

🗓️ July 1
🕙 10:00am BST

Add it to your calendar: https://t.co/GUsTEFrve1

[bugcrowd @Bugcrowd]

@monkehack Full video:
https://t.co/ztsvbd1RjT

[bugcrowd @Bugcrowd]

Should you turn your bug bounty hunting into your career?

@monkehack gives a quick insight! 🤓

[bugcrowd @Bugcrowd]

@InsiderPhD Full video ⬇️ 
https://t.co/b7KjJiWw5O

[bugcrowd @Bugcrowd]

/search?q=<script>alert(1)</script>

You dropped this payload, nothing happened. 😫 

Now what?

Check this quick explainer by @InsiderPhD on what to do after sending your failed XSS payload. 😏

[bugcrowd @Bugcrowd]

📢 Building a successful bug bounty program requires a strong foundation of trust, clear triage processes, and a commitment to continuous testing.

Moving from annual audits to continuous testing lets you find vulnerabilities as code changes. This creates a predictable workflow where external researchers safely report findings, giving developers the clear data needed to fix bugs faster. A win-win for everyone. 🥇

Read the full interview with our CISO & CIO, Nick McKenzie, at Tech Nadu: https://t.co/zxZu8rQbCc

[bugcrowd @Bugcrowd]

Full video:
https://t.co/ztsvbd1RjT

[bugcrowd @Bugcrowd]

When you start bug bounty hunting, it can feel like larger companies will be more secure. You'd be surprised!

[bugcrowd @Bugcrowd]

Preemptive security starts before the attacker has the advantage.

🎙️ Joe Castellanos, Senior Director of Product Management at Bugcrowd, shares how security teams are moving beyond reactive vulnerability management toward continuous, attacker-informed testing.

From shifting testing left in the SDLC to understanding your external attack surface from the outside in, this is a good watch for teams building a program designed to reduce risk earlier.

Watch the full discussion: https://t.co/F5V4S4RB9y

[bugcrowd @Bugcrowd]

As automation and AI continue to accelerate security operations, the role of security researchers is becoming more critical to defensive strategy 🧑‍💻‼️

While tools can scan code and surface anomalies at a massive scale, they lack the contextual nuance required to validate complex business logic flaws.

Relying entirely on automated triage often results in a flood of false positives that exhausts internal teams. Integrating a human layer ensures that security operations can quickly separate meaningful exposure from background noise. 🤝

Watch the full video interview with our CTO, Braden Russell, at Tech Nadu: https://t.co/umhSy1y6im

[bugcrowd @Bugcrowd]

Securing 7.5B+ transactions while maintaining strict compliance takes incredible agility. 👌

That’s why Moneytree has anchored its offensive security on Bugcrowd for nearly a decade. The secret to their 10-year ROI is our built-in triage engine.

By ensuring only validated, actionable vulnerabilities reach engineering, they reduce risk without sacrificing shipping velocity.

💸 See how this partnership scales: https://t.co/GyAimDrH6V

[bugcrowd @Bugcrowd]

@hbenja_m Full video:
https://t.co/2xorBiHAd5

[bugcrowd @Bugcrowd]

Reflected XSS to stored XSS via cache misconfig flaw. 

How? 🤔 

@hbenja_m explains.👇

[bugcrowd @Bugcrowd]

@p0psec @Chipotle Congrats @p0psec! 🎉👏